{"report_id":"ec1ef161-8db8-49f8-9b72-aac765236144","version":6,"status":"done","tags":[],"date":"2026-05-30T00:38:29Z","url":{"schema":"https","addr":"amlchecks-bot.net/","fqdn":"amlchecks-bot.net","domain":"amlchecks-bot.net","tld":"net"},"ip":{"addr":"172.67.168.131","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"amlchecks-bot.net/","fqdn":"amlchecks-bot.net","domain":"amlchecks-bot.net","tld":"net"},"title":"AML Check","dom":{"size":344,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (344), with no line terminators","md5":"f5a56e337da74d1d8a678e5ee87819ce","sha1":"13012f95517be408c61bc4e15ea3c2f8103b8bae","sha256":"ad9ec7ff326f10ff4ff98b3c707ef3e8f6e612915f22c71c93f4007ab043c3e5","sha512":"af91d7d96a6c63da27b8b22b930cb99e929e49775a9711b1647694dfbe9730bf6ec6b31edf5556996c56df844b7f94a0637e8ab1d6ee23ef6a3e108699371c20","ssdeep":"","tlshash":"4fe026ea5c6ac83475f4138a60f5e29c167061a0bb11da0482d9dc3a8e20fe78ca2d5c","dom_hash":"domhashfa92bf49a0529f3ae8099507699ba65b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"amlchecks-bot.net/","fqdn":"amlchecks-bot.net","domain":"amlchecks-bot.net","tld":"net"},"ip":{"addr":"172.67.168.131","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-04T00:38:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"amlchecks-bot.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-24T22:18:17.447529Z","alert_count":0,"request_count":1,"received_data":49366,"sent_data":557,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-05-24T22:42:04.857446Z","alert_count":0,"request_count":1,"received_data":152155,"sent_data":446,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"amlchecks-bot.net","ip":{"addr":"172.67.168.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-29","domain_rank":0,"first_seen":"2026-05-30T00:38:30.874325Z","last_seen":"2026-05-30T00:38:30.874325Z","alert_count":32,"request_count":32,"received_data":2159341,"sent_data":18251,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"64.233.162.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-24T22:21:07.624228Z","alert_count":0,"request_count":1,"received_data":3241,"sent_data":469,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"amlchecks-bot.net/","fqdn":"amlchecks-bot.net","domain":"amlchecks-bot.net","tld":"net"},"ip":{"addr":"172.67.168.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"61f8bb51438d223575ff3493a2ca1323","sha1":"5e0e260a716f5893b64e9365db3711ba44c9054c","sha256":"d81ddd9253b981e55211a61e9080fef923fc62b8a919a7aeb79148092df15f43","sha512":"47187bd2867fda99c84b83a79c1ca5564122997e68d37c89eb0fd5063bbb24dc7974613b553f28efc3b06cdc519377c59dfcec51c2f556d2c97bf4317f8b27d2","ssdeep":"","tlshash":"cf5136187bb2017650b301aa7fff928d716010572d57ec28ba5db8147ff8f162119ae8","size":3145,"data":"","first_seen":"2026-05-30T00:38:34.490388Z","last_seen":"2026-05-30T00:38:34.490388Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlchecks-bot.net/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"amlchecks-bot.net","domain":"amlchecks-bot.net","tld":"net"},"ip":{"addr":"172.67.168.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8646b7dff01f14720fdf9064d62f038f","sha1":"e78b9adae10147e08150264fe8dbaba40adbd51a","sha256":"4257cc1a7d5cf025f34f0bfea0c639fd0a6cfaed3f8fde2e32f08b8d1e49f6b5","sha512":"d4a59094c56bcd109d59e6a45db11cdf28b1afb7fb4aeabe03c08e0b1e4d286adf1e09052e0e295550febd53cbdc78e56bd5668ef8e41134e6a8782a7d17b495","ssdeep":"384:+hx5LmFX32sA7ty58DIF7wPb27b0XZPjlKWjKQt2Nzkxiua4fCrA9UxQg5jX9rv:+hx5LS6ycI6iEJo7NzkxlFEQgvv","tlshash":"43b2d3ec7de6f41923216cf800173cd7727e7c81b50c57ac8601a5a4bca0776ae7a99d","size":24452,"data":"","first_seen":"2026-05-30T00:38:34.478788Z","last_seen":"2026-05-30T00:43:34.768961Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlchecks-bot.net/source/js/script-Dut2HEAs.js","fqdn":"amlchecks-bot.net","domain":"amlchecks-bot.net","tld":"net"},"ip":{"addr":"172.67.168.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1cd2ff67604b3f59c4d833f685a406ce","sha1":"5b7272c03b4c4e9bbbe6651672d4266c8283b025","sha256":"9a2349f376e92961d32e82a9122e78afe39cbafb84e14ce0fa3b0c4b6bcb3ea7","sha512":"07d4409400ff096f738c4be453b227fad014af7c251c6bc73f54793e67d32b0608dcf491596f833a6c9d541a9b92ba491ee146bc87a15f21b4f7c2838e54afa3","ssdeep":"","tlshash":"7e51113b12746079417ba407779dabc5ba3500cf945728253d1c8e9e4f6ca7a02f17f1","size":2806,"data":"","first_seen":"2025-04-08T20:33:55.240479Z","last_seen":"2026-05-30T00:52:26.368535Z","times_seen":245,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@11.1.10/swiper-bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b9d0dbc7df811ed0a65701943b8c12fc","sha1":"01ef014f87cf5f82a0cd2c0726481872f4d4e308","sha256":"42484af966ddbce30db2ac6329e585f1ba52210a0a205ce7be52d71d3ece960e","sha512":"ba68e27e7a02c37c451223fdbd3f713245073eb987aac0e180f2528a8e3e966246d086f1d95aed47206c4ec7be8261adb169321d4856a00f60bd5d57f325f875","ssdeep":"1536:WKJjMfGmX0xw8NfmvSlk13Oa2BlxvHepwkEl+m9NuRF1Cjmy/BnmYlyshEKkMv3X:LJccdNWoapwkEwMBnIshEKB3hDpi7UJ","tlshash":"54e3e889a220b67656e3169b93e4c221b3b54540b80ac4f470fd4c9f597ec9813feef9","size":151361,"data":"","first_seen":"2024-08-21T12:55:58.905219Z","last_seen":"2026-05-30T00:52:26.367716Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlchecks-bot.net/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"amlchecks-bot.net","domain":"amlchecks-bot.net","tld":"net"},"ip":{"addr":"172.67.168.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-05-30T04:01:48.207989Z","times_seen":354733,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlchecks-bot.net/source/js/burger.js","fqdn":"amlchecks-bot.net","domain":"amlchecks-bot.net","tld":"net"},"ip":{"addr":"172.67.168.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3dba819c7b54c03ba0affa1e69e9877b","sha1":"dc1230e6a2f9bcd7d8d1cc2cdbcb70df08d09d45","sha256":"b81fb4c24e9ac8a64d311c14d59a2c8899b4a54009a0408dfd7755f8768c960a","sha512":"392ebe621824e7448db3285764f8c815abba081fcc9bdbaf6cf6a0e237cde682fd15249b9e4758c7f19381ec58d0b3bf7f37c381e5de57acdf94702f9b42d5a2","ssdeep":"","tlshash":"d001f92983341e7e80bf4499b3c759dd2f3880c7944588663adc9f0d1f85ad095f21eb","size":791,"data":"","first_seen":"2025-04-08T20:33:55.243226Z","last_seen":"2026-05-30T00:52:26.340603Z","times_seen":237,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d7b13254171516f63cb335eac17abd0","sha1":"2ffa844451a349e629a7b0d0d42b2b28b70416e1","sha256":"440010d4f2a71f4cf4a3c0373cd1968e5d9cf82aca6abbbfecd478870f78665a","sha512":"9e0ae5155d184389f3e41d6a3264ec1afc5543ea2ba144be233b50bf55e500091fca0b2f1e7938d7d2616a85ac943887aefa6577d661db8c19261398b9527652","ssdeep":"","tlshash":"fbd023555c75843072e8034b60b5d3d535b130b077115e00c1cdcc2f5e20ee344b1d5c","size":217,"data":"","first_seen":"2026-05-30T00:38:34.492349Z","last_seen":"2026-05-30T00:38:34.492349Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlchecks-bot.net/","fqdn":"amlchecks-bot.net","domain":"amlchecks-bot.net","tld":"net"},"ip":{"addr":"172.67.168.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8b9b1547c2f7147b97b684cb143e4e36","sha1":"a97fcbdf98ac14a5c37ffa0cc9e76897cc9d9518","sha256":"70f94168d78d9ba7ffc4eb037d1ac6bd6efbcdc98b0e808e604d34816586af64","sha512":"65461747ce97144d99ad6fda7c30e47309e968c99c0dfb323be48d9dcc9278d2d52c0ca0cc4d1816330bf96b7b5fa9302bca688fd37cc465e5fe78caacef92f7","ssdeep":"","tlshash":"8f1100753a1a1534d6d5418b317ee7a93d3220717a029044c2accc289d18ed714efcbe","size":902,"data":"","first_seen":"2026-05-30T00:38:34.494421Z","last_seen":"2026-05-30T00:38:34.494421Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"amlchecks-bot.net/source/images/home-image-gzJaQJ7U.png","fqdn":"amlchecks-bot.net","domain":"amlchecks-bot.net","tld":"net"},"ip":{"addr":"172.67.168.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlchecks-bot.net/","date":"2026-05-30T00:38:08.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecks-bot.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 02:39:01 GMT","end":"Thu, 27 Aug 2026 02:39:00 GMT"},"fingerprint":{"sha1":"87:98:84:90:41:5F:F5:2A:88:C2:D6:D8:95:2B:BB:11:00:84:5D:70","sha256":"37:85:71:58:FF:55:CE:D9:D7:36:6F:24:0F:AC:93:71:E0:E8:D7:EE:DF:41:06:EF:64:8C:6D:69:1E:B5:5A:E6"}}},"request":{"raw":"GET /source/images/home-image-gzJaQJ7U.png HTTP/1.1\r\nHost: amlchecks-bot.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecks-bot.net/\r\nCookie: connect.sid=s%3ASuXcN9rSrfy9SmJBsLOTwPT7u_oD9KZP.HEId5flaxNa2LBM8xz1GstgH%2BeaQu1j1kMngnso5LiQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 30 May 2026 00:38:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 146551\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 26 Feb 2026 20:18:48 GMT\r\netag: W/\"23c77-19c9b9aa3a1\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wysR8u1e0wmnVOuTD%2FNwMuEWcjs0yA8GvSpnF7Afn%2B5V8V%2FhPox7uMel0Z%2BJep0jyfPR19IYFmS%2FLVXoHwNbHCEnaiDrg6f3ouS%2FAfH%2BEdCNpUzXXg3cW6BKg1oMdR1ZjeI62g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a039ac9dac734e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146551,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1512 x 2130, 8-bit/color RGBA, non-interlaced","md5":"9cad99dbdf29233a3e18fae89cbcdd56","sha1":"05d9639f849359af23082e722dd8bae99bfdf560","sha256":"b005f5a6875b15ca7957b90dbae8cf52e6ff1645b327d4b7ef90892401ffcff5","sha512":"9ab249cc09967d21d5a3cf2b75250c3bcc0305d5c0c693d9c7b55e62dcd0de734950c55f5ec6dcb3b5d091ff6d193892b5b27de3cb6a06065df1f7df84223665","ssdeep":"3072:GaDBLdkD1Y5RW69+1cVOA0gi52BytVMTSqXQfjo/n7:lDBLqqW6NV1+52BytVMuaqc","tlshash":"6fe3e058250b5d6ac84d86358beb4fb5f76c8ad94598fe1b0bb40276bcf7319cc83881","first_seen":"2025-04-08T20:33:55.226246Z","last_seen":"2026-05-30T00:52:26.369806Z","times_seen":461,"resource_available":false,"data":null}},"time_used":438,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":156,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"amlchecks-bot.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecks-bot.net/source/images/1-B8hMQnFc.svg","fqdn":"amlchecks-bot.net","domain":"amlchecks-bot.net","tld":"net"},"ip":{"addr":"172.67.168.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlchecks-bot.net/","date":"2026-05-30T00:38:08.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecks-bot.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 02:39:01 GMT","end":"Thu, 27 Aug 2026 02:39:00 GMT"},"fingerprint":{"sha1":"87:98:84:90:41:5F:F5:2A:88:C2:D6:D8:95:2B:BB:11:00:84:5D:70","sha256":"37:85:71:58:FF:55:CE:D9:D7:36:6F:24:0F:AC:93:71:E0:E8:D7:EE:DF:41:06:EF:64:8C:6D:69:1E:B5:5A:E6"}}},"request":{"raw":"GET /source/images/1-B8hMQnFc.svg HTTP/1.1\r\nHost: amlchecks-bot.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecks-bot.net/\r\nCookie: connect.sid=s%3ASuXcN9rSrfy9SmJBsLOTwPT7u_oD9KZP.HEId5flaxNa2LBM8xz1GstgH%2BeaQu1j1kMngnso5LiQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 30 May 2026 00:38:08 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A%2B32ar6wBLanf1CfQUj1S2s33K91yDfqB48fYK80BZ5eHHmMaQA2EQdYYRy3nB7OIpj8sKz0u07GLheht3H0p9KL9gCoh9AzobHWwpUX5yGX4KCVcbxlRq5AP9g6GKT7PtOv1A%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 26 Feb 2026 20:18:48 GMT\r\netag: W/\"dadf3-19c9b9aa3a1\"\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a039ac9dac754e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":896499,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7e54ee403da676c99d77633c01b606c3","sha1":"351c6bb9a4dba01eed5cc86ac6ae0a38f3e472f6","sha256":"59fee31a79439edb17dccae8553674f87012403c8a486c9b098a1e294c119e65","sha512":"7cc6dd0aea72a3f8e9c324dec727ab5133eef87d600768bf29801201118d4025fae2ce28071582dd3699b13a1ded3f3b78c56aa9fb53a67c7e5d1bcb7a099947","ssdeep":"24576:euayhlfPkhRx15QVsLcIuJ2wStoU6ghC5:eaDex6gW","tlshash":"be151214f80ae5b503bd0a251eb7156c6f748f709895ab8e87ac774683983c0f3ede25","first_seen":"2025-04-08T20:33:55.231096Z","last_seen":"2026-05-30T00:52:26.337523Z","times_seen":438,"resource_available":false,"data":null}},"time_used":592,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":307,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"amlchecks-bot.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecks-bot.net/source/images/team8-Ba7qheCQ.webp","fqdn":"amlchecks-bot.net","domain":"amlchecks-bot.net","tld":"net"},"ip":{"addr":"172.67.168.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlchecks-bot.net/","date":"2026-05-30T00:38:08.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecks-bot.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 02:39:01 GMT","end":"Thu, 27 Aug 2026 02:39:00 GMT"},"fingerprint":{"sha1":"87:98:84:90:41:5F:F5:2A:88:C2:D6:D8:95:2B:BB:11:00:84:5D:70","sha256":"37:85:71:58:FF:55:CE:D9:D7:36:6F:24:0F:AC:93:71:E0:E8:D7:EE:DF:41:06:EF:64:8C:6D:69:1E:B5:5A:E6"}}},"request":{"raw":"GET /source/images/team8-Ba7qheCQ.webp HTTP/1.1\r\nHost: amlchecks-bot.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecks-bot.net/\r\nCookie: connect.sid=s%3ASuXcN9rSrfy9SmJBsLOTwPT7u_oD9KZP.HEId5flaxNa2LBM8xz1GstgH%2BeaQu1j1kMngnso5LiQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 30 May 2026 00:38:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19804\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 26 Feb 2026 20:18:48 GMT\r\netag: W/\"4d5c-19c9b9aa3a1\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j8WDHLeYAcFLLndCx1UC0pzLYnWXqgkg6iPFO5kbWKtCLjRlXHgCx7zDvgQH9P%2FoxFxT7uWhda%2BqN76QDpfNQUVfrGpPjWFSLe%2FSXGhoQdP1r0iZl2%2BPb37mxtO57cEuN8vWig%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a039ac9dbc7e4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19804,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x366, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fd8f7be198d97dbaaa2d1a3b5645191b","sha1":"8ca51f777ba30dbb1f57c755abe0cd17c9ba3ccc","sha256":"3d886348daceeeb72cbb1f157440d88e3cd8e273199f0be11ab8fb489a8d6b60","sha512":"618952eff83f028c6d211dffe0525d2f6c2b957552e33010698dd8119163ccc349d5389c2cd78e0ea58f80ce7e710cbc9417df9d48c33091bd6db2ee3651c910","ssdeep":"384:jnpCiYZLoKv/PpXu2HTr6bhIBuwbIkC5SxpHgoIHEC4Eij4dvvngZp+T:jnBYSa/HHTrqqUwG5cHaLi0d0E","tlshash":"a592d1066158b1a2e7bfe4029bad2daf1d20c2cdb86806534d9cf141d617db27b3f56c","first_seen":"2025-04-08T20:33:55.235982Z","last_seen":"2026-05-30T00:52:26.349566Z","times_seen":432,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"amlchecks-bot.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecks-bot.net/source/images/how-does-DnlstxIX.svg","fqdn":"amlchecks-bot.net","domain":"amlchecks-bot.net","tld":"net"},"ip":{"addr":"172.67.168.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlchecks-bot.net/","date":"2026-05-30T00:38:08.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecks-bot.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 02:39:01 GMT","end":"Thu, 27 Aug 2026 02:39:00 GMT"},"fingerprint":{"sha1":"87:98:84:90:41:5F:F5:2A:88:C2:D6:D8:95:2B:BB:11:00:84:5D:70","sha256":"37:85:71:58:FF:55:CE:D9:D7:36:6F:24:0F:AC:93:71:E0:E8:D7:EE:DF:41:06:EF:64:8C:6D:69:1E:B5:5A:E6"}}},"request":{"raw":"GET /source/images/how-does-DnlstxIX.svg HTTP/1.1\r\nHost: amlchecks-bot.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecks-bot.net/\r\nCookie: connect.sid=s%3ASuXcN9rSrfy9SmJBsLOTwPT7u_oD9KZP.HEId5flaxNa2LBM8xz1GstgH%2BeaQu1j1kMngnso5LiQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 30 May 2026 00:38:08 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AYwmqaQ7fSaD86jAMTlHjebicWO%2FTx76DuRTWjkkYdWfIPtO7xA%2BQQy7ayJVlwNV98eN58ercgdZB7k2qt84T6pLvQWUYCPuWvISONbuyJZh6XVLw8ild0EBt0ditczSEOjzRg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 26 Feb 2026 20:18:48 GMT\r\netag: W/\"1270d-19c9b9aa3a1\"\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a039ac9dac744e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75533,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f74cda42deb365718c80d66ae85c229a","sha1":"4239d279133a77b716a777486656143cf4338569","sha256":"f01c6f20d0beb7cb60a8831b8da262f042cd98a11a758be9032a2459550d4c98","sha512":"d6e3819cb59a1f4e9d1f9802d17c8015e978702b3eeaaeaa4fd61d5bf22a47aae20333fde7abcdb2d450383e9d1617f6edbfd3588d5d0b540376e0dd88a5f7e0","ssdeep":"768:oPk3zyS7R4f5w0BpHL9HMayHkEBGhFUfSmAVg3wTcECVSW7pfxMXuGgNQrdpW4gG:O04o7kF3DTcD7pZy/JkBZga4V","tlshash":"757383dc3f708cc55ec48bdb7f1150ec6a57d5b3aa898e08d15c8f6d088682c9dea983","first_seen":"2025-04-08T20:33:55.218198Z","last_seen":"2026-05-30T00:57:02.787433Z","times_seen":485,"resource_available":false,"data":null}},"time_used":589,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":538,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"amlchecks-bot.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecks-bot.net/source/images/what-else2-c8YgOWn0.webp","fqdn":"amlchecks-bot.net","domain":"amlchecks-bot.net","tld":"net"},"ip":{"addr":"172.67.168.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlchecks-bot.net/","date":"2026-05-30T00:38:08.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecks-bot.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 02:39:01 GMT","end":"Thu, 27 Aug 2026 02:39:00 GMT"},"fingerprint":{"sha1":"87:98:84:90:41:5F:F5:2A:88:C2:D6:D8:95:2B:BB:11:00:84:5D:70","sha256":"37:85:71:58:FF:55:CE:D9:D7:36:6F:24:0F:AC:93:71:E0:E8:D7:EE:DF:41:06:EF:64:8C:6D:69:1E:B5:5A:E6"}}},"request":{"raw":"GET /source/images/what-else2-c8YgOWn0.webp HTTP/1.1\r\nHost: amlchecks-bot.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecks-bot.net/\r\nCookie: connect.sid=s%3ASuXcN9rSrfy9SmJBsLOTwPT7u_oD9KZP.HEId5flaxNa2LBM8xz1GstgH%2BeaQu1j1kMngnso5LiQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 30 May 2026 00:38:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 22208\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 26 Feb 2026 20:18:48 GMT\r\netag: W/\"56c0-19c9b9aa3a5\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OMAY%2BpcObfbATRl12V6plK6ZYLaGG0eaPOv8lDGlXI3pLDtYsGl0%2BHJd4xozJZF7S1SFTJLkCRiySsxj%2BFg8j94ipJWz1g0i03V8YGnexstQoF0LLFMKQ70sqUwEaD4GLZE48A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a039ac9dac774e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22208,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e1e057fdfd21fcb1b20f6dbff68beec6","sha1":"0a1b93824ad73034f0fdcca9cdb69bb141cc766f","sha256":"56999b85ede07c51cb32cbb21169a76bab2fd5396bb1edf7cedf88b1f32c32eb","sha512":"7d78ceee169f2e5309396dec77dae0bded22a9b2f0223308c15019904c203233071bb88f126fb037de94a793ef2d88533dff1cce22efd85216fb2d5f4587385d","ssdeep":"384:VZgiCAV2JY7iTlSiIQigkOzLewew0/dOnPm5FcHCQO5D2p:VYWmTlSiTTLez//dXFcHCQSa","tlshash":"25a2cffc302d028afeedc67b6906af92b9fe14571470ca0d63587a8155906c753cabb8","first_seen":"2025-04-08T20:33:55.221615Z","last_seen":"2026-05-30T00:52:26.366511Z","times_seen":402,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"amlchecks-bot.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecks-bot.net/source/images/oneobmen-CyrSxzF4.webp","fqdn":"amlchecks-bot.net","domain":"amlchecks-bot.net","tld":"net"},"ip":{"addr":"172.67.168.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlchecks-bot.net/","date":"2026-05-30T00:38:08.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecks-bot.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 02:39:01 GMT","end":"Thu, 27 Aug 2026 02:39:00 GMT"},"fingerprint":{"sha1":"87:98:84:90:41:5F:F5:2A:88:C2:D6:D8:95:2B:BB:11:00:84:5D:70","sha256":"37:85:71:58:FF:55:CE:D9:D7:36:6F:24:0F:AC:93:71:E0:E8:D7:EE:DF:41:06:EF:64:8C:6D:69:1E:B5:5A:E6"}}},"request":{"raw":"GET /source/images/oneobmen-CyrSxzF4.webp HTTP/1.1\r\nHost: amlchecks-bot.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecks-bot.net/\r\nCookie: connect.sid=s%3ASuXcN9rSrfy9SmJBsLOTwPT7u_oD9KZP.HEId5flaxNa2LBM8xz1GstgH%2BeaQu1j1kMngnso5LiQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 30 May 2026 00:38:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4282\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 26 Feb 2026 20:18:48 GMT\r\netag: W/\"10ba-19c9b9aa3a1\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OBT4xzUKfco5dr%2BDTDvsD13biDbfpa2WF4H3KewJfhZsQS4jgjCB4LqUkxGY%2FTWPgJIYl5%2B1VZrs3ROzcfNKhFyU1%2F%2FyPVKOKhKfA70uaAv5WaN%2BQqG4PWTGLZYiA%2BPJQp040Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a039ac9dbc804e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4282,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1bc53ee5929fc3195e5adf1d86c72a33","sha1":"a72412370f4ff21cbb9d758dd6d68731356c9276","sha256":"a6264cb3a7fabd924bcd62bee017831472ecd32fc7624700d3df895a0968af7c","sha512":"acda9b9f3a95005731d72c16ff515c0121114d43612838fcc8f34c731741171c37dc2cc4abe9b461a8eed3984249c38c8457c819f9795064eea99e75b0a1b80e","ssdeep":"96:X2mKVaGphCpFLE38bTHNstUDueEtDhT8zCJK6OS+CRC0MwhwH1nf4i7:vgTpuicTtGUDVE3T8zsHCDwhw","tlshash":"d2918fda6a84d4b4d905a77f4af27f40db8423064781075e2157a906fdbc8c854965f3","first_seen":"2025-04-08T20:33:55.235244Z","last_seen":"2026-05-30T00:52:26.347575Z","times_seen":387,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"amlchecks-bot.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecks-bot.net/source/images/cryptohome-Bkw0BUZH.webp","fqdn":"amlchecks-bot.net","domain":"amlchecks-bot.net","tld":"net"},"ip":{"addr":"172.67.168.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlchecks-bot.net/","date":"2026-05-30T00:38:08.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecks-bot.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 02:39:01 GMT","end":"Thu, 27 Aug 2026 02:39:00 GMT"},"fingerprint":{"sha1":"87:98:84:90:41:5F:F5:2A:88:C2:D6:D8:95:2B:BB:11:00:84:5D:70","sha256":"37:85:71:58:FF:55:CE:D9:D7:36:6F:24:0F:AC:93:71:E0:E8:D7:EE:DF:41:06:EF:64:8C:6D:69:1E:B5:5A:E6"}}},"request":{"raw":"GET /source/images/cryptohome-Bkw0BUZH.webp HTTP/1.1\r\nHost: amlchecks-bot.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecks-bot.net/\r\nCookie: connect.sid=s%3ASuXcN9rSrfy9SmJBsLOTwPT7u_oD9KZP.HEId5flaxNa2LBM8xz1GstgH%2BeaQu1j1kMngnso5LiQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 30 May 2026 00:38:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6524\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 26 Feb 2026 20:18:48 GMT\r\netag: W/\"197c-19c9b9aa3a1\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GEni017qX%2FBU6X%2BNarCQEgcJPzKil7i5kafEM4ljLLKZLT4HGPuNCCSWvp3r0BMii80ldcqf05Sdv2SOfuVOhZ79IC6zpLyJ7MrHdV8Kz2BbO4YwMBH0IsYxJm4imIt4sGk1wA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a039ac9dbc814e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":6524,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"10a2a0b43e1c12c0518ee43437610ef9","sha1":"49885aa60fda4e756d9e02516f9e8b4abf0441b5","sha256":"bb65329601cee30def53aeabaa90cca20c36c5c5560c20f6bb7c85f40989f5ef","sha512":"d08a23b1764987b0c01beb8f6f5c5ede4305be744ea396f7c0fa5670a347768123958154f5e34c34fcce6c6b962264327a091c0d82f7b5a53bdbab83782b5c77","ssdeep":"192:K5CHETRBoVjBVHm0hQVK2/R8j+9yYZXa:KAH6R+tsFVNR9a","tlshash":"a0d18fe6236d7678e4546fb4bad993d1a6447a3c84507d37283f8eae7cc56748230dc0","first_seen":"2025-04-08T20:33:55.236886Z","last_seen":"2026-05-30T00:52:26.353631Z","times_seen":388,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"amlchecks-bot.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecks-bot.net/source/images/amlsafe-Dapxivrv.webp","fqdn":"amlchecks-bot.net","domain":"amlchecks-bot.net","tld":"net"},"ip":{"addr":"172.67.168.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlchecks-bot.net/","date":"2026-05-30T00:38:08.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecks-bot.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 02:39:01 GMT","end":"Thu, 27 Aug 2026 02:39:00 GMT"},"fingerprint":{"sha1":"87:98:84:90:41:5F:F5:2A:88:C2:D6:D8:95:2B:BB:11:00:84:5D:70","sha256":"37:85:71:58:FF:55:CE:D9:D7:36:6F:24:0F:AC:93:71:E0:E8:D7:EE:DF:41:06:EF:64:8C:6D:69:1E:B5:5A:E6"}}},"request":{"raw":"GET /source/images/amlsafe-Dapxivrv.webp HTTP/1.1\r\nHost: amlchecks-bot.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecks-bot.net/\r\nCookie: connect.sid=s%3ASuXcN9rSrfy9SmJBsLOTwPT7u_oD9KZP.HEId5flaxNa2LBM8xz1GstgH%2BeaQu1j1kMngnso5LiQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 30 May 2026 00:38:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9844\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 26 Feb 2026 20:18:48 GMT\r\netag: W/\"2674-19c9b9aa3a1\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JU%2B9BhwC2clzWzMPfg%2B4Z%2BE13I78m3T2zufaUeDor0aLzX7XplgLEg6gvpxEVyZmD5h8TkVOEWJReovAARpAMQedAmCVtLdjG86ZesGV2jpO4Zd4fK6z7e2sExGCVdN%2FK4HeIw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a039ac9dbc824e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9844,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f748a3cfd9873d313464f9e4bbcd76f2","sha1":"a83bddfbde067d55b167ec308e126cf8ca62f39d","sha256":"8fbbeb76beafc36aa0ea7fc570774505c2420352539aef015c3de412cf89a6db","sha512":"ef92662bbe1500595f103d365ff34222f0e6b6286dc3dd240f276d2d8965f8cebd9398adc835c0e4e9c1b06ffbef80edfb0084a5d717139bd5ed6edcaecc078d","ssdeep":"192:ZFiBIVp+T5ehnQHhd5BTr2zdmQbkJZaGwcs5LREy:Z7H+T5QnO75B24QbkzcLR","tlshash":"b8121a95884d9044db9790f86f0320b3a9798873cadcae7384fef0a5d7591f19fa9d40","first_seen":"2025-04-08T20:33:55.228278Z","last_seen":"2026-05-30T00:52:26.371107Z","times_seen":386,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"amlchecks-bot.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecks-bot.net/source/images/11-CEJH9EXk.webp","fqdn":"amlchecks-bot.net","domain":"amlchecks-bot.net","tld":"net"},"ip":{"addr":"172.67.168.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlchecks-bot.net/","date":"2026-05-30T00:38:08.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecks-bot.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 02:39:01 GMT","end":"Thu, 27 Aug 2026 02:39:00 GMT"},"fingerprint":{"sha1":"87:98:84:90:41:5F:F5:2A:88:C2:D6:D8:95:2B:BB:11:00:84:5D:70","sha256":"37:85:71:58:FF:55:CE:D9:D7:36:6F:24:0F:AC:93:71:E0:E8:D7:EE:DF:41:06:EF:64:8C:6D:69:1E:B5:5A:E6"}}},"request":{"raw":"GET /source/images/11-CEJH9EXk.webp HTTP/1.1\r\nHost: amlchecks-bot.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecks-bot.net/\r\nCookie: connect.sid=s%3ASuXcN9rSrfy9SmJBsLOTwPT7u_oD9KZP.HEId5flaxNa2LBM8xz1GstgH%2BeaQu1j1kMngnso5LiQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 30 May 2026 00:38:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19946\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 26 Feb 2026 20:18:48 GMT\r\netag: W/\"4dea-19c9b9aa3a1\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YmSHLh5OznMZJWKDGgL1WGfshmrBv6DAD6a7luPCGvMhlvU7PKyYvCqXE%2FnAOy26QzYQOAaqLRj2wUR0uVOrXXMeYYRA9riRvs%2BVtuN%2Bw7Gs9giQq2zVc%2B1t0XtDqC2el5T%2FVw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a039ac9dcc854e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":19946,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d848cc6082d065edec132c04bcc72a1e","sha1":"ee347487fc051c45082e8053d05d06aa37a0dccb","sha256":"ece6e8ca616a5c0416427834c086199980328f18e36c53707dd559cd49f0536f","sha512":"b67c5bd932034b717261d74d10d67fd5d1ab0ca507dd0dcdeb2f1679bc8628d83762af7fbac359fb2148981804a907bc7a138f69d1ceba3ca93f34ebd720668e","ssdeep":"384:qJTRUuDcWFQBZnHM/C0R7YDW1w2gMTFT1eDQTS0VamG7MurCubw/g8qf2Ggt:qX+WFQfs/C27O32gevTS0VamcCRg8qf+","tlshash":"1792e0087400489a87ff0ddaa85f9771534e5edd7c7e00693bf8aa8c93e4a958215f4d","first_seen":"2025-04-08T20:33:55.233493Z","last_seen":"2026-05-30T00:52:26.343662Z","times_seen":428,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"amlchecks-bot.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecks-bot.net/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"amlchecks-bot.net","domain":"amlchecks-bot.net","tld":"net"},"ip":{"addr":"172.67.168.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlchecks-bot.net/","date":"2026-05-30T00:38:08.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecks-bot.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 02:39:01 GMT","end":"Thu, 27 Aug 2026 02:39:00 GMT"},"fingerprint":{"sha1":"87:98:84:90:41:5F:F5:2A:88:C2:D6:D8:95:2B:BB:11:00:84:5D:70","sha256":"37:85:71:58:FF:55:CE:D9:D7:36:6F:24:0F:AC:93:71:E0:E8:D7:EE:DF:41:06:EF:64:8C:6D:69:1E:B5:5A:E6"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: amlchecks-bot.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecks-bot.net/\r\nCookie: connect.sid=s%3ASuXcN9rSrfy9SmJBsLOTwPT7u_oD9KZP.HEId5flaxNa2LBM8xz1GstgH%2BeaQu1j1kMngnso5LiQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Mon, 01 Jun 2026 00:38:08 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pD9ongGOQNEKKWHxbom9LMHgr4jLbvt943nK8%2Fo83acDf11yK2zQOBZsmNqnPGrWNnDpPEmbuH9tOMgYGb22VvtmFwPAKWTjax9cYXgI61hBO%2BcoXJHJbQEtWDKVKZYZgnuXVg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Sat, 30 May 2026 00:38:08 GMT\r\ncf-ray: a039ac9dcc8a4e4c-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-05-30T04:01:48.207989Z","times_seen":354733,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"amlchecks-bot.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"64.233.162.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amlchecks-bot.net/","date":"2026-05-30T00:38:08.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:15 GMT","end":"Thu, 30 Jul 2026 15:53:14 GMT"},"fingerprint":{"sha1":"19:42:B0:56:3A:E4:79:BF:8B:69:E2:50:F4:76:BF:1E:A9:D7:7A:49","sha256":"D7:FF:C1:46:95:F3:5F:08:04:B0:E1:A8:FE:14:FC:60:19:58:D6:C7:D3:6E:82:B3:64:07:E9:E1:CB:9A:27:8C"}}},"request":{"raw":"GET /css2?family=Inter:wght@100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecks-bot.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 30 May 2026 00:38:08 GMT\r\ndate: Sat, 30 May 2026 00:38:08 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2555,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3fcf63d91b46adf99bd3db1a56530254","sha1":"62f7d93d0b191e1e8464958268f225f51dd1752d","sha256":"63867a7c4bb197935b85ada1c4bcbc95951598dfb736b24132f0a43e5e5e365c","sha512":"16d25c5cc841006ca8e86ef334efb051054257e6990275a3a0d1e25f9adc6c665b65ff9083dfc9c409d84b69365a26eb9ba875431ca75765743b70902e684d14","ssdeep":"","tlshash":"0451ab92002ba404ab931dc233cf7f3aaece50856085d2b96ffd1dc65cead66436875d","first_seen":"2025-09-10T17:57:06.167004Z","last_seen":"2026-05-30T02:44:18.406647Z","times_seen":28262,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":86,"dns":1,"connect":16,"send":0,"wait":19,"receive":0,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlchecks-bot.net/source/images/team6-DPDdh9tS.webp","fqdn":"amlchecks-bot.net","domain":"amlchecks-bot.net","tld":"net"},"ip":{"addr":"172.67.168.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlchecks-bot.net/","date":"2026-05-30T00:38:08.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecks-bot.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 02:39:01 GMT","end":"Thu, 27 Aug 2026 02:39:00 GMT"},"fingerprint":{"sha1":"87:98:84:90:41:5F:F5:2A:88:C2:D6:D8:95:2B:BB:11:00:84:5D:70","sha256":"37:85:71:58:FF:55:CE:D9:D7:36:6F:24:0F:AC:93:71:E0:E8:D7:EE:DF:41:06:EF:64:8C:6D:69:1E:B5:5A:E6"}}},"request":{"raw":"GET /source/images/team6-DPDdh9tS.webp HTTP/1.1\r\nHost: amlchecks-bot.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecks-bot.net/\r\nCookie: connect.sid=s%3ASuXcN9rSrfy9SmJBsLOTwPT7u_oD9KZP.HEId5flaxNa2LBM8xz1GstgH%2BeaQu1j1kMngnso5LiQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 30 May 2026 00:38:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8070\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 26 Feb 2026 20:18:48 GMT\r\netag: W/\"1f86-19c9b9aa3a1\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=St1sur3PM4MWDhHVwO%2B7dY%2BRf7QWxAz%2B5ReevdRTkAKZrVvPZKM7XFwX8jLhDEjxjTWyhLDLbVAH%2Bh8cKrFLAGDn2jrnAdDZkJmrJPkuzKKm4BuVzr2xS2UHOPAeU9s7Pvz4Hg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a039ac9dbc7c4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":8070,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x366, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ff92c5d0702748d4fd4a7598287b52e9","sha1":"1c52f75273473401f01060b11732c9f2b93bdec0","sha256":"4678f709196922389c98ba22c894212e124843154455769551b2af283e2afb78","sha512":"0d728fb2b6b205466fda940e0732da04c5bd6f42a17a266ba871e2412d285caada5814ed15240ebfa942798871c2de97ee109cd16856da574255de2ba4abca5c","ssdeep":"96:Ag9uYyKIvVYX1msb1sbUItmcdl0+InYMAXAf6glqBTTCxBd5bIe75fPM8Hif/pDq:V94J+8sRYHzM3dtPMSifFKXG+8W9fJ","tlshash":"d7f1c0157ba4493c6ee08b78d1f4e6827ef5dd0946f37d1a580518f43c2d690390bb26","first_seen":"2025-04-08T20:33:55.234306Z","last_seen":"2026-05-30T00:52:26.346126Z","times_seen":431,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"amlchecks-bot.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecks-bot.net/img/cost.png","fqdn":"amlchecks-bot.net","domain":"amlchecks-bot.net","tld":"net"},"ip":{"addr":"172.67.168.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlchecks-bot.net/","date":"2026-05-30T00:38:08.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecks-bot.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 02:39:01 GMT","end":"Thu, 27 Aug 2026 02:39:00 GMT"},"fingerprint":{"sha1":"87:98:84:90:41:5F:F5:2A:88:C2:D6:D8:95:2B:BB:11:00:84:5D:70","sha256":"37:85:71:58:FF:55:CE:D9:D7:36:6F:24:0F:AC:93:71:E0:E8:D7:EE:DF:41:06:EF:64:8C:6D:69:1E:B5:5A:E6"}}},"request":{"raw":"GET /img/cost.png HTTP/1.1\r\nHost: amlchecks-bot.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecks-bot.net/source/css/Land-Btat2g4s.css\r\nCookie: connect.sid=s%3ASuXcN9rSrfy9SmJBsLOTwPT7u_oD9KZP.HEId5flaxNa2LBM8xz1GstgH%2BeaQu1j1kMngnso5LiQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sat, 30 May 2026 00:38:08 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DiOPlrJX6lZ8ctbyJUQK%2FR3diUrMLqMWs5zBnQ2zSMKYsunoNa7ziRAV%2FkOXrqIEgr8ppPDso7mOBjBBKk%2BL%2BezlSOaw1x5FbAVqYmWPMihUNbNQ78F1mXAHqyCTw0LfNpCBfg%3D%3D\"}]}\r\ncf-ray: a039aca0ecb24e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-30T04:03:16.546927Z","times_seen":15899389,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":214,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"amlchecks-bot.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecks-bot.net/favicon.ico","fqdn":"amlchecks-bot.net","domain":"amlchecks-bot.net","tld":"net"},"ip":{"addr":"172.67.168.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlchecks-bot.net/","date":"2026-05-30T00:38:09.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecks-bot.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 02:39:01 GMT","end":"Thu, 27 Aug 2026 02:39:00 GMT"},"fingerprint":{"sha1":"87:98:84:90:41:5F:F5:2A:88:C2:D6:D8:95:2B:BB:11:00:84:5D:70","sha256":"37:85:71:58:FF:55:CE:D9:D7:36:6F:24:0F:AC:93:71:E0:E8:D7:EE:DF:41:06:EF:64:8C:6D:69:1E:B5:5A:E6"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: amlchecks-bot.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecks-bot.net/\r\nCookie: connect.sid=s%3ASuXcN9rSrfy9SmJBsLOTwPT7u_oD9KZP.HEId5flaxNa2LBM8xz1GstgH%2BeaQu1j1kMngnso5LiQ; femkgmietge=tEDlLcszPiX7pj/oxBGk3g==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 30 May 2026 00:38:09 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=48PmJKuUjLjjZ6dRgjNhgleli52pY5clxTFQ9RVZ%2By3XDWF2aLAlK4AY4GE92HIW0NPpJY8fEbkPH3vcKkYJrM1H1IO0RtREpTcHvu9ay9x7Gwo4W5RjyW73DiSVsRonl0GBRA%3D%3D\"}]}\r\npriority: u=6,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 26 Feb 2026 20:18:48 GMT\r\netag: W/\"a76e-19c9b9aa38d\"\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a039aca4ed324e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":42862,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 103x100, 32 bits/pixel","md5":"854845c9dc489b715a93d6718e1d65a8","sha1":"8126b243953b16480417412e11633c05ceec3208","sha256":"85573e3bf8fdc1b4a255135b2b61dc422992ae07f2c0ce53d4fd79a7c98d1152","sha512":"d5c421e91f3c869839c8d2207a63f6d506f287a1e7670da2c06079ed425533db8ebc559cbec2844f9614189c5a64055f3f4aec1bc02f9f3d62c6f21dc7813fc6","ssdeep":"192:nVNPtBme7yyGkbVlDRGxeODlmRqqQL3JSpE1t3O2KP2iO8rNZMvTZUwoHVV9AJpR:VEyLpqHN/BZvTZxoHVV9AJpQn0owt7l","tlshash":"c21312a0a462e395f0db353945a3d5f8645bfe9873820812e53c73f91933a835eb374a","first_seen":"2025-06-20T20:01:15.025332Z","last_seen":"2026-05-30T00:52:26.34201Z","times_seen":229,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"amlchecks-bot.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecks-bot.net/source/images/team7-CmlWnAqS.webp","fqdn":"amlchecks-bot.net","domain":"amlchecks-bot.net","tld":"net"},"ip":{"addr":"172.67.168.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlchecks-bot.net/","date":"2026-05-30T00:38:08.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecks-bot.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 02:39:01 GMT","end":"Thu, 27 Aug 2026 02:39:00 GMT"},"fingerprint":{"sha1":"87:98:84:90:41:5F:F5:2A:88:C2:D6:D8:95:2B:BB:11:00:84:5D:70","sha256":"37:85:71:58:FF:55:CE:D9:D7:36:6F:24:0F:AC:93:71:E0:E8:D7:EE:DF:41:06:EF:64:8C:6D:69:1E:B5:5A:E6"}}},"request":{"raw":"GET /source/images/team7-CmlWnAqS.webp HTTP/1.1\r\nHost: amlchecks-bot.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecks-bot.net/\r\nCookie: connect.sid=s%3ASuXcN9rSrfy9SmJBsLOTwPT7u_oD9KZP.HEId5flaxNa2LBM8xz1GstgH%2BeaQu1j1kMngnso5LiQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 30 May 2026 00:38:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9688\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 26 Feb 2026 20:18:48 GMT\r\netag: W/\"25d8-19c9b9aa3a1\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kl%2B238MbnO2EJXM3K6o%2BGAE2dpiw%2F7j0bXHG09mzYQ6nk0PxUNVfI6liSWMY8YxuFuOxCOaKRiB%2BPpWgOw5IXCqMpWv%2FLkPgDkPTmD2UEng20oxm9T%2FIRAn4hHCWXIj5y965tw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a039ac9dbc7d4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9688,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x366, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"21990ddbef30acafada5ba840885cd4e","sha1":"25696e08962a0758185198ede1429c789ab3516d","sha256":"241f8c2374eedda4b5bcdc553f91e383fb54cf2d99e8e9e3ca95fb935964c262","sha512":"a118c8c34208bb2c182be1c5b26551a1d6144172f32f40d929c148d2a972a942f85a73571381d6c5671c93718b3571fc3d446749dfdc4ce8c27292c432e68998","ssdeep":"192:i10Tks2INi0TU+xhRRqeksiFAoOqA1vrM4x6qlqRV7r5X6:imRgchR7ksfjqA1vrMOARFrs","tlshash":"3d12b018d340648eef0ae7445261726681d55b7abf7b5c701a3c8bda308f8b61906e45","first_seen":"2025-04-08T20:33:55.241357Z","last_seen":"2026-05-30T00:52:26.338675Z","times_seen":432,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"amlchecks-bot.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecks-bot.net/source/images/22-CzpWkn_R.webp","fqdn":"amlchecks-bot.net","domain":"amlchecks-bot.net","tld":"net"},"ip":{"addr":"172.67.168.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlchecks-bot.net/","date":"2026-05-30T00:38:08.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecks-bot.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 02:39:01 GMT","end":"Thu, 27 Aug 2026 02:39:00 GMT"},"fingerprint":{"sha1":"87:98:84:90:41:5F:F5:2A:88:C2:D6:D8:95:2B:BB:11:00:84:5D:70","sha256":"37:85:71:58:FF:55:CE:D9:D7:36:6F:24:0F:AC:93:71:E0:E8:D7:EE:DF:41:06:EF:64:8C:6D:69:1E:B5:5A:E6"}}},"request":{"raw":"GET /source/images/22-CzpWkn_R.webp HTTP/1.1\r\nHost: amlchecks-bot.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecks-bot.net/\r\nCookie: connect.sid=s%3ASuXcN9rSrfy9SmJBsLOTwPT7u_oD9KZP.HEId5flaxNa2LBM8xz1GstgH%2BeaQu1j1kMngnso5LiQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 30 May 2026 00:38:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19300\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 26 Feb 2026 20:18:48 GMT\r\netag: W/\"4b64-19c9b9aa3a1\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dzehyQ0cXp4eL79UjJGOzKYAYdgzkFtt%2BoWXVTZHEli2QbY5iWe3qWvjbyVTWGBIIVQEb0DHSBy8%2BUS2BDoN%2Fjz4hoW8mydS1gaK7WqV%2BV5nnqn7qe7mFKtFUwg600h1LUoCCQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a039ac9dcc864e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":19300,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d4224b0cea000adfe29027c4ace6ca90","sha1":"f3f62f8c429c5446db4ee28f6857c81265bb6a8d","sha256":"9c5add30b5e422671689a41106849fdc2319a01ac3952b16c9506aed05bfedd8","sha512":"f846a43f28741f7a4ee7528a042e9d0de1bb45ccb65e239f9941c4a536f74529539d08f9f740f437bb523a8f5756292835dec6dc15e2825c1b082d04a236a04b","ssdeep":"384:60GohnG8pPSTVjACEs6tLfdQYaW+61jXKDFFoBlM7PD0sHLG2Xz2x:60GoI8ZyVjCLSiZ1jXA8l0rbLG2XKx","tlshash":"cf82c0d0d6b9946bacbc43a8bf2011bdb5fc12ea3a545b134d00747c87eb97a076ad34","first_seen":"2025-04-08T20:33:55.237744Z","last_seen":"2026-05-30T00:52:26.339917Z","times_seen":425,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"amlchecks-bot.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecks-bot.net/source/images/33-1yWRRjf1.webp","fqdn":"amlchecks-bot.net","domain":"amlchecks-bot.net","tld":"net"},"ip":{"addr":"172.67.168.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlchecks-bot.net/","date":"2026-05-30T00:38:08.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecks-bot.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 02:39:01 GMT","end":"Thu, 27 Aug 2026 02:39:00 GMT"},"fingerprint":{"sha1":"87:98:84:90:41:5F:F5:2A:88:C2:D6:D8:95:2B:BB:11:00:84:5D:70","sha256":"37:85:71:58:FF:55:CE:D9:D7:36:6F:24:0F:AC:93:71:E0:E8:D7:EE:DF:41:06:EF:64:8C:6D:69:1E:B5:5A:E6"}}},"request":{"raw":"GET /source/images/33-1yWRRjf1.webp HTTP/1.1\r\nHost: amlchecks-bot.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecks-bot.net/\r\nCookie: connect.sid=s%3ASuXcN9rSrfy9SmJBsLOTwPT7u_oD9KZP.HEId5flaxNa2LBM8xz1GstgH%2BeaQu1j1kMngnso5LiQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 30 May 2026 00:38:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 51260\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 26 Feb 2026 20:18:48 GMT\r\netag: W/\"c83c-19c9b9aa3a1\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j3OW4L3ewHkbJXLkfeB1BQSAqpb3OjjWJKGaWWBZKO5vcwNVmVYACdksxdXrtMburYGiz%2BYUsxg8aA2LgbWzc4C91LC9ZHx8QwLBQO6MmoL%2FjM%2FRJAsNaYYkio%2FRkWUC%2BQfFyw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a039ac9dcc874e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51260,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ee868cf20c90ea252365e462b6ed3c5e","sha1":"152db0b5653fd2b887fd121364cdf30958681d03","sha256":"127cbc5c941fbc03d9cbb37facd6601951d51318c0e6e50c7d15596c4481630f","sha512":"03515bab68fbeed2a2f2ac21c9f59551eeabffa5b8f62789aaab7fb2983303a36d7d9ba4cbb2d798df73081c15f614c6cc9504eb5813d11fc298bc4214438707","ssdeep":"768:j653t9vVD5JXaaGDkMYqov6bM/z1Czd1spLBSuvAmxpp4UZYrmlKLs0PpkhHWQhw:stFV0vYt6bY1CJSB4UZ1Qg7/6uoeC4","tlshash":"6533f1d2bbee3551c19ff51dc9eb49da1105f40ace1cb98c42d864ca99722fd132b163","first_seen":"2025-04-08T20:33:55.213792Z","last_seen":"2026-05-30T00:52:26.356206Z","times_seen":429,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"amlchecks-bot.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecks-bot.net/source/images/uniochange-B8zbqJSY.webp","fqdn":"amlchecks-bot.net","domain":"amlchecks-bot.net","tld":"net"},"ip":{"addr":"172.67.168.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlchecks-bot.net/","date":"2026-05-30T00:38:08.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecks-bot.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 02:39:01 GMT","end":"Thu, 27 Aug 2026 02:39:00 GMT"},"fingerprint":{"sha1":"87:98:84:90:41:5F:F5:2A:88:C2:D6:D8:95:2B:BB:11:00:84:5D:70","sha256":"37:85:71:58:FF:55:CE:D9:D7:36:6F:24:0F:AC:93:71:E0:E8:D7:EE:DF:41:06:EF:64:8C:6D:69:1E:B5:5A:E6"}}},"request":{"raw":"GET /source/images/uniochange-B8zbqJSY.webp HTTP/1.1\r\nHost: amlchecks-bot.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecks-bot.net/\r\nCookie: connect.sid=s%3ASuXcN9rSrfy9SmJBsLOTwPT7u_oD9KZP.HEId5flaxNa2LBM8xz1GstgH%2BeaQu1j1kMngnso5LiQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 30 May 2026 00:38:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4226\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 26 Feb 2026 20:18:48 GMT\r\netag: W/\"1082-19c9b9aa3a1\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zsnERvPiAAUbnTAcadBOSUIdhEqjGXYB6Wz%2BNQkjMo4FO8i3N7P1ab9OA2R0owqPOGPNTNMNppyp%2BSBJJlYzd0evl0rAM5MP8dyfb18bDDxguDU129qmMc5I65D986vtQ40QuA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a039ac9dbc834e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":4226,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6c1d8ecc4eb00c7b2fc07c6e6bf80d62","sha1":"9f4768ee54c89fc835ab8ebb553f27d1687d6c09","sha256":"239a8beaafa035e38e4e3a96bd524269676557d5f2fa5c2b64e086a283e82308","sha512":"a4a3a752dbf6a1d97c0e711bf100988e80fa47bfc6288ccf523bf97b0527d4373267f4306cf0d04cf6cd10d430b609bd9e82153e28b244297108ffbc3761eb0a","ssdeep":"96:vytkHXw/Xbumhm5aioWQPDN7a4Ic44MUut0mXZ5FsmOA:mkA/w53JQPDVa4T44MUutBXZ5Fso","tlshash":"f8917f549f8835318c170d4928372225a0e4968edc380ddfee531c21676dcb1b9b1f3c","first_seen":"2025-04-08T20:33:55.219007Z","last_seen":"2026-05-30T00:52:26.350394Z","times_seen":387,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"amlchecks-bot.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecks-bot.net/source/images/team2-CTL725D4.webp","fqdn":"amlchecks-bot.net","domain":"amlchecks-bot.net","tld":"net"},"ip":{"addr":"172.67.168.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlchecks-bot.net/","date":"2026-05-30T00:38:08.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecks-bot.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 02:39:01 GMT","end":"Thu, 27 Aug 2026 02:39:00 GMT"},"fingerprint":{"sha1":"87:98:84:90:41:5F:F5:2A:88:C2:D6:D8:95:2B:BB:11:00:84:5D:70","sha256":"37:85:71:58:FF:55:CE:D9:D7:36:6F:24:0F:AC:93:71:E0:E8:D7:EE:DF:41:06:EF:64:8C:6D:69:1E:B5:5A:E6"}}},"request":{"raw":"GET /source/images/team2-CTL725D4.webp HTTP/1.1\r\nHost: amlchecks-bot.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecks-bot.net/\r\nCookie: connect.sid=s%3ASuXcN9rSrfy9SmJBsLOTwPT7u_oD9KZP.HEId5flaxNa2LBM8xz1GstgH%2BeaQu1j1kMngnso5LiQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 30 May 2026 00:38:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5812\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 26 Feb 2026 20:18:48 GMT\r\netag: W/\"16b4-19c9b9aa3a1\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N326752SlNezM0Qq0kXI7EXyjcacQR4HFRMkDU%2BG6PAkdF%2FHem8ig9UzN%2BDXlHc3aCJh6ELZmYmm2G6nBGCm7L8y6%2BccXB%2BuxdQhWdYR9fj84FoZXZS7LXybCp2kGLbkVcRXvg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a039ac9dbc784e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":5812,"size_decoded":0,"mime_type":"image/webp","magic":"Non-ISO extended-ASCII text, with no line terminators","md5":"67ada8bfae108c165352bd4af7045018","sha1":"f159409899afe0a9994eed317f1b8e149fa63c5d","sha256":"3c6bc9ad887fa91a1f19b6d32535acfb92afab131eeee2ff40a1426b19c43540","sha512":"fdb89cbc79e207473424bc271e5612ffacef385a1f0655e6361a54e25a02d5248d124d5d924bdcd0e44ab11f481f42c6784303d91947006c169a3f8eb49df7f5","ssdeep":"","tlshash":"c7200000000030000c000000000000000000000000000000000000c000000000003000","first_seen":"2025-01-20T03:35:06.736383Z","last_seen":"2026-05-30T03:41:47.792891Z","times_seen":1434,"resource_available":false,"data":null}},"time_used":584,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":435,"receive":149,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"amlchecks-bot.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecks-bot.net/source/images/team4-B3PbVeRF.webp","fqdn":"amlchecks-bot.net","domain":"amlchecks-bot.net","tld":"net"},"ip":{"addr":"172.67.168.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlchecks-bot.net/","date":"2026-05-30T00:38:08.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecks-bot.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 02:39:01 GMT","end":"Thu, 27 Aug 2026 02:39:00 GMT"},"fingerprint":{"sha1":"87:98:84:90:41:5F:F5:2A:88:C2:D6:D8:95:2B:BB:11:00:84:5D:70","sha256":"37:85:71:58:FF:55:CE:D9:D7:36:6F:24:0F:AC:93:71:E0:E8:D7:EE:DF:41:06:EF:64:8C:6D:69:1E:B5:5A:E6"}}},"request":{"raw":"GET /source/images/team4-B3PbVeRF.webp HTTP/1.1\r\nHost: amlchecks-bot.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecks-bot.net/\r\nCookie: connect.sid=s%3ASuXcN9rSrfy9SmJBsLOTwPT7u_oD9KZP.HEId5flaxNa2LBM8xz1GstgH%2BeaQu1j1kMngnso5LiQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 30 May 2026 00:38:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4960\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 26 Feb 2026 20:18:48 GMT\r\netag: W/\"1360-19c9b9aa3a1\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UCosZM7K7ZcpL2Yy1b4ggQT21YZ3L%2BsfMEkQEqtpUvJpb9HCiEgks4XHrorTuPQgScDT%2BpozwBPEe7lX7ZNlzc9rGrPjRDnhFOPuY%2FLXel%2BccKWp4G27JeDrX07N%2FWOOhXXPcw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a039ac9dbc7a4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4960,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x366, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"667a7a156924eb8cf1ea2cc310fa84be","sha1":"a0c41d24550cb1375e1e7184e562cdd1fc19bdaf","sha256":"687e6062d6b65a7669c1badbbf7a4f374eb95572ab40efefcabee1208b96f679","sha512":"c7f8d10bc7c4d14fc2a2444150999baf64f7ae98728ddcc09bbc6147d8452bfdf08f3e17780641303299482bc7ab237d9df36f332446d674632771ff81d2b99e","ssdeep":"96:MZETuQouq6zgoF7sOUTf/l6RdFDcPAnD+zFc5msuDmMIui/Jyx9woc0BhNC3:3TuQo67sO4/ATFDoAD+zW5mVTIRhnocb","tlshash":"e6a18d621f66e1a1eb564f3b2431ca4a218337c487c490a8b3a99c9561d597cabe3b12","first_seen":"2025-04-08T20:33:55.212733Z","last_seen":"2026-05-30T00:52:26.332631Z","times_seen":512,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"amlchecks-bot.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecks-bot.net/","fqdn":"amlchecks-bot.net","domain":"amlchecks-bot.net","tld":"net"},"ip":{"addr":"172.67.168.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-30T00:38:07.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecks-bot.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 02:39:01 GMT","end":"Thu, 27 Aug 2026 02:39:00 GMT"},"fingerprint":{"sha1":"87:98:84:90:41:5F:F5:2A:88:C2:D6:D8:95:2B:BB:11:00:84:5D:70","sha256":"37:85:71:58:FF:55:CE:D9:D7:36:6F:24:0F:AC:93:71:E0:E8:D7:EE:DF:41:06:EF:64:8C:6D:69:1E:B5:5A:E6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: amlchecks-bot.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 30 May 2026 00:38:08 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\nvary: accept-encoding\r\nset-cookie: connect.sid=s%3ASuXcN9rSrfy9SmJBsLOTwPT7u_oD9KZP.HEId5flaxNa2LBM8xz1GstgH%2BeaQu1j1kMngnso5LiQ; Path=/; HttpOnly; Secure\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lIB%2FdP3s12KbqQoHCTqJz8Qx00JxgH3IqQY0sUvRT5ZuLL%2BpiOC0UnHlrSKxzhiIrjn8m9acoP8vD2fdWzefKWVEauchDzbmxNNdS5UbD0vb5Ry%2BL1rOFLeZQa%2FZiE9gewP6Pg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: a039ac9aecc656a2-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":212273,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4900)","md5":"c1401637ef5f383077c5380dd311038c","sha1":"6467dbf38160cb081c8dc136fd5f1cbe617968fd","sha256":"5a7642a3aaa1cffa11a9265702fa39ef2c1e67d588ad4689960b07e67557a96f","sha512":"3867a6bdeec2af960e0df38ff18a9fe0721fb8ae367c64ffc403775e842d701ef7bb094f7af92b55e342c34879506a02313e46b87cfd0cc0721010ff7047be28","ssdeep":"3072:j8uVH1LsZkfubX1xKZk/uTH1LsZkc+XptEHpr+XpTTDf7pk:j//sGmDKGGtsGcm8ETPpk","tlshash":"c1248d60a6f02de3405a43e1b625451b7e40a197ee064d64b3ec5fe9dfa3de0882f99c","first_seen":"2026-05-30T00:38:34.464125Z","last_seen":"2026-05-30T00:38:34.464125Z","times_seen":1,"resource_available":true,"data":null}},"time_used":319,"timings":{"blocked":52,"dns":36,"connect":1,"send":0,"wait":210,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"amlchecks-bot.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecks-bot.net/source/images/what-else1-BqAm836B.svg","fqdn":"amlchecks-bot.net","domain":"amlchecks-bot.net","tld":"net"},"ip":{"addr":"172.67.168.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlchecks-bot.net/","date":"2026-05-30T00:38:08.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecks-bot.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 02:39:01 GMT","end":"Thu, 27 Aug 2026 02:39:00 GMT"},"fingerprint":{"sha1":"87:98:84:90:41:5F:F5:2A:88:C2:D6:D8:95:2B:BB:11:00:84:5D:70","sha256":"37:85:71:58:FF:55:CE:D9:D7:36:6F:24:0F:AC:93:71:E0:E8:D7:EE:DF:41:06:EF:64:8C:6D:69:1E:B5:5A:E6"}}},"request":{"raw":"GET /source/images/what-else1-BqAm836B.svg HTTP/1.1\r\nHost: amlchecks-bot.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecks-bot.net/\r\nCookie: connect.sid=s%3ASuXcN9rSrfy9SmJBsLOTwPT7u_oD9KZP.HEId5flaxNa2LBM8xz1GstgH%2BeaQu1j1kMngnso5LiQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 30 May 2026 00:38:08 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zeMgrHSshUOAk8xi9%2Bd2bcJw5tHuU22t1zpNKjKvXeRRJ2ob%2BA19hvyfY2j%2BaANyEQCVQMo%2FYnTsI4c8k%2BHV9zpC4k0CC3LOPf2YKtA8Pq1RI%2B9j96iNRS7SKzK%2FNyj4XlZfmA%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 26 Feb 2026 20:18:48 GMT\r\netag: W/\"54b36-19c9b9aa3a5\"\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a039ac9dac764e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":346934,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"512f89c0f286c15602c3185b3e8de07d","sha1":"3056e918097ec260b8a565aa088e78ef3bd78d0e","sha256":"030d84266479bd6e195d340e2dbbab1f20afab194bcf91f92c7e0fa3f8008220","sha512":"945a753a8816321ff62b4b792f286ba617fede9e7fe087219eb688db95c88f33cb435cff215a864c89881f62152ba5a2f92ab823263c211c5b1c960a894c85cb","ssdeep":"1536:y5QRcR9vN3RRPtmmhMgbSsPpI1v4xhBQVdDNDNi+6hjNRcjRQrIGtUOW2uFh+tGw:EZH+W","tlshash":"957450ec2fb01dd98ddc8bd7bf1285ad6823d1779999ce08c25c8f581585c2cfc66a82","first_seen":"2025-04-08T20:33:55.211481Z","last_seen":"2026-05-30T00:52:26.365805Z","times_seen":369,"resource_available":false,"data":null}},"time_used":481,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":208,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"amlchecks-bot.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecks-bot.net/source/images/team3-DH9H-rCm.webp","fqdn":"amlchecks-bot.net","domain":"amlchecks-bot.net","tld":"net"},"ip":{"addr":"172.67.168.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlchecks-bot.net/","date":"2026-05-30T00:38:08.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecks-bot.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 02:39:01 GMT","end":"Thu, 27 Aug 2026 02:39:00 GMT"},"fingerprint":{"sha1":"87:98:84:90:41:5F:F5:2A:88:C2:D6:D8:95:2B:BB:11:00:84:5D:70","sha256":"37:85:71:58:FF:55:CE:D9:D7:36:6F:24:0F:AC:93:71:E0:E8:D7:EE:DF:41:06:EF:64:8C:6D:69:1E:B5:5A:E6"}}},"request":{"raw":"GET /source/images/team3-DH9H-rCm.webp HTTP/1.1\r\nHost: amlchecks-bot.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecks-bot.net/\r\nCookie: connect.sid=s%3ASuXcN9rSrfy9SmJBsLOTwPT7u_oD9KZP.HEId5flaxNa2LBM8xz1GstgH%2BeaQu1j1kMngnso5LiQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 30 May 2026 00:38:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5358\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 26 Feb 2026 20:18:48 GMT\r\netag: W/\"14ee-19c9b9aa3a1\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xgmeEdYlFRs7QQEd2toEa7eOaJkWeZIenFKOFnamJJprzvKMyq83ygiaP%2FBvLmyXEnztfYKj1I3Sdslcx%2B2C%2Fu8buzZ7oDa4qDLLwPGtRCGtAXLR4CytpJWgLq4X2RCG%2FloWzw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a039ac9dbc794e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":5358,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x366, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"74bcbc95eb9c765eb9807d9a6f5a198d","sha1":"3a1595be13ffd0a8622900fbe79b8bafa5a72d3b","sha256":"40b376a82e6f6ed6e382e6955fca2037bb67a22fdb08b26736d357051393dc2a","sha512":"41286c269e0650b523a3cbc18f91b95a10173f7f90bd5a0164f0f29a3c114928dbda998a93397de4e80cb5838370c46cf7ff369a189abb4a777d0fe34ce17e6c","ssdeep":"96:CHNESUnx97dkN8xnkhSwRWXBwK025xozmK0sMu2+7fJDf4Y/UCh2:ANof7g8xkhQhzzPtfu2exrt8Cg","tlshash":"9ab1aee0825d0da86a8ed98c15576a636c2d345c17c403951c855a637a8f61ecff4f2f","first_seen":"2025-04-08T20:33:55.231907Z","last_seen":"2026-05-30T00:52:26.345202Z","times_seen":433,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"amlchecks-bot.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecks-bot.net/source/js/burger.js","fqdn":"amlchecks-bot.net","domain":"amlchecks-bot.net","tld":"net"},"ip":{"addr":"172.67.168.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlchecks-bot.net/","date":"2026-05-30T00:38:08.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecks-bot.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 02:39:01 GMT","end":"Thu, 27 Aug 2026 02:39:00 GMT"},"fingerprint":{"sha1":"87:98:84:90:41:5F:F5:2A:88:C2:D6:D8:95:2B:BB:11:00:84:5D:70","sha256":"37:85:71:58:FF:55:CE:D9:D7:36:6F:24:0F:AC:93:71:E0:E8:D7:EE:DF:41:06:EF:64:8C:6D:69:1E:B5:5A:E6"}}},"request":{"raw":"GET /source/js/burger.js HTTP/1.1\r\nHost: amlchecks-bot.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecks-bot.net/\r\nCookie: connect.sid=s%3ASuXcN9rSrfy9SmJBsLOTwPT7u_oD9KZP.HEId5flaxNa2LBM8xz1GstgH%2BeaQu1j1kMngnso5LiQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 30 May 2026 00:38:08 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oCE0Wn2iTE92qiVjabDZDfYrgcgrMvoY%2BuMxDBRTNI%2FYjfOZF51keVnNoOXQY7faDSE5VlbnnblQO5KfLwJg1RlUi%2BRQgUxbadRz30VX0KuCveVMJk2d5HEMvnX3V%2F882pdksw%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 26 Feb 2026 20:18:48 GMT\r\netag: W/\"317-19c9b9aa3a5\"\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a039ac9dcc894e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":791,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"3dba819c7b54c03ba0affa1e69e9877b","sha1":"dc1230e6a2f9bcd7d8d1cc2cdbcb70df08d09d45","sha256":"b81fb4c24e9ac8a64d311c14d59a2c8899b4a54009a0408dfd7755f8768c960a","sha512":"392ebe621824e7448db3285764f8c815abba081fcc9bdbaf6cf6a0e237cde682fd15249b9e4758c7f19381ec58d0b3bf7f37c381e5de57acdf94702f9b42d5a2","ssdeep":"","tlshash":"d001f92983341e7e80bf4499b3c759dd2f3880c7944588663adc9f0d1f85ad095f21eb","first_seen":"2025-04-08T20:33:55.243226Z","last_seen":"2026-05-30T00:52:26.340603Z","times_seen":237,"resource_available":true,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"amlchecks-bot.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecks-bot.net/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"amlchecks-bot.net","domain":"amlchecks-bot.net","tld":"net"},"ip":{"addr":"172.67.168.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlchecks-bot.net/","date":"2026-05-30T00:38:09.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecks-bot.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 02:39:01 GMT","end":"Thu, 27 Aug 2026 02:39:00 GMT"},"fingerprint":{"sha1":"87:98:84:90:41:5F:F5:2A:88:C2:D6:D8:95:2B:BB:11:00:84:5D:70","sha256":"37:85:71:58:FF:55:CE:D9:D7:36:6F:24:0F:AC:93:71:E0:E8:D7:EE:DF:41:06:EF:64:8C:6D:69:1E:B5:5A:E6"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: amlchecks-bot.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ASuXcN9rSrfy9SmJBsLOTwPT7u_oD9KZP.HEId5flaxNa2LBM8xz1GstgH%2BeaQu1j1kMngnso5LiQ; femkgmietge=tEDlLcszPiX7pj/oxBGk3g==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/8fc8ed1d8752/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\ndate: Sat, 30 May 2026 00:38:09 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a039aca4ed334e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24452,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-30T04:03:16.546927Z","times_seen":15899389,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"amlchecks-bot.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecks-bot.net/cdn-cgi/challenge-platform/h/g/jsd/oneshot/8fc8ed1d8752/0.022276929750322028:1780099231:E3XBOZNP_GH-THscJCwUorVkljRA-dTHdW_HRVGTNkE/a039ac9aecc656a2","fqdn":"amlchecks-bot.net","domain":"amlchecks-bot.net","tld":"net"},"ip":{"addr":"172.67.168.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://amlchecks-bot.net/","date":"2026-05-30T00:38:09.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecks-bot.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 02:39:01 GMT","end":"Thu, 27 Aug 2026 02:39:00 GMT"},"fingerprint":{"sha1":"87:98:84:90:41:5F:F5:2A:88:C2:D6:D8:95:2B:BB:11:00:84:5D:70","sha256":"37:85:71:58:FF:55:CE:D9:D7:36:6F:24:0F:AC:93:71:E0:E8:D7:EE:DF:41:06:EF:64:8C:6D:69:1E:B5:5A:E6"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/8fc8ed1d8752/0.022276929750322028:1780099231:E3XBOZNP_GH-THscJCwUorVkljRA-dTHdW_HRVGTNkE/a039ac9aecc656a2 HTTP/1.1\r\nHost: amlchecks-bot.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12153\r\nOrigin: https://amlchecks-bot.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecks-bot.net/\r\nCookie: connect.sid=s%3ASuXcN9rSrfy9SmJBsLOTwPT7u_oD9KZP.HEId5flaxNa2LBM8xz1GstgH%2BeaQu1j1kMngnso5LiQ; femkgmietge=tEDlLcszPiX7pj/oxBGk3g==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12153,"data":"nz3qkDTQGviK1Q1EZl1KMCTcyTK1S1WtG13CTE1Mqx8DaAzATf1RDnDy1zGSu1+DWqiU1ufVTNLq6$CU616zzx61G+ayDx1ERQVXq$vVPnDGwnEVqq$uJlVd4LOG1GS5QMPGnA5DG5$iq1nCRAMCyG1PI8P7udyhRMg17RqAti7lUNsSLNsjy1+CI8KFR2E1TuxiOvQ90Go7eRAB1ThGq1o17A2GVTtTKCwA5hUBc3-qtxOJ6dg$1T+7q1LyYN+sQSrXq1w+mSxmN7d11uxu2TT71T4hEqe7EIs1iQJvS7NpAjs$11t7N1JGNE+ahy8Q$ix1GDUE72IbC11VeaEk5qaGdsG8sG1$6t1iwSLG1T73uGecWVoG1xmCFEzcBs$c4vc4Q6C9E7NcMPEKp7y-5tGE7mBC1Tv4fT177lOIosb17xuqjzcAABi1dtuOtz-Ov8OKJFYLOGNrCqiDVr11E+XIKTy7dyWDahuihzC0rakQWb-jmfCBIYQlaWm4NeylO0lfy1XQ68Lks0VOd9j711IsecZ+DIXsmN7vnSLs7UIWrW1iCv2DKlS00FCiZNedxaGPcl2hDWWb++W-+EZXhzxBVFveYfRu$nZEwP$YhNJWD6+fkyTUEfvGqLvrliNGuAZAUbgbSt1fgPNKm63B5cdrwG90iZ4jTb4aBz0bfNOd9vuLVv7Kr0Ffjzqn15ZgA-AwbNm7hwoU17OcxJ6lKAxZSN-NzWqPCZwFf$a27Qw6ZcT-cM5Pd345E$WVKwqwgeKP1A1ylq1UwvQ3DxvE3I17TvF5lvPD1DDwoBuE15qJEz$N$Dx0T9x65NSkCaqrtD4XD3c3NIE1tWEkV5TQaQfibnXXDIkcXqGTCKaDTyNGd5VTinv7oNnTVKyQ1y+2TTyqsq$vVDG33m0BJ3FTqnXVqycdQxE0172yDy3saW5XDsE1LaYv3CNgk+mI+3DpAbv3lqME1GqsuvYl$L8lsQGyXDen55ynaybIloXf1W33jTev32S4y5LjGURRy2Lzcb6iqgjW6n39CEtsx5GyI1z1D5G5S66It4G7f2URP0O15J9-URa2Th59SMau$5DQDXsuTVlsgUXwfB3VlDXY+BR1typFI5A9liSb81Byn1GUI1TS1$WxnGd3Giq+1AE3pGs+XjVV9iGn3lNXqWTiuv0cVjGBitNTaqy6GVKCCsvxdUT7lWYV1JWtLuVn$1u1yC1yNXjLEEyfFRPVftALMCTtGWVDDWWGu76kK3lRzSa4E6TGL13KoG3XmKSTpUiE1WAn2Gdosq3tmvqGu2b4kKcaltVCGB5ujsq1yT2savlNVcc8DwIAsVSQcAkaQDTf-hc5sz2GpSaZ$CisB4u4mtVqDlE1s26j4fTlsyYNZzVXD7KMXsCpM+i6l1rSPYcXD19c7xkGB3GdBzaiCkpTGv13pYdMq7rw$c7XwvMoYel9-eN9jWGs5LfG1BV5DwxdQMI93l6kxoSzBmotxlmo7cdY3Qru57tPmg1s-uXR3GuOQtM$2YmJqIYdNE$Yl3ozgXDmfspd9Xgv1YMoBCGN3cLzVipBEi1ucv1++uig9YoY$fIv42x7yWFnVmez7C611BLyqGQ7qkVIqBU31ND-7SiY0VfeO1kEhstS3X42C1iuJiGECKC$cQsODu1neqEs6TOGvUvTyMZmQxratv13$m2nhkRRWOBZseG5Bf775D7qmtKGrlAQWv0xyG1DTqjd1X3sIhE1GpW$QMR2iP7zTITznA$sBVwTC2DE8s1JxT5tiXkDGmQ9vEy8PoN+W-nKFGCVWqls2il7z6fU1cyVqD4qx6vWG06b0hGvsnuwmpR0jA$cKsEG+U001Y6U001tk3Wb5srcPNvu4rFZ7SWCN8kxv3aCCTiBZlmh7i3UTic0DckIGqgNcaAl2p713v0ztq1z3i1Oot3Fakl30TlSIe37iAkbzV+axZv77$ralR4e+USV7QGV2auB4IKp5um8uPsz5l1FaallbtQ7PiKt6xlcXQfZ5dA1d6Sl3DcvDjcfRsiYTSsIGr1TrCyQsCp8kt3t0x2W0ATiUcCaJ$A1c9vkJQDVal9mo$GEy7ywexB8xQ3Z45+GZ5A5n$AEw$0PhXfv32uOkn6FE$s5BU74us19a334QPn0wt+1TabyAQclu1GKnOt08sIZ+T0kGGmEJL35pC3SLUPjj1x1WnkY6DS4nO1xM8mKCcQvRInCpAFVcXGtokhFOfaibZqTTjsCqdIVfrFkFrhapFcLR409ZOib3Fn8m2Tuu1hF0f3zp1h+yTyp05vdNpMfEyG$RiXyRsvGakY+slkTatT4thtGZUIqi4m3AIl35OylS4qubInsGlEuGYEeJIKTxKrm7un6V2sarnZKp33ms11c+ulDu5hcr4ibslBn5TkTQfCUv9n5IeSgUaE4Q+CAS7GGhIGbE3Tosti4E13yPlOTrl8cOfruBsGvplGVml$WgBlcfZEbbbeCax3TPP-75lk1QjvTSFeIQmGG2stKelq62OI5xmL4tohgj7R6K3UC516tIJVnJflC1c2ZbMK3yMUTN9yJv6C7qbI$Ff336J9th7V1FEwOWun9iP5-1TWJcNlvxpDoZ+beNNKSCacTauq1Drik+3wyT0UsnVDUg2Aah6g+WSmQ31IMGPQcZ5zdsRqc3ileircdl56VV44VLvdni$Z7TNxquSZkjD5Vnlkn4ASXwEzhJgGmwRk2L81qcanb1eIC0Y0oR0OeesTfeN5IYR-$bF3XqcOULCisyD8izITibnkpaeVYV-w1ehE4u36wxrU7uI2E-QXru4TUn2Zn5vffvLGRDo1qnT1puWYbksO2qmO+11wDc2TdDovldIUm$pJxoEcd-rt6d28DemSuyrW14n+SzcBUy6VTtDiAEVoVmjso86b-srOORQB8lC7jCQNZcZscS33+qUF2hgi7kdYyISIAJTuT6J2sWQD$EzQD689uAupxg0OJ2bm8WVOzc3kORsiiAQso4JClZVG1XuU7aqU1hzjvQeQtOUSmT9vGdm92vLhn6UmhuB$OU+vmTgpiCyDbI1ikMO+ovCWfncorB7QNns4K8Z9yXhcUTGAi6paC6N-$jmtL5jOUub69r0pec6ehpx1Ii6E0l2ra4R8uXP33YXjIAPv4MIOA+em2FAx6jdJOVqvmuotDWGncDj30vTqmDiXWunt6SPbRli1X3jCg3XQh6OBLtnb5y6MkBsUAPv7tXyevlhrP8j2QP5WPFwzTknpRVq5QqGl93+WCtOD2eP35ua5EMGO5Vau8njv$qO42dn24dF5UJda4jlVFt2hbE7$9A8InybTKfNPq8XkPMqA7MTm8hk0A-9Q8yaDmsK1UJpsE-WXLDuJBUOQTSjoK1r8o0Na$Vs8LVbCTpyyqn9pmob3hK13cs0NoGT8f8D6g1hxPCB8aCekhl0xk8IzVqkCoclCS19Xe3qlycuiv0aw0XjmGzekEivWLpvGUlSmdmeDIhlZ2BKhQrTBt3hD0hWCAiVllTATqsDCTykc3ZtCMGI+5XL1oTCCz+AEtkRCQsqZ1EfWih4+iaAcupaaNTi0tVP34Tm25hNX1C4Goi9wRaLWwxq3y7izVsUTviKwscrzKp3s0clpvkAGcmD6UwUyJzk17GS2siPTqNs8QXtBZpVrlGdTKVTWKENclCzCC5d50Xq7eBuEV5lZxkihNBZ$nTp3Wi+0RZw$o0Fprzr+Al3NeB06DayzXk-WOla88stmQ0ODa8yqi3QT6afZjwu2jzCwNr4pZW56VzlromE3K2VD0w2XTzI3WzUBJ5FCsw371rO7AEkV7Tl7VNlh8xXqa5XzsBI5oZ2EOmv0rGuVQTzTi$pkX$mhzZeNJEP5ec-7q1Kk0qxxyhDmuqI5GwSEPyhqo1bhaaQxPmoikZN7gXZzUXUlQiLz4zapowBxKmkaUkqcWGW8OhWB5yyDviaZuV+hTzX6lDbrjENcMGxTbwCE+CbGr+e8vakrfBk$ni8+qACZTrtld3ST9zZaX2xwTCyDfXi+fCkGE1X31c3ENz+yTzKAgkKkqNe+fhWr81DNYEo8wTg5WZRyAiJ$-0Tai+TBWzKX$1vTl1zXo+TBZcQ0RaAl$$Zp9kyD$$8k5zpXdOkC5kpV0i15Q0q502QzIWdtGA7TAGFloEdzyD55D10q1rK3MCGTK3QxQ2n+DtR087mTgiGVThOZGDrVQ1vGo1ekb31rdphNZy754N5rDZyhpzQGh8vWihDpqOQAX30N-igByqT8Q3Bs+azTqwEGi0G1KxFi2CTAA1ME5zuGJhgi4XAXtB86K3L1u1w+L$i0UFAOW+sAN5gk6tlOy+41Q1b18Oj+QpG5dtpmI27+g1aWBCoT$C1NszKl1X-tqG82x19VeOprf$N6WB7tDaNOU0a8xcQT68vcMGckyDphstp6a1uw9w0WeFXr3tVt8ioi+ya09Aymd+Z7mZX7hxRZzz4B6Oe8uCG6L6YiiCccD1eODFgtc$ysi7q5VDe+wicFA6gTzGYBartG3EbEz+gArE+81$gOuqKipNv0n5gF9wLwuuaW45JlF6tAqwIFp2IOy82OOs7XwGFpDc$WOGv0ODZhKkEEI7SV90WypFqjIwyIh$h6mC9VUrvzB7M1ljuiQiwTwAp6bO2X18NyvVqAD$ZXL0NBeaDyM5xS2GIlDEMWD5wlIlWA7cq10DuiQ2Uu15ZrvGLzlu1wt6W7b12tcOtx$BUBclW6FwR22lfS37M$6AZxVsrVGZ$$t+M0rAWkA7p6Xtf+1hVsSaQif0+zIWV841LGkiE1I8UhzcJcL8-G054Fy8JyEuLy1mXhemKB2VjpnuJZSxP0gz-IBx81bCz1XByxmuVsMwytxkETB5P7ysF2+WarO7+6fhPIrpSOsr8D7D-1Qibhxi3Err02ihMu4c0DkGr2ChaWM7X68iAi3I1B2OTmwlsiNVUmfXatGwrhg5EBCG+j50hm7O92YT8Gax6azie7+piC+1RGvTKS60nIzpTanZXTQuqFnTjzmAaupx0uk5gF83eO1ZrIKFQIu23Ws13OfSIXiwUXrSbbX5k0MCKRmlBk5p7cMEkWdGMZTuot$IqsmXi$isBBwTy9DpNiJCXj+3n+0tT04Et6lD5ixcvjq3sltx79GSvOPynjzh3XL6MpTyqR-a+GPaDGX0LhnmUz7T$BcVPjJBkjs7U9J5+OwRAxg1N3MzNFdFFSI2DrCrmVKS7jDrsIp5OwaBB+lTwGkFAbiENBgw0hu1DiNG21oI81uWpSYSOsECLmODAAI2N2wOqIf+8Gr5bII$32vGW7px$Fh6fhiT1CqC7GGEtABzsAN7SiN7UzUmnlo1WIQ3vaPlFt2IOZUpCcvFu7M$iZMx4X-h+58Trm1CjrOE3R0wC9DFCOVS+CnhsTaubivZ$iZBsO02CIEAorD6ilqOU9UfoT6usc4Vlcgww1lpffek5Svy7VT5Axk0xttzIwp2d8rOTwXSI1LamBwWNC-fXTJqPNKOVAqp3DV5u1apI2Law19Xa7m+Mw6$w$UFg8QlEbYi87JFtm3O7jdOeZVqUAphar9fSw0CnZR8zphusA1pIbcVki4lgI$IuUQalsX97SaBqFx1u3T0Pu0srVhxg18aRVjpYT23+yoBN2$7jmR7eX484ECtAlJf0$EGCpDLwXu1xEnunhWAbTyRdp5yGmZ23O+0V8gArwyt1FNV414iYGx+mXt8RfzlC3yVmT-LlzfBgAysAOysfhZroIliqpLyex$51Z7Na6aNmv$bqTTbvy4B0nDGrVKlgkSEXT$iyC$hJ$fvLi3DGmSf1APkNVeAoEM1iAqnCRmRAk8x8Ru9TAb9z9bfvfkk5b5iwGEil+OuQzstGvVxuEtjiuY+LBep9rr8ec4c8FtOqzGuywrXN2ihVw3wE3thZc199m$E8OjF5yNvETETwuwAQ8+yv1Vtbj8xuDBIgOtakVuTF0NGJ$N93XmXO$y6g6O7890L8t8Td+wBkreO+7KXt8ebjpx$Kaw7f1tlnOb$A1v$gG+rzxxTD2M2-jr0-+UnsFJA5bSCBsQ0LLSCPG18gFd7KqFR-0Q1E5dRgxnbX3g8uS7IXjS$c2-06yaWxLdN2$GIT+QXp$6Zzv0vjLxTjnNvNFcfGTsbS1-uVIK9zfG9k0pyVSJujc4R4RAX3oih45zrbjV8aNgURhEGVnAGk9XVEAfFEAvSIjKKRfy+QebuUpALEf-jkm6lalnLkrD6RB4WwiiCUr59uhizZJF6ZoGf7hxjtRgZfuSc4iiZmm2k2kGTiU6SvarakpIARU+8Q24+EpqEwtvR8BuEkWLGoiv5GntiQyUFmwEF6bXk5LnGTjOzJj4RsF575f0Ut9v9EFjFni7h5WxOQZLrnEinnm6chLdjqzROuslBB3ntsO0u1UzbRJQ5RBj5Lftw5CNXAVobEmjWGTEvSiJ9V7A9GGs1Z8fCxtuTnz-umzyDecuB4avTmBQ0uvQ0LieIC+gTEbh9VDmL+Jo1Y3sbbt5bbJxftnvGUT4tIe9kMisGPaVN1fMc-1xbsezcJ7avUS9wwijvCnCnJVzv9XGZKm4hXO0BOi21SGgItzKnzc89bLhKEmMnxhK9XJpyDbVQt9t2iAU9DmGfGiXAuBZWg36cxx-Wh7NZMRdRPubTLk5Kx70slw-aCOEm93j9lK9LgF5tG7-uFznc8o2olZemOTtzcc7TDknX21EUd$bpEtfOgE7ZKrGnp3w4s2YFXOeNC+eGaCStVD$7vKfnv6BJjJCQhl5St3WvY$UlSbPvnLrIwjGmDcrvmn23A5yYEnOhX9SO0RCzhklhQfXKL9ASoCu31Ni8lihb4UX1vcPccX+1jtjh50wuxh1eWniIJNrvIiOTn4utAkZALWBtLz3uNhiq-KVjzw7BGehbvY3SlOjFQmhIW323Rp+eiUusatxihBEQsS60azWv1mdKAmaaZjar7l$TQ2qoASrRY1635R-fGrsIZhlIgt-uxYgLYCimMm8L3$YT8lXGg3EWGS0UDSFceFEGdUSl3w-WpyOeT$hqRulcA$gnbjOfsidLTaPLECD1T8jo6K85+ijK9fVmU2Zc-KiCL63StnS$jQZkL1FJz-R6TFmEI35fJ+DGuvcf0pAKCNv4QQ427-O4Ad9e1o3DSJoGvkIbmiGjVqUWmWDgtz+RNPXG9umGw7P+Jt1SSvBBis5bkQ7B$t-Z3psn8mZ$yNlh8wQaVZhaDedNpyT6VsMfXwKSeqDDUQIuzKFSriiCMF0VxFlixAKwlz9XlD-1mGbl-WhfvP5omPYZZPTyIjl6wQ$6hpUduiJEir40lLlL+0xv1q$oXSoi4CitFKG6ppFOnFnFkmUetzeOwh5Wyct0evaUhrsnTKNknLN2MxikkcCS1dIau$DAME7Reg4-fdq1c9MTxKP4o8PP4xASNraQO5lNJ$N-sc-AcEk58i4xdgbo29Kf796tdhl-yc2QIkSPpvmiR$G55uXklRJau$0OsT6MYi8rt5b4f+p-1O7a$rjDCSTCExvyzq7TwTpRdUqu7pUQWbaq5CcQ1KnFcGw1xQLCJL5XpGI4xVtZQ5DYSvCi2CsCUJ1DuVT4uzaqb3OcjZk6bXS0biGxAlnTJQ7ZcKeGuWe0osLli2hTFq+1E7sIEfTlrZvt0hJxLOUBh1bcJoiwvCEfizX8fikisojOVihTsqowv1TQyK1I6+TSV7yUM1Rp3X3vQql2tiGZpa7tTKu0yIAGEWZycldqiQc4sb$iX575qvanrTKqz1DEce5yIK$nsFT30DTCBKGi0DM6T1BuQDFc$TmAqysGZv3j31D$qbKyLyZ3Qkl5XXGu7qux3PUTD5G8fcvvuAnh1NXf+qysyB4AA3x7qAX3N1oGofA3ctixsYuItEjFm7ACjc2yUc0G1ZEcG3bE1ef5qvq21q0C-8+cIKTuGI1V13VbcQnsZ$LyM-zzuc+JFE3VA0KvVmdsvE712urwqCucuqV1qcvwxmVzy5r9iyUAnGfVscQQvdDFi0dlyB3ZA6ZaXGKsqCvli8axEut0y27CY1zDfGYi$CjVIzIK1CDGT3P5UuATbDlq5y9cyypC1WGf0yDMG1ydyZ05sEn4jcPsUmrWbQN3N+vm3Mcjcj52CDzGd3Mwib7OB9rDcs3J7SDLPNc8osduhSG31zcWT0yVVasT4fx7qq8CTyKxvTjNDXaqyM3R56vF85h1UANKveLz5acKNfqM-POTxUt2M+XVCcRNxQEvl3dVaCq9Nc2fPW1DJC31BC0XO2lfyxCwbxnJUTa7+y0lOl0A+jsV5QXGlgOC3IA7eEO40yy3o$AQk7Gse0ydqmETw3K5qD7b6c8cEZviG+y$sVCbvuwxwyh4hAxyqdsy7S1Kz+TdVfl63W1i6NqXAVevI+EXX+D3O6yFv42Gkp8N8-V3j5iJE-NNsU1tCw7aviK7m7d1C3+ykX1mEeGQutJ1z+bnZ56im-U1ypOELv+ce1VZuv$NssE51NfD2C24Gxnv1ucilOe+A4S3zGRDrXz3$bPfONkKyOXwzdQTv7ZNhNOXr34QnCyE0MyGsoKuo1SxfGrVFlK37CWKXGCzTKXpAnDnun9y-y3ETyVNLSs5Ex1x121Twn39KD-eqygzVGaV$Tp+IjqjDQQxF$zzWGfbb7Bz0c1yCTe$1Ezqd+vFyOIXqyeuhxsF$SkKcuVq3jdG3TVGdTN1WCt$crVvql4ysXqiLxtDaNNVKAbEaDv71Ki3zgvk7zw3NG4aZyRlqqjD4qEbs-1a631YCttyv0t3r6EohJU2fn8SVTAQ3+qDu2cmKrIS6kxuW3T+zJ8N12VkbNq1LBBAZCPYZc3JlpkhnCcW7wj3nDTzO1jdFV+yixsrDObQS9qLW1+F-NU+h3$cp1syUy61sQx+G6DhGIKErydS1qvcnaUv111r$cxliC5f16PIw1RkVGe$IrX7eeZ1F3X7Gd3tJPtEOkQF2DlGKq4DZXiz691A8Y6Tl$yIQtsi3G4Tu+5MFULmFu7vSMTSjUVAK7BT4f4h$5eKTxiIngquq$yPr19Xx1Q0Lqf75L2n+EGeqEP+qkR6cASRXVCupKuv3WWC41V5RvkNMVwEu1Nlhcflm0G+Ds1aav3GJGOvi1eWjfYzbVven6i7caahOnlGx3PTGRIcTguA$WiVTQVaanCd+xMnRavME7pbllF0Vw$gTCysRZKjUqRB1sY3fcdmQMv3VDNyyz3IKPU$KDE37UZzw7yV5dDM3G+TyFQQcTF$L0$3DYQOZ0G6A3sZ+xCxvEr7rk$Q+qquiiOz5v14TAQzPGAWzUV6A1SXb$QPvG5z1pys1DcVvvv$t$NT0qhcOVnuVeTu1BqWVurxGA-O$aI1xCTmD67pEIXh3iV1ZZb5sxElCJjvU0sMNcrOlTr5KpiOW$3GdlDcrAvyQKfVGfaN3zdSl$r1vqJ2tcDVGZu7X11P25Xpqaqn5a4ObXV8Dr0UuViK5lTi1oq5MA+RKD$1vbAQqB6h5WFoi9+BDv56bNCOa2xqndIU+iiWAg+38rMjUQc$cGTlK8BbYeGB6h$TymXVQsJ0968pI2-bGuTzt9n0GXVo+BQoyir9M6elSXUAZJ4X502tl$6z0IlnDfUBs3jdDdJl$ds8zJ2W17Q9UZC$Rqf1j+zfUy6y6dmfyi8Jx+yS93LALyj+UeZ-u4fxNp2Q8UeCmL-OikOXh8xq7Ph75KDeTLladtfWg67TVqi+N11T+t5cVIao8So1dYgxR8xVf8cGqPW1Kg6j2Q8276Go8tKDl13zkKfy6-aVuX2Q8dQdgE93dsXrkQkKqyWL3qSv1D-jdOsuiEcSpTXcJQrsPpsjAAd4K+uWO14NAiL1WKrKFLK3$qCJ215JT+xO9L3FYcS5m6xs03onq15f5l-afG3crlRDj+vvzy1M$ukuk1U5ES7k3eyuDcYl3DF1+g6vISDSCTDeJ4r7$DFrv5mceS5$Lrqzx$55qL-CyeQjJXOzMDKz6QtNqJkY50QJs+27GS3xL5q0cTCL6GjECP8RGXUFvAdIS6udNdFl1AKGI6xsSJQzCUkvt$M1p5AGeciAKtFpi$1hQLfhEvzqJzv59QGrhcTjtv1pKzOPyq3cZukAiA8KuPCORoyyvF5ogjU+aVUyyvwtwDqmD2$4N$lRv90KOECeyuz5SZe0RJh+75Oz79uN0fl$dxPZyCttQlR+SbrOIe2ttNK1+Zy0jAplk1+09U0yGx1S1L3jAjUajGUWecZz4Gs8QmtTy92Q8y3o1LAc6V2VkEcy$8ItIIpuxqIVuQ80ItKqu1cqQveJh+TsSCkqcWC-YqDcJFg0mT6Glcir2UEfy6qgJvO6kF+2KkB6RGb510Js1eNs1PxwfIGy6X$Qj+3dUkL$RKNq+ncMxXgK$5WqfaJqfuYOheLbsQkosUxflqLOPsSkqy3QX8SMk7DY1J3+VdI49EJSE6QUhAQ7hxJ-5QyP3Q34gDD5E$vkFs4AGSZNW5IhTo+smgcUGe5AOpV8FDrZQZrduXxzE5mbAEOvx+4W4KXm-OjQ2RWUDlTqCjVisqTWtNL5DLynIKGxScRyRvKDSjknbGsph381nfYmKMFUpI8oKdQLEmc1T2v8xZR8av79tI2MIuQ-U0OmkSxt78R14VGScwxGpU3fZMnhSrdqRmJIbmrf1Fskj5l0R+Qwe+frRSE2Z84ZgIQ9nYmip-bVl-euUKDurmsRK0m4YfNGuNpuq-l-IPLUhNkmr8+vURPC$FFK6carl9tYxJ6yL2MI-Z9eQW1YVl64Rk1T5UzoRSF2l5MZl-ZJmeuYkMIWdzULRRYI92t1kdcMYxrRrkmpIcGOMYxe1SWpwRcGO4PTmqj-xcnF8UT0TequiD7nlGrMuKoyurmK5QmmRhqJnWwpDRMZcsP3otSAxszFiPe+yJBjAZ+Erwpmn3jpSKxuRpGK4Ymczun4J5O8LsWJyE5Spa5-wFNhAi7jip8IADpZoarASuZSndDdtCXmuSFmPKdNIJYxcbIZksXdm9a45A9SKyXvaEgNIZ319wQk5mQDWurpNaDuZRb0XXIucVfPkqnfE2X0qpVfPkc5TE2XYTpKfsxAnBOz2ETKQfTk3n-m-6a+cK1+xtXFw9l75mMydNyeGEVrSZrxShpKtQSbc7wopSekr8IORkyKKoIrZlCElFZYxrlbKXMnAlV+aJcl9wpNtylXWIZKmRAXXtxZfpuIcwSFpitJlRkvXotSehGewl8rIfUfIA1It9SMrCXTZbBkEerltn0tJP$vuk1BzFIh35zqWipXGfBWTlnXadxxQLOPqvyJTiOTUASfBF76mfipq$qe3bAGfmv3y1uV+yUz7urNu-IhXffGCTsSfGLaP1TgZMrmn8Ii0dzJTEBc76bEfyef2brkhEm-9yDcRgqPBCDUARV0Pf9xRt0O1dT26T1A111LacwmCU1Q-DN7711TZ0qE1EUb4Qa3FAIMsZiTqZTYVDG506cNJ1Z6I3xCT4xC5fX9TO4PDYDGO7Am+m11T3K$qTtsQydGUznKTdsD1+l5cCkAzjmsbaasxzX71dGD7malrIDjQkkrp5xBK1mCkC3qT8b11x13$P11Gu3JJjaVTZ3euuVRqaqEs5nRfGV1Xx0jPbEtRcBe4JJoj4hKcEG1P4U3$F0qTRb1TJ$F4hoqaTB5qcPFFPpTqGSsu1UJc9W2egycVx1ZUAuvq7yTrBc1LUmaTvibDk1b4b1ELWpenfYAG11dG6GO7W9vT06fqIBhz$bXhuuVJqL$+0E0ElwE1-qY8hJ7hfvTOMLyW1U+ihRgk2c5cTnWyicieBS1z7kCLqj$TB0wTEqfuTZTaWj89P6DxYW+5Y5-aYuxCau5EiXfbyv3ZQwcOp$R7tiXwvyvwP$nFkJ6ZceQ5vGfpabPTOqTK4YI8faTq7aM2-F$Qe36bz+D471xYa4IfGO1ky5VIgyTLCySs71mCn$+Z7y1rBT3+C$FPFKqGSsz1A1a1xJGF9b2KveuPlT06WGqcS4cbKda0xFbqANlT3ADI7Te1LTJcPqaqkqZB9CTi6j1uYiZ5CnJmlcITB1iZiE7mmecxvRq0O11i7Q-21tLrUR$emC0U9hmNcXRCBoM-UVFYgpabfqAC3qkX6Q11G-fsc11"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-out-s: SUhmeGFR2QO5V3kru9Ve0g==$inXG2DLZB+9d4d25fMSTkA==\r\nset-cookie: cf_clearance=00yED2FO67CJLY8AhfmrpavhBNg2dG95OdMexLeFG.U-1780101489-1.2.1.1-zfLMxziYN6frNh0yWKnFANqi5jGgfTcrHKgDv0mmEAXbI5_ecc9.XY1TvXdU.Qh4zDVGhKTRR7_m_LGot.bdINPDu_.6T9h3FzB0RaQ2RIdj2MGcuypbW3235QJCzBFv_ZwaqwIgvfpawBreLIXxDyY_c6O_IJdic_NOapjXDDJqxQpOQeIOvluC2RVrMvHMraVlA1jQH5q7m8Xnb1pWAxMaC3uEzpQJLfjfO4PRZIPrZQuxOt1ecfd27tPAXindvUEs2nIlDwGneaB5yCiI7eYJ_I.w_0WhAh0KjUfsRer8u2O_zN6k7jkJj0r02FAtXTQqeRIApDlnekOsn.fmdw; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=amlchecks-bot.net; Expires=Sun, 30 May 2027 00:38:09 GMT\r\ntiming-allow-origin: https://amlchecks-bot.net\r\ndate: Sat, 30 May 2026 00:38:09 GMT\r\ncontent-length: 0\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a039aca66d734e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-30T04:03:16.546927Z","times_seen":15899389,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"amlchecks-bot.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecks-bot.net/source/css/index-CBzum9nO.css","fqdn":"amlchecks-bot.net","domain":"amlchecks-bot.net","tld":"net"},"ip":{"addr":"172.67.168.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amlchecks-bot.net/","date":"2026-05-30T00:38:08.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecks-bot.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 02:39:01 GMT","end":"Thu, 27 Aug 2026 02:39:00 GMT"},"fingerprint":{"sha1":"87:98:84:90:41:5F:F5:2A:88:C2:D6:D8:95:2B:BB:11:00:84:5D:70","sha256":"37:85:71:58:FF:55:CE:D9:D7:36:6F:24:0F:AC:93:71:E0:E8:D7:EE:DF:41:06:EF:64:8C:6D:69:1E:B5:5A:E6"}}},"request":{"raw":"GET /source/css/index-CBzum9nO.css HTTP/1.1\r\nHost: amlchecks-bot.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecks-bot.net/\r\nCookie: connect.sid=s%3ASuXcN9rSrfy9SmJBsLOTwPT7u_oD9KZP.HEId5flaxNa2LBM8xz1GstgH%2BeaQu1j1kMngnso5LiQ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 30 May 2026 00:38:08 GMT\r\ncontent-type: text/css; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E6Da7V7d7TdvN1yURDCVKp74TOEzyd3EoRJQCD%2FIOQ4sfeGYwHMNYmLpvdSdSw%2Fe4OLH2Xy6ld%2F2x5KBb%2F6dx0OT7o4Ca%2BKOUMK2FFO%2BmAOglceBrr2IPuijXER0JjHrFz5gGA%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 26 Feb 2026 20:18:48 GMT\r\netag: W/\"6c8b-19c9b9aa38d\"\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a039ac9dac704e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":27787,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (27787), with no line terminators","md5":"a78c6309bd945a5e4ff7694357615e52","sha1":"5fcae055779d4a098501f78ecae62d782d75577b","sha256":"4294dac0964df43caadc9294d22948b4202000e93a2bc78b820f31b5a216bf4e","sha512":"f82e99d3402725a3078b1a8941f3af164042905ab447464fb3fc9cccfec29900586f88cd1070d675b64a098926bf1f299e492d00c41f09abdaa95fe6dadfe784","ssdeep":"768:457MJihoCcZCOud8G8tKS65wqsZQ1G+dM2cl6iCRotsV84sxIKcv4g01UeEPEQEI:+MJihoCcZCOud8G8tKS65wqsZCG+dM25","tlshash":"35c27d5a7a4cd100bf835b4362df2e0855347588e530194abe3b35ca2cd5ce6ba73fa9","first_seen":"2025-06-20T20:01:15.009002Z","last_seen":"2026-05-30T00:52:26.334187Z","times_seen":138,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"amlchecks-bot.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecks-bot.net/source/images/team9-sIMRwxbc.webp","fqdn":"amlchecks-bot.net","domain":"amlchecks-bot.net","tld":"net"},"ip":{"addr":"172.67.168.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlchecks-bot.net/","date":"2026-05-30T00:38:08.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecks-bot.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 02:39:01 GMT","end":"Thu, 27 Aug 2026 02:39:00 GMT"},"fingerprint":{"sha1":"87:98:84:90:41:5F:F5:2A:88:C2:D6:D8:95:2B:BB:11:00:84:5D:70","sha256":"37:85:71:58:FF:55:CE:D9:D7:36:6F:24:0F:AC:93:71:E0:E8:D7:EE:DF:41:06:EF:64:8C:6D:69:1E:B5:5A:E6"}}},"request":{"raw":"GET /source/images/team9-sIMRwxbc.webp HTTP/1.1\r\nHost: amlchecks-bot.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecks-bot.net/\r\nCookie: connect.sid=s%3ASuXcN9rSrfy9SmJBsLOTwPT7u_oD9KZP.HEId5flaxNa2LBM8xz1GstgH%2BeaQu1j1kMngnso5LiQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 30 May 2026 00:38:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11080\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 26 Feb 2026 20:18:48 GMT\r\netag: W/\"2b48-19c9b9aa3a1\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CAmP7PSLkhahjWbQfvONNFvBD3AaDhjnSkBh1Ys6QQpcxZLlK4OZ4dcDSLhlhc9hhu%2FwdXbgZITV6X6XJyetDY%2BI7%2BVfPiz7xfXqp6XbLVpCWUL%2FJ9foKUYUwLReL2NRkSDcHQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a039ac9dbc7f4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":11080,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x366, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"87d484adedd61343f676bf417fc61fd6","sha1":"96cf1ad110d99c2870f85c9f5c717fbb14f6c44f","sha256":"ec79aeb903b3fa0ad35e684b252ab35fc654bcdf93fa4b28cccac058b8b69ccf","sha512":"7a6d1e57e3434d8ae603cc9d8d1c3b80ab1666a281d62b16f1ea109d97d52b64aebba41d998be548f2d69c5c052f1e1d80abfa07bad36a595aea3da0ebfeb125","ssdeep":"192:qmmu84BOdcxxn8iFk6GI+HgvIm6mKj544gF2jVr19XzKlpwoTI4GlZY92Vm:qmmvX/iWEvp6Bj5NgFI39jKlp7TnGlZI","tlshash":"ff32c0f5858d67f49f809b468043ec6d04b7905bce86e1e6013b640a8a77c89ec2a31e","first_seen":"2025-04-08T20:33:55.23263Z","last_seen":"2026-05-30T00:52:26.36712Z","times_seen":432,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"amlchecks-bot.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecks-bot.net/source/images/44-DcUgPKtf.webp","fqdn":"amlchecks-bot.net","domain":"amlchecks-bot.net","tld":"net"},"ip":{"addr":"172.67.168.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlchecks-bot.net/","date":"2026-05-30T00:38:08.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecks-bot.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 02:39:01 GMT","end":"Thu, 27 Aug 2026 02:39:00 GMT"},"fingerprint":{"sha1":"87:98:84:90:41:5F:F5:2A:88:C2:D6:D8:95:2B:BB:11:00:84:5D:70","sha256":"37:85:71:58:FF:55:CE:D9:D7:36:6F:24:0F:AC:93:71:E0:E8:D7:EE:DF:41:06:EF:64:8C:6D:69:1E:B5:5A:E6"}}},"request":{"raw":"GET /source/images/44-DcUgPKtf.webp HTTP/1.1\r\nHost: amlchecks-bot.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecks-bot.net/\r\nCookie: connect.sid=s%3ASuXcN9rSrfy9SmJBsLOTwPT7u_oD9KZP.HEId5flaxNa2LBM8xz1GstgH%2BeaQu1j1kMngnso5LiQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 30 May 2026 00:38:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10916\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 26 Feb 2026 20:18:48 GMT\r\netag: W/\"2aa4-19c9b9aa3a1\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oYCfpS02OdGR1T%2BsStKbGFtU8Y8f1f2PzkNmua%2FU417YvxhkLImXEQKmyZhOEJr4DNxMgdwhjEgv9mKY91ym9cBQp725UcAeDNT55r2O08ABOj%2BqcjDWU8tKE3XqvwNlCWPfCQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a039ac9dcc884e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":10916,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b8dc93cca387bf2c17d1f47b79205b00","sha1":"afd9f668392c676754652edef35bc84af4624532","sha256":"064243afc32b9aba427090bffe6c1fb20a9a3068368147cec2566007d5dbf709","sha512":"a4364e4e888bfa68c1ed6e279753e8947616ce68c933bf16857e59d509551fe7a2b0d94966c34f10c7c74bb61bd721223db97416011e573e2c0ca22fc8ca50b8","ssdeep":"192:HCtlaTub/yIuJoKRhKGzNnL3DrY2kVBOr60PuO/mpIs3mW26mbBNzY:iuCb/moK+Un/rrkjx0B+pIsH26mdN8","tlshash":"5232c0e1be3a71a09a0439aeb36c5194c535600fc27a7df77a59047ca8c35f031817d6","first_seen":"2025-04-08T20:33:55.238728Z","last_seen":"2026-05-30T00:52:26.344339Z","times_seen":428,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"amlchecks-bot.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amlchecks-bot.net/","date":"2026-05-30T00:38:08.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://amlchecks-bot.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 29 May 2026 14:00:32 GMT\r\nexpires: Sat, 29 May 2027 14:00:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 38256\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-05-30T04:02:30.30255Z","times_seen":197139,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":102,"dns":1,"connect":28,"send":0,"wait":29,"receive":38,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlchecks-bot.net/cdn-cgi/challenge-platform/h/g/scripts/jsd/8fc8ed1d8752/main.js?","fqdn":"amlchecks-bot.net","domain":"amlchecks-bot.net","tld":"net"},"ip":{"addr":"172.67.168.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlchecks-bot.net/","date":"2026-05-30T00:38:09.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecks-bot.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 02:39:01 GMT","end":"Thu, 27 Aug 2026 02:39:00 GMT"},"fingerprint":{"sha1":"87:98:84:90:41:5F:F5:2A:88:C2:D6:D8:95:2B:BB:11:00:84:5D:70","sha256":"37:85:71:58:FF:55:CE:D9:D7:36:6F:24:0F:AC:93:71:E0:E8:D7:EE:DF:41:06:EF:64:8C:6D:69:1E:B5:5A:E6"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/8fc8ed1d8752/main.js? HTTP/1.1\r\nHost: amlchecks-bot.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3ASuXcN9rSrfy9SmJBsLOTwPT7u_oD9KZP.HEId5flaxNa2LBM8xz1GstgH%2BeaQu1j1kMngnso5LiQ; femkgmietge=tEDlLcszPiX7pj/oxBGk3g==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ndate: Sat, 30 May 2026 00:38:09 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a039aca5ad614e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24452,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (24452), with no line terminators","md5":"8646b7dff01f14720fdf9064d62f038f","sha1":"e78b9adae10147e08150264fe8dbaba40adbd51a","sha256":"4257cc1a7d5cf025f34f0bfea0c639fd0a6cfaed3f8fde2e32f08b8d1e49f6b5","sha512":"d4a59094c56bcd109d59e6a45db11cdf28b1afb7fb4aeabe03c08e0b1e4d286adf1e09052e0e295550febd53cbdc78e56bd5668ef8e41134e6a8782a7d17b495","ssdeep":"384:+hx5LmFX32sA7ty58DIF7wPb27b0XZPjlKWjKQt2Nzkxiua4fCrA9UxQg5jX9rv:+hx5LS6ycI6iEJo7NzkxlFEQgvv","tlshash":"43b2d3ec7de6f41923216cf800173cd7727e7c81b50c57ac8601a5a4bca0776ae7a99d","first_seen":"2026-05-30T00:38:34.478788Z","last_seen":"2026-05-30T00:43:34.768961Z","times_seen":2,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"amlchecks-bot.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecks-bot.net/source/images/team5-Z1xAavYy.webp","fqdn":"amlchecks-bot.net","domain":"amlchecks-bot.net","tld":"net"},"ip":{"addr":"172.67.168.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlchecks-bot.net/","date":"2026-05-30T00:38:08.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecks-bot.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 02:39:01 GMT","end":"Thu, 27 Aug 2026 02:39:00 GMT"},"fingerprint":{"sha1":"87:98:84:90:41:5F:F5:2A:88:C2:D6:D8:95:2B:BB:11:00:84:5D:70","sha256":"37:85:71:58:FF:55:CE:D9:D7:36:6F:24:0F:AC:93:71:E0:E8:D7:EE:DF:41:06:EF:64:8C:6D:69:1E:B5:5A:E6"}}},"request":{"raw":"GET /source/images/team5-Z1xAavYy.webp HTTP/1.1\r\nHost: amlchecks-bot.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecks-bot.net/\r\nCookie: connect.sid=s%3ASuXcN9rSrfy9SmJBsLOTwPT7u_oD9KZP.HEId5flaxNa2LBM8xz1GstgH%2BeaQu1j1kMngnso5LiQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 30 May 2026 00:38:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5402\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 26 Feb 2026 20:18:48 GMT\r\netag: W/\"151a-19c9b9aa3a1\"\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EczAAZpUDJxHjTFcdBE%2FhQ7umxXPeJtErbm9FNI%2BxKnmuEMFcdPL9RyGU%2FeU%2BFAOFyMlXvB5X461dm5Z7tlfI3GXktCQP9p2VanJFiaBAgHsQR7JryXpmIPafLo2ylwDnYOJBw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a039ac9dbc7b4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5402,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x366, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1b861f2296e3769da970e6af87cff205","sha1":"23e4cfc4f857247ae9955dff2503c3d6231febb1","sha256":"05201c411495b15a1807b3e649ca8fbbfbfee22e149b1ad0c42f9e3768e81230","sha512":"e9dc80a9198a8ee38b1a9407ff0d74258851a61f9461c97a83f5f9f34642ea5466a510610e6371e5d9f77333257749505396468ee9f8a2cf40241fc97dbc3b91","ssdeep":"96:ZRNCyHuEJ8uPWkvCwcBsYUKtZ88YPn+AkI+TwG0UVJg:fNBHui8uPWs2WYUEZ8jPxkTVJg","tlshash":"f1b1aed50af4c71c980316884b4c294beb7a6f5c9d20fd755c52eebb939bcc0661260e","first_seen":"2025-04-08T20:33:55.227028Z","last_seen":"2026-05-30T00:52:26.351919Z","times_seen":432,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"amlchecks-bot.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@11.1.10/swiper-bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlchecks-bot.net/","date":"2026-05-30T00:38:08.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/swiper@11.1.10/swiper-bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecks-bot.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 11.1.10\r\nx-jsd-version-type: version\r\netag: W/\"24f41-Ae8BT4fPX4KgzSwHJkgYcvTU4wg\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 30 May 2026 00:38:08 GMT\r\nage: 1813593\r\nx-served-by: cache-fra-eddf8230092-FRA, cache-hel1410034-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 42884\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":151361,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65279)","md5":"b9d0dbc7df811ed0a65701943b8c12fc","sha1":"01ef014f87cf5f82a0cd2c0726481872f4d4e308","sha256":"42484af966ddbce30db2ac6329e585f1ba52210a0a205ce7be52d71d3ece960e","sha512":"ba68e27e7a02c37c451223fdbd3f713245073eb987aac0e180f2528a8e3e966246d086f1d95aed47206c4ec7be8261adb169321d4856a00f60bd5d57f325f875","ssdeep":"1536:WKJjMfGmX0xw8NfmvSlk13Oa2BlxvHepwkEl+m9NuRF1Cjmy/BnmYlyshEKkMv3X:LJccdNWoapwkEwMBnIshEKB3hDpi7UJ","tlshash":"54e3e889a220b67656e3169b93e4c221b3b54540b80ac4f470fd4c9f597ec9813feef9","first_seen":"2024-08-21T12:55:58.905219Z","last_seen":"2026-05-30T00:52:26.367716Z","times_seen":367,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":23,"dns":1,"connect":13,"send":0,"wait":14,"receive":14,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlchecks-bot.net/source/js/script-Dut2HEAs.js","fqdn":"amlchecks-bot.net","domain":"amlchecks-bot.net","tld":"net"},"ip":{"addr":"172.67.168.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlchecks-bot.net/","date":"2026-05-30T00:38:08.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecks-bot.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 02:39:01 GMT","end":"Thu, 27 Aug 2026 02:39:00 GMT"},"fingerprint":{"sha1":"87:98:84:90:41:5F:F5:2A:88:C2:D6:D8:95:2B:BB:11:00:84:5D:70","sha256":"37:85:71:58:FF:55:CE:D9:D7:36:6F:24:0F:AC:93:71:E0:E8:D7:EE:DF:41:06:EF:64:8C:6D:69:1E:B5:5A:E6"}}},"request":{"raw":"GET /source/js/script-Dut2HEAs.js HTTP/1.1\r\nHost: amlchecks-bot.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecks-bot.net/\r\nCookie: connect.sid=s%3ASuXcN9rSrfy9SmJBsLOTwPT7u_oD9KZP.HEId5flaxNa2LBM8xz1GstgH%2BeaQu1j1kMngnso5LiQ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 30 May 2026 00:38:08 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nTb8Y973XLyqewFoxuWPEgBEwTiLbGVuUSjyyDT57LDM9hDdfz4A0S3TLdU8vLgvOIZZvBxWbot09SM8sN8%2B7ZCFnexanoN3PuERUYUVmefoUWl92HNOiLfEsz2bSvozto%2BEdg%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 26 Feb 2026 20:18:48 GMT\r\netag: W/\"af6-19c9b9aa3a5\"\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a039ac9dac714e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":2806,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"1cd2ff67604b3f59c4d833f685a406ce","sha1":"5b7272c03b4c4e9bbbe6651672d4266c8283b025","sha256":"9a2349f376e92961d32e82a9122e78afe39cbafb84e14ce0fa3b0c4b6bcb3ea7","sha512":"07d4409400ff096f738c4be453b227fad014af7c251c6bc73f54793e67d32b0608dcf491596f833a6c9d541a9b92ba491ee146bc87a15f21b4f7c2838e54afa3","ssdeep":"","tlshash":"7e51113b12746079417ba407779dabc5ba3500cf945728253d1c8e9e4f6ca7a02f17f1","first_seen":"2025-04-08T20:33:55.240479Z","last_seen":"2026-05-30T00:52:26.368535Z","times_seen":245,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":290,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"amlchecks-bot.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecks-bot.net/source/css/Land-Btat2g4s.css","fqdn":"amlchecks-bot.net","domain":"amlchecks-bot.net","tld":"net"},"ip":{"addr":"172.67.168.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amlchecks-bot.net/","date":"2026-05-30T00:38:08.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecks-bot.net","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 29 May 2026 02:39:01 GMT","end":"Thu, 27 Aug 2026 02:39:00 GMT"},"fingerprint":{"sha1":"87:98:84:90:41:5F:F5:2A:88:C2:D6:D8:95:2B:BB:11:00:84:5D:70","sha256":"37:85:71:58:FF:55:CE:D9:D7:36:6F:24:0F:AC:93:71:E0:E8:D7:EE:DF:41:06:EF:64:8C:6D:69:1E:B5:5A:E6"}}},"request":{"raw":"GET /source/css/Land-Btat2g4s.css HTTP/1.1\r\nHost: amlchecks-bot.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecks-bot.net/\r\nCookie: connect.sid=s%3ASuXcN9rSrfy9SmJBsLOTwPT7u_oD9KZP.HEId5flaxNa2LBM8xz1GstgH%2BeaQu1j1kMngnso5LiQ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 30 May 2026 00:38:08 GMT\r\ncontent-type: text/css; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IgK6i2eSCC1BkrVPKgj3B7tiUWt3ftBqLSIuIuJ40XfFjCelYuiXr6Yz1NC6K1NdgL7hoRCjZi6qhPm%2FFHqYKTF1ZMoOBSIVjUkVv%2FpnKTEp%2FOsPH9DOeeftYN6DtyTYrHETRA%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncache-control: public, max-age=14400\r\nlast-modified: Thu, 26 Feb 2026 20:18:48 GMT\r\netag: W/\"1c081-19c9b9aa38d\"\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a039ac9dac724e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114817,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (5129)","md5":"01544142654b28d888b2c2a5ca18004f","sha1":"6ad293d7a37166bb0c66413ea14d1735f4222705","sha256":"2731d53371db6c8909483a7215e582138690b8e7701ffa4b842f3c8c22057f64","sha512":"393b4619bb10a725d50e3386ade08e99ae9a01bccbfd4157b3ed44f8ca196e468c5e47ecfc207e922955f5cb48c5ca046ee1fa02f3ce481e6821644abe8fe09c","ssdeep":"768:RHFICkFZ+mpBHWYv1UYucbssC/INYPFBFnSWG1bFwArf93d2xm:54Z/pB2YNUEs5IWf1KJj","tlshash":"4eb3672606631945780b98181ffe17a4717890479a0fdaf4bfca7a44df8f1b4a5f2b8c","first_seen":"2025-06-20T20:01:14.996268Z","last_seen":"2026-05-30T00:52:26.369204Z","times_seen":84,"resource_available":false,"data":null}},"time_used":477,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":183,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-30","alert":"Sinkholed","trigger":"amlchecks-bot.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}