{"report_id":"f0b04432-b961-4bfb-b0ec-b1c4e1cabc66","version":6,"status":"done","tags":[],"date":"2026-01-30T05:42:22Z","url":{"schema":"https","addr":"amltrustservices.com/","fqdn":"amltrustservices.com","domain":"amltrustservices.com","tld":"com"},"ip":{"addr":"109.107.168.66","port":0,"asn":0,"as":"","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"amltrustservices.com/","fqdn":"amltrustservices.com","domain":"amltrustservices.com","tld":"com"},"title":"AMLBot - One-stop compliance solution for crypto business","dom":{"size":38311,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (37294)","md5":"b306d6477bdeddcc48f2e3ed99a4b40d","sha1":"3469d7ff23cc594948ccf81dfc2c6460f626d4e6","sha256":"6ea632090314c75f3592972816904536f1d56ad99e3d05fa041b1bc36e6b3391","sha512":"d388f6d9064fe96463f639b677442652ecd500e18dc7a0e95d48909136ddd0a1293a1476f29a2482814b35a95ea2b33f85ec3bc2030fe324608144e96548d89a","ssdeep":"384:4dCOYfN1zUwO6x1ChCILpAgPoZaiecNSZjNNNjLh5gnuBSrkt:4YVZOEkhCILpAgPoZaitNSZjNNNjDgu3","tlshash":"a903b435228215bb62838ef9b562ab6eb06bd34bcd2bc44cb3fec24463c7c14dd52590","dom_hash":"domhashf71eed6f168f1f9895b61ca4281167ec","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"amltrustservices.com/","fqdn":"amltrustservices.com","domain":"amltrustservices.com","tld":"com"},"ip":{"addr":"109.107.168.66","port":0,"asn":0,"as":"","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-06T05:42:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amltrustservices.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"api-amltrust.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"amltrustservices.com","ip":{"addr":"109.107.168.66","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"domain_registered":"2026-01-18","domain_rank":0,"first_seen":"2026-01-30T05:38:03.917378Z","last_seen":"2026-01-30T05:38:07.135125Z","alert_count":46,"request_count":46,"received_data":617665,"sent_data":21027,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"api-amltrust.com","ip":{"addr":"176.123.4.62","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"domain_registered":"2026-01-12","domain_rank":0,"first_seen":"2026-01-30T05:42:26.043471Z","last_seen":"2026-01-30T05:42:26.043471Z","alert_count":2,"request_count":2,"received_data":7209402,"sent_data":909,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"api-amltrust.com/scripts/main.js","fqdn":"api-amltrust.com","domain":"api-amltrust.com","tld":"com"},"ip":{"addr":"176.123.4.62","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"introduction_type":"scriptElement","is_inline":false,"md5":"35359eb8e91bb4e2acc3f4baf8268a21","sha1":"70d61bcfe2b9922b57152269d187eec87451e271","sha256":"33d2f5a1d3119b71e3b22ff9ae18ae881919f94bc5b50d9d7b387a9076143d74","sha512":"d2a50835fb047f757034fc949048299c87b8e6ad34bd54f4fb8a5316cd930ac67f5e54cccc720c6eb846ba3943416658425d744cf161d2205536500ade016f60","ssdeep":"196608:qQULyw3hhpogM0SUpdA0jJr5y1WxsPQgyWSWadffgyedKyTqxH:qQULywRhpoqfdjJr5y1WxsPQgyWSWadn","tlshash":"f0764a8073a5b476439a51a8543b1405f33da859901d806cf7ecd8f7afb89c98abbf34","size":7206405,"data":"","first_seen":"2026-01-30T05:38:10.424151Z","last_seen":"2026-01-30T05:42:30.657786Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amltrustservices.com/assets/index-BJSkTjN1.js","fqdn":"amltrustservices.com","domain":"amltrustservices.com","tld":"com"},"ip":{"addr":"109.107.168.66","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"143e72ac0e7d1b062c1ee4e97c791807","sha1":"cf64e1e64277306cf7c8ec4f242b55a99c062437","sha256":"3698ce8cdf6ff08d4b3d6f315f4333cc8d7ba00f79e7c3162709c55c5b72482b","sha512":"7510cdd957733ec9600213105b4040a2b83cd442aef685d4992642a66b43fc91d394107134245722d7d6c1087320e355362930854485103e707551a7cc68dde0","ssdeep":"3072:JPRdSyvHfnARsUOaARj6NhE+8u2Lx9gq6TEMk:JNfazOaqj1F9gBTDk","tlshash":"7b043de871a9f6a6aba306f5106f1107733d19176c1d8860b120fd9a67f500ab17bfec","size":174683,"data":"","first_seen":"2026-01-30T05:38:10.418355Z","last_seen":"2026-03-13T02:52:38.459587Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"amltrustservices.com/assets/index-BJSkTjN1.js","fqdn":"amltrustservices.com","domain":"amltrustservices.com","tld":"com"},"ip":{"addr":"109.107.168.66","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amltrustservices.com/","date":"2026-01-30T05:42:00.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amltrustservices.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 14:15:26 GMT","end":"Sat, 18 Apr 2026 14:15:25 GMT"},"fingerprint":{"sha1":"F5:F0:1A:42:9C:2D:29:51:A3:7D:8E:85:CB:0C:38:C6:B3:53:65:AD","sha256":"AE:3F:7A:AA:60:8E:88:57:F4:A3:F9:02:D3:89:7A:28:56:A6:62:13:56:C5:35:B4:7A:85:BA:C1:7A:65:FE:76"}}},"request":{"raw":"GET /assets/index-BJSkTjN1.js HTTP/1.1\r\nHost: amltrustservices.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amltrustservices.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 30 Jan 2026 05:42:00 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Disposition: inline; filename=\"index-BJSkTjN1.js\"\r\nETag: \"2c1b71d9be28c46fe696d689260873dba9b43c18\"\r\nVary: Accept-Encoding\r\nContent-Encoding: br\r\nX-Cache: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":174683,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (37509)","md5":"143e72ac0e7d1b062c1ee4e97c791807","sha1":"cf64e1e64277306cf7c8ec4f242b55a99c062437","sha256":"3698ce8cdf6ff08d4b3d6f315f4333cc8d7ba00f79e7c3162709c55c5b72482b","sha512":"7510cdd957733ec9600213105b4040a2b83cd442aef685d4992642a66b43fc91d394107134245722d7d6c1087320e355362930854485103e707551a7cc68dde0","ssdeep":"3072:JPRdSyvHfnARsUOaARj6NhE+8u2Lx9gq6TEMk:JNfazOaqj1F9gBTDk","tlshash":"7b043de871a9f6a6aba306f5106f1107733d19176c1d8860b120fd9a67f500ab17bfec","first_seen":"2026-01-30T05:38:10.418355Z","last_seen":"2026-03-13T02:52:38.459587Z","times_seen":4,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amltrustservices.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amltrustservices.com/laptop.webp","fqdn":"amltrustservices.com","domain":"amltrustservices.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amltrustservices.com/","date":"2026-01-30T05:42:00.304Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /laptop.webp HTTP/1.1\r\nHost: amltrustservices.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amltrustservices.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T02:51:48.557212Z","times_seen":17519369,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":1,"connect":19,"send":0,"wait":0,"receive":0,"ssl":-1},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amltrustservices.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amltrustservices.com/logos/atii.png","fqdn":"amltrustservices.com","domain":"amltrustservices.com","tld":"com"},"ip":{"addr":"109.107.168.66","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amltrustservices.com/","date":"2026-01-30T05:42:00.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amltrustservices.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 14:15:26 GMT","end":"Sat, 18 Apr 2026 14:15:25 GMT"},"fingerprint":{"sha1":"F5:F0:1A:42:9C:2D:29:51:A3:7D:8E:85:CB:0C:38:C6:B3:53:65:AD","sha256":"AE:3F:7A:AA:60:8E:88:57:F4:A3:F9:02:D3:89:7A:28:56:A6:62:13:56:C5:35:B4:7A:85:BA:C1:7A:65:FE:76"}}},"request":{"raw":"GET /logos/atii.png HTTP/1.1\r\nHost: amltrustservices.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amltrustservices.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T02:51:48.557212Z","times_seen":17519369,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amltrustservices.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amltrustservices.com/logos/atii.png","fqdn":"amltrustservices.com","domain":"amltrustservices.com","tld":"com"},"ip":{"addr":"109.107.168.66","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amltrustservices.com/","date":"2026-01-30T05:42:00.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amltrustservices.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 14:15:26 GMT","end":"Sat, 18 Apr 2026 14:15:25 GMT"},"fingerprint":{"sha1":"F5:F0:1A:42:9C:2D:29:51:A3:7D:8E:85:CB:0C:38:C6:B3:53:65:AD","sha256":"AE:3F:7A:AA:60:8E:88:57:F4:A3:F9:02:D3:89:7A:28:56:A6:62:13:56:C5:35:B4:7A:85:BA:C1:7A:65:FE:76"}}},"request":{"raw":"GET /logos/atii.png HTTP/1.1\r\nHost: amltrustservices.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amltrustservices.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 30 Jan 2026 05:42:00 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Disposition: inline; filename=\"atii.png\"\r\nETag: W/\"53bc4a7e431b5c5c6a0f7fa8aa3794d4d0caf665\"\r\nX-Cache: MISS\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12081,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"a3d45be66e1d55798b4b02318e4d0ebd","sha1":"14b1ba57372f2941c377be5d61e82b2054abedc1","sha256":"617d1589cbb6163f612d14de96057aefa45ad3199d535af3b3855833741d1b8d","sha512":"106a2230fd88962947bf571e3106b387807b083cd0fd7ac0cd359dec688cc02eb3ab5bdd168f552a994d71208375afea8325568c1d77b3f480d1bd397fe83f9c","ssdeep":"192:9BIAkVVyjoNG55bmlegz/Vd/j/pyQ6x7Iz3Elc892KgLLwKtXIpr4T9a:9BIAkVOSGvmlRtdb8Iz3Kz6LES4l4s","tlshash":"e942cfa2bd1020fe7e5c1a9b8060744db4afeb4704151361e7faf3c7a73567918ac8e8","first_seen":"2026-01-30T05:38:10.420596Z","last_seen":"2026-03-13T02:52:38.453016Z","times_seen":4,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amltrustservices.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amltrustservices.com/services_icons/icon-5.webp","fqdn":"amltrustservices.com","domain":"amltrustservices.com","tld":"com"},"ip":{"addr":"109.107.168.66","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amltrustservices.com/","date":"2026-01-30T05:42:00.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amltrustservices.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 14:15:26 GMT","end":"Sat, 18 Apr 2026 14:15:25 GMT"},"fingerprint":{"sha1":"F5:F0:1A:42:9C:2D:29:51:A3:7D:8E:85:CB:0C:38:C6:B3:53:65:AD","sha256":"AE:3F:7A:AA:60:8E:88:57:F4:A3:F9:02:D3:89:7A:28:56:A6:62:13:56:C5:35:B4:7A:85:BA:C1:7A:65:FE:76"}}},"request":{"raw":"GET /services_icons/icon-5.webp HTTP/1.1\r\nHost: amltrustservices.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amltrustservices.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 30 Jan 2026 05:42:00 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1176\r\nConnection: keep-alive\r\nContent-Disposition: inline; filename=\"icon-5.webp\"\r\nETag: \"29122bbf7ad49a7ef9280fa69370a9f0f4225e8e\"\r\nX-Cache: MISS\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1176,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cfd8c2b91f174ecdf4540da5943d735d","sha1":"b728d12867fd6be55e7235d032a152a838021dc7","sha256":"114a66fc0409f07107ecab13dedff82605fe9b945d86b938b239929e78077527","sha512":"e3ef4cd4e31338d00ab0dc5f5c6f5af794d47637ddde1220d3b4ced0ec36c6911a588976481f6fa78070775c915fd7b86fb5d93024eae82621994b3a51119ba4","ssdeep":"","tlshash":"ea210a7e036fedb8ac03e1b57a65068d2c15602de21b37280451c227001ac4c59b7369","first_seen":"2025-07-03T04:30:38.183402Z","last_seen":"2026-03-13T02:52:38.478868Z","times_seen":6,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amltrustservices.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amltrustservices.com/partner_logo/kunaio.webp","fqdn":"amltrustservices.com","domain":"amltrustservices.com","tld":"com"},"ip":{"addr":"109.107.168.66","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amltrustservices.com/","date":"2026-01-30T05:42:00.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amltrustservices.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 14:15:26 GMT","end":"Sat, 18 Apr 2026 14:15:25 GMT"},"fingerprint":{"sha1":"F5:F0:1A:42:9C:2D:29:51:A3:7D:8E:85:CB:0C:38:C6:B3:53:65:AD","sha256":"AE:3F:7A:AA:60:8E:88:57:F4:A3:F9:02:D3:89:7A:28:56:A6:62:13:56:C5:35:B4:7A:85:BA:C1:7A:65:FE:76"}}},"request":{"raw":"GET /partner_logo/kunaio.webp HTTP/1.1\r\nHost: amltrustservices.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amltrustservices.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 30 Jan 2026 05:42:00 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1118\r\nConnection: keep-alive\r\nContent-Disposition: inline; filename=\"kunaio.webp\"\r\nETag: \"789aa78143023b956bd13b77be5f2c864f113040\"\r\nX-Cache: MISS\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1118,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e84da5c9e3f8d31c4612e25e490fbc6e","sha1":"3066aabd21889aa6b62d3c86837c6fcac484b39d","sha256":"00206d3180fd2c493bc673d174d153b537a1c185b75819b65796d67e39ca2ea4","sha512":"fb5cfaa88f4bef1e954e2b1423e21a9de410e49e403519d022ba396dd4acdaa798ec96fd489c4b3dae144c24cea91ac0a9634f3bdeb07f9e467c05b0f45f2d33","ssdeep":"","tlshash":"4421c6dbf5c0cb49ac0d00b1a4ce294bdfef5139b8808c115331c361129fad2dead498","first_seen":"2025-05-30T09:05:59.259667Z","last_seen":"2026-07-13T03:13:12.555325Z","times_seen":110,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":10,"dns":0,"connect":22,"send":0,"wait":21,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amltrustservices.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amltrustservices.com/logos/lsw3.png","fqdn":"amltrustservices.com","domain":"amltrustservices.com","tld":"com"},"ip":{"addr":"109.107.168.66","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amltrustservices.com/","date":"2026-01-30T05:42:00.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amltrustservices.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 14:15:26 GMT","end":"Sat, 18 Apr 2026 14:15:25 GMT"},"fingerprint":{"sha1":"F5:F0:1A:42:9C:2D:29:51:A3:7D:8E:85:CB:0C:38:C6:B3:53:65:AD","sha256":"AE:3F:7A:AA:60:8E:88:57:F4:A3:F9:02:D3:89:7A:28:56:A6:62:13:56:C5:35:B4:7A:85:BA:C1:7A:65:FE:76"}}},"request":{"raw":"GET /logos/lsw3.png HTTP/1.1\r\nHost: amltrustservices.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amltrustservices.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 30 Jan 2026 05:42:00 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Disposition: inline; filename=\"lsw3.png\"\r\nETag: W/\"ee4792f2e04f9d31e98bf33f44ce12d668d4edaf\"\r\nX-Cache: MISS\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6205,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"e9eb8e116eb831a50bc728921d61d188","sha1":"b7a3b910eda697809bcba2d237a02b9c19c8f89b","sha256":"30fb6212b9147e6a23bef3f98e887a6ad2bf0c1004759e648eb420303cb0b96a","sha512":"f5c86736bc58563b074ef1024aaa9fa18154acf27ca5e65c0f67b695759c7d104c688c05b8706bf0fcd15f88443c326e9e760e3679c47eab36b5ae9249e7a724","ssdeep":"192:/Bumetl8Bx6E3os+bYzwEL2Wz9WTay234a:o1Qx6OG2H9xWwb","tlshash":"fad18ee46574d97741c2328a6c331496fb148618417a1fa57269c70f76f066a0aa0beb","first_seen":"2026-01-30T05:38:10.379313Z","last_seen":"2026-03-13T02:52:38.448133Z","times_seen":4,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amltrustservices.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amltrustservices.com/services_icons/icon-3.webp","fqdn":"amltrustservices.com","domain":"amltrustservices.com","tld":"com"},"ip":{"addr":"109.107.168.66","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amltrustservices.com/","date":"2026-01-30T05:42:00.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amltrustservices.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 14:15:26 GMT","end":"Sat, 18 Apr 2026 14:15:25 GMT"},"fingerprint":{"sha1":"F5:F0:1A:42:9C:2D:29:51:A3:7D:8E:85:CB:0C:38:C6:B3:53:65:AD","sha256":"AE:3F:7A:AA:60:8E:88:57:F4:A3:F9:02:D3:89:7A:28:56:A6:62:13:56:C5:35:B4:7A:85:BA:C1:7A:65:FE:76"}}},"request":{"raw":"GET /services_icons/icon-3.webp HTTP/1.1\r\nHost: amltrustservices.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amltrustservices.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 30 Jan 2026 05:42:00 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1056\r\nConnection: keep-alive\r\nContent-Disposition: inline; filename=\"icon-3.webp\"\r\nETag: \"15970c37671e80e2e4d112f124f835f2e10e308e\"\r\nX-Cache: MISS\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1056,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e0dab2ed98041e87dcbc970bb68be32c","sha1":"41095ff4389ac4c7556fdd0ac1e796d060c47485","sha256":"ad3ce68f39447564220bd3b8096300e424cf178ee4f8a6247cb764db753fe926","sha512":"711446499819d739ff0252f7a9944c463133bb83d570823de069a2f87f7c7f91e231c91df6765c0ca6ab1763931aa9f769d6ac81a8e5333bcb2ae34a5b53caed","ssdeep":"","tlshash":"d411d80361355253b696b93d27d3f64210c380561de027711f83ab8d4271167c8f00bd","first_seen":"2025-07-03T04:30:38.210597Z","last_seen":"2026-05-11T00:12:39.053182Z","times_seen":29,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amltrustservices.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-amltrust.com/api/config","fqdn":"api-amltrust.com","domain":"api-amltrust.com","tld":"com"},"ip":{"addr":"176.123.4.62","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://amltrustservices.com/","date":"2026-01-30T05:42:01.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api-amltrust.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 10:55:33 GMT","end":"Tue, 14 Apr 2026 10:55:32 GMT"},"fingerprint":{"sha1":"A3:DE:8A:4B:C1:B3:B7:43:97:16:2D:D8:A0:65:6B:8A:B6:89:2B:E2","sha256":"B6:FE:88:BA:D7:AD:45:40:6C:83:D4:8F:18:F6:F8:75:74:F6:7E:C2:82:6D:8A:88:AA:4C:8B:DD:ED:CF:7D:B5"}}},"request":{"raw":"GET /api/config HTTP/1.1\r\nHost: api-amltrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://amltrustservices.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amltrustservices.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://amltrustservices.com\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: application/json; charset=utf-8\r\ndate: Fri, 30 Jan 2026 05:42:02 GMT\r\netag: W/\"8d7-3n+pkgK/whhftjX1CV0Qfj6IkMo\"\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-powered-by: Express\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2263,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c76fd6cf6b28d679de6b10fe20ff5b39","sha1":"de7fa99202bfc2185fb635f5095d107e3e8890ca","sha256":"eb97d471944051d188be0d655c8061da9723d13272dde8127aced9bebf7f5c14","sha512":"52bb861b6eae3e31a063bd102931cef1bc6276c392b619b3368ce103c46636ec2bf3aab8e269147f834d0341893c9bfc507660d6f3ec3335544e7da5ee2cc1af","ssdeep":"","tlshash":"924103c601d2dceb97a02363b49f3a789195214b0898ed9f1bae5cd5e7fc1d300618fa","first_seen":"2026-01-30T05:38:10.416531Z","last_seen":"2026-01-30T05:42:30.625514Z","times_seen":2,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":119,"dns":0,"connect":53,"send":0,"wait":63,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"api-amltrust.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amltrustservices.com/services_icons/icon-2.webp","fqdn":"amltrustservices.com","domain":"amltrustservices.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amltrustservices.com/","date":"2026-01-30T05:42:00.358Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /services_icons/icon-2.webp HTTP/1.1\r\nHost: amltrustservices.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amltrustservices.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T02:51:48.557212Z","times_seen":17519369,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amltrustservices.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amltrustservices.com/logos/inatba.png","fqdn":"amltrustservices.com","domain":"amltrustservices.com","tld":"com"},"ip":{"addr":"109.107.168.66","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amltrustservices.com/","date":"2026-01-30T05:42:00.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amltrustservices.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 14:15:26 GMT","end":"Sat, 18 Apr 2026 14:15:25 GMT"},"fingerprint":{"sha1":"F5:F0:1A:42:9C:2D:29:51:A3:7D:8E:85:CB:0C:38:C6:B3:53:65:AD","sha256":"AE:3F:7A:AA:60:8E:88:57:F4:A3:F9:02:D3:89:7A:28:56:A6:62:13:56:C5:35:B4:7A:85:BA:C1:7A:65:FE:76"}}},"request":{"raw":"GET /logos/inatba.png HTTP/1.1\r\nHost: amltrustservices.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amltrustservices.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 30 Jan 2026 05:42:00 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Disposition: inline; filename=\"inatba.png\"\r\nETag: W/\"9be5a5bf2808a472c8ea448f06e59047271b58a6\"\r\nX-Cache: MISS\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10932,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"c3f81837af2644d054f988f6a5fc8195","sha1":"a612087da950b5aff570a96d2597ab897c8cfd96","sha256":"20e8f0ea398ee07a8b8eee5487e213f7e2d92300f9f479972dbd00c9e7c34144","sha512":"506bf2d3dc9df20e2b5a8e7d6742d65772bfc06e8d7a9ca7e8b3cd9d19ea7bf9995dfcb0344907ed0d27395934ffa308ab903b285f9df68754fc31855706b350","ssdeep":"192:qR/90nXp2MyPQgeh7+rWqI6USDfS4iBRgrnVPiVNke5ouxkUa:qRFEXIQD4ILseXkMoumn","tlshash":"a532c09b8a8ae076c5971150e2b043e3bc53cd532d474fc98672fcf9201ea062cb396d","first_seen":"2026-01-30T05:38:10.398858Z","last_seen":"2026-03-13T02:52:38.449899Z","times_seen":4,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amltrustservices.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amltrustservices.com/logos/cda.png","fqdn":"amltrustservices.com","domain":"amltrustservices.com","tld":"com"},"ip":{"addr":"109.107.168.66","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amltrustservices.com/","date":"2026-01-30T05:42:00.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amltrustservices.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 14:15:26 GMT","end":"Sat, 18 Apr 2026 14:15:25 GMT"},"fingerprint":{"sha1":"F5:F0:1A:42:9C:2D:29:51:A3:7D:8E:85:CB:0C:38:C6:B3:53:65:AD","sha256":"AE:3F:7A:AA:60:8E:88:57:F4:A3:F9:02:D3:89:7A:28:56:A6:62:13:56:C5:35:B4:7A:85:BA:C1:7A:65:FE:76"}}},"request":{"raw":"GET /logos/cda.png HTTP/1.1\r\nHost: amltrustservices.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amltrustservices.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 30 Jan 2026 05:42:00 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Disposition: inline; filename=\"cda.png\"\r\nETag: W/\"64e79b95749940c4ec52e5684d8260d2427d2bcd\"\r\nX-Cache: MISS\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11418,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"b53ed72218b0097cfa49b4ec657ee7bc","sha1":"8899f2f4c6b8e2c5bfc9ae785e301a9fc966b9f0","sha256":"19f3501af93a6163a1e0cefa700bdc423f061e7f52769f08168d0f5b89fd84a6","sha512":"8b125466fbe1b224aff874b09a215576c35a79d83ff740d2361fab4873344d13cc12ae9d8fa941f72180be921c8343375223bc48f86f7bf9b0e09ceb580309f7","ssdeep":"192:VLBcZrYzTXtXA7Wfp5qNpuOn/5kmIZwR0CLaLZyRQzAxV/rKxSyPY10ldoajFJ3Y:1WVsdXAyfAJnhJP0MaLoXD9ygsNZoN","tlshash":"a632d0f2580ac061e492aa1da7053967f09304cb32123c7c44ee6f32281d7d86abd7f9","first_seen":"2026-01-30T05:38:10.405958Z","last_seen":"2026-03-13T02:52:38.446117Z","times_seen":4,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amltrustservices.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amltrustservices.com/laptop.webp","fqdn":"amltrustservices.com","domain":"amltrustservices.com","tld":"com"},"ip":{"addr":"109.107.168.66","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amltrustservices.com/","date":"2026-01-30T05:42:00.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amltrustservices.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 14:15:26 GMT","end":"Sat, 18 Apr 2026 14:15:25 GMT"},"fingerprint":{"sha1":"F5:F0:1A:42:9C:2D:29:51:A3:7D:8E:85:CB:0C:38:C6:B3:53:65:AD","sha256":"AE:3F:7A:AA:60:8E:88:57:F4:A3:F9:02:D3:89:7A:28:56:A6:62:13:56:C5:35:B4:7A:85:BA:C1:7A:65:FE:76"}}},"request":{"raw":"GET /laptop.webp HTTP/1.1\r\nHost: amltrustservices.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amltrustservices.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 30 Jan 2026 05:42:00 GMT\r\nContent-Type: image/webp\r\nContent-Length: 29514\r\nConnection: keep-alive\r\nContent-Disposition: inline; filename=\"laptop.webp\"\r\nETag: \"70abd77392f339088ea200ff81969efda25fddf4\"\r\nX-Cache: MISS\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29514,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c9c86d145b1819756853a057a05530c1","sha1":"4717dc4ba5d2ee30ac5c32ce51d525ec9f447315","sha256":"f9bdae66b56ec0c1f3f2c50dddfd4ea806fa4b624b72b547c00b3bc60a5f90ec","sha512":"914873b29b8a3bd754c9af91b9318bd3b3e11ff007257c96797e0884fe656013f900eb7460d4a0a1cdc2203b2ab656b225a6d40723c431791f8e44ea9bcfd667","ssdeep":"768:lllXJ9qzKFE5jwmDlll1u4WZipgp9Q+SGzjxugPFDR48W2kUr2h:lll5Yz9imDlll1uPi29Qkjv342kUr","tlshash":"f6d2bf3706acd185e281fa75a0a4bac727567e3e621349801d2d2c2b934797f3b684fd","first_seen":"2025-09-08T07:14:17.207865Z","last_seen":"2026-06-28T23:00:47.730774Z","times_seen":46,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amltrustservices.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amltrustservices.com/AMLBot.png","fqdn":"amltrustservices.com","domain":"amltrustservices.com","tld":"com"},"ip":{"addr":"109.107.168.66","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amltrustservices.com/","date":"2026-01-30T05:42:00.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amltrustservices.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 14:15:26 GMT","end":"Sat, 18 Apr 2026 14:15:25 GMT"},"fingerprint":{"sha1":"F5:F0:1A:42:9C:2D:29:51:A3:7D:8E:85:CB:0C:38:C6:B3:53:65:AD","sha256":"AE:3F:7A:AA:60:8E:88:57:F4:A3:F9:02:D3:89:7A:28:56:A6:62:13:56:C5:35:B4:7A:85:BA:C1:7A:65:FE:76"}}},"request":{"raw":"GET /AMLBot.png HTTP/1.1\r\nHost: amltrustservices.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amltrustservices.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 30 Jan 2026 05:42:00 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Disposition: inline; filename=\"AMLBot.png\"\r\nETag: W/\"03309184207d5b1dbb2072cfff3a9d54882e69b4\"\r\nX-Cache: MISS\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10350,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 101 x 126, 8-bit/color RGBA, non-interlaced","md5":"af3e5690579f1ffb8317b18a063f12d2","sha1":"8b2aeea45991a6a7275a3f53325051a512cb0db8","sha256":"4f7e4562da6eadef52b1c9c54df093c8a4036a16ce970b2cc5c9a9d30036923e","sha512":"c78f83a38361d08d88dbbc7f3c4a6ecbc11eb830f39241bb311260f285cc958925e1e3803207ad7d121a32e605895861966c999d924ac35625ea7801e21d42e9","ssdeep":"192:0jhfs27Z9mf/f0k/YpNtGCWi/YfWjTScHX80pjarYHfaKor9N:8f5Z9mfH0/GCB/Yf3cHX8Y/H89N","tlshash":"ae22bf630c205efb19a274329e1d8bbcdcc93d772e1076bc182e434625e9a3a55f0f94","first_seen":"2026-01-30T05:38:10.397015Z","last_seen":"2026-03-13T02:52:38.456584Z","times_seen":4,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amltrustservices.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amltrustservices.com/logos/inatba.png","fqdn":"amltrustservices.com","domain":"amltrustservices.com","tld":"com"},"ip":{"addr":"109.107.168.66","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amltrustservices.com/","date":"2026-01-30T05:42:00.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amltrustservices.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 14:15:26 GMT","end":"Sat, 18 Apr 2026 14:15:25 GMT"},"fingerprint":{"sha1":"F5:F0:1A:42:9C:2D:29:51:A3:7D:8E:85:CB:0C:38:C6:B3:53:65:AD","sha256":"AE:3F:7A:AA:60:8E:88:57:F4:A3:F9:02:D3:89:7A:28:56:A6:62:13:56:C5:35:B4:7A:85:BA:C1:7A:65:FE:76"}}},"request":{"raw":"GET /logos/inatba.png HTTP/1.1\r\nHost: amltrustservices.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amltrustservices.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 30 Jan 2026 05:42:00 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Disposition: inline; filename=\"inatba.png\"\r\nETag: W/\"9be5a5bf2808a472c8ea448f06e59047271b58a6\"\r\nX-Cache: MISS\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10932,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"c3f81837af2644d054f988f6a5fc8195","sha1":"a612087da950b5aff570a96d2597ab897c8cfd96","sha256":"20e8f0ea398ee07a8b8eee5487e213f7e2d92300f9f479972dbd00c9e7c34144","sha512":"506bf2d3dc9df20e2b5a8e7d6742d65772bfc06e8d7a9ca7e8b3cd9d19ea7bf9995dfcb0344907ed0d27395934ffa308ab903b285f9df68754fc31855706b350","ssdeep":"192:qR/90nXp2MyPQgeh7+rWqI6USDfS4iBRgrnVPiVNke5ouxkUa:qRFEXIQD4ILseXkMoumn","tlshash":"a532c09b8a8ae076c5971150e2b043e3bc53cd532d474fc98672fcf9201ea062cb396d","first_seen":"2026-01-30T05:38:10.398858Z","last_seen":"2026-03-13T02:52:38.449899Z","times_seen":4,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amltrustservices.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amltrustservices.com/services_icons/icon-1.webp","fqdn":"amltrustservices.com","domain":"amltrustservices.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amltrustservices.com/","date":"2026-01-30T05:42:00.356Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /services_icons/icon-1.webp HTTP/1.1\r\nHost: amltrustservices.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amltrustservices.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T02:51:48.557212Z","times_seen":17519369,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amltrustservices.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amltrustservices.com/logos/ftahk.png","fqdn":"amltrustservices.com","domain":"amltrustservices.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amltrustservices.com/","date":"2026-01-30T05:42:00.299Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /logos/ftahk.png HTTP/1.1\r\nHost: amltrustservices.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amltrustservices.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T02:51:48.557212Z","times_seen":17519369,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":1,"connect":20,"send":0,"wait":0,"receive":0,"ssl":-1},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amltrustservices.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amltrustservices.com/partner_logo/verifiwallet.webp","fqdn":"amltrustservices.com","domain":"amltrustservices.com","tld":"com"},"ip":{"addr":"109.107.168.66","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amltrustservices.com/","date":"2026-01-30T05:42:00.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amltrustservices.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 14:15:26 GMT","end":"Sat, 18 Apr 2026 14:15:25 GMT"},"fingerprint":{"sha1":"F5:F0:1A:42:9C:2D:29:51:A3:7D:8E:85:CB:0C:38:C6:B3:53:65:AD","sha256":"AE:3F:7A:AA:60:8E:88:57:F4:A3:F9:02:D3:89:7A:28:56:A6:62:13:56:C5:35:B4:7A:85:BA:C1:7A:65:FE:76"}}},"request":{"raw":"GET /partner_logo/verifiwallet.webp HTTP/1.1\r\nHost: amltrustservices.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amltrustservices.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 30 Jan 2026 05:42:00 GMT\r\nContent-Type: image/webp\r\nContent-Length: 12260\r\nConnection: keep-alive\r\nContent-Disposition: inline; filename=\"verifiwallet.webp\"\r\nETag: \"73506f7cff6f9b582d7b66860d299ff17e5a3a1d\"\r\nX-Cache: MISS\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12260,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7315971f8025a19f325e44ecdbacf8d7","sha1":"102b3c32efa26f89235b938838199eb5cc8a253e","sha256":"31005453130bbe70c12f7f84b59d771e68b02a30142a7ef21dc6e88308f235e8","sha512":"4d47b2ac4c2ee033288a67da09b734f68de852c3841a30d5383282e64d8179a22a3ae8239b161a846c61adf9ef9a87e0f607df41f67680f9f1685e4fa2bba52d","ssdeep":"192:srwnBfddg75FDXy0fYIrRihTSy+03yM6CsBZUnZg7kMJVubHpmT9yZCVLTJu0ZFh:KwDd4FDCBMMgBZAg7kyeg9yZAJDdMd2X","tlshash":"cb42c060a74f1f77eed9478021adb21c075baae8ac025ec4671ee27777aa43c015e314","first_seen":"2025-09-08T07:14:17.260513Z","last_seen":"2026-03-13T02:52:38.462073Z","times_seen":10,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amltrustservices.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amltrustservices.com/why_sec_icons/3.webp","fqdn":"amltrustservices.com","domain":"amltrustservices.com","tld":"com"},"ip":{"addr":"109.107.168.66","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://amltrustservices.com/","date":"2026-01-30T05:42:00.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amltrustservices.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 14:15:26 GMT","end":"Sat, 18 Apr 2026 14:15:25 GMT"},"fingerprint":{"sha1":"F5:F0:1A:42:9C:2D:29:51:A3:7D:8E:85:CB:0C:38:C6:B3:53:65:AD","sha256":"AE:3F:7A:AA:60:8E:88:57:F4:A3:F9:02:D3:89:7A:28:56:A6:62:13:56:C5:35:B4:7A:85:BA:C1:7A:65:FE:76"}}},"request":{"raw":"GET /why_sec_icons/3.webp HTTP/1.1\r\nHost: amltrustservices.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amltrustservices.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 30 Jan 2026 05:42:00 GMT\r\nContent-Type: image/webp\r\nContent-Length: 36826\r\nConnection: keep-alive\r\nContent-Disposition: inline; filename=\"3.webp\"\r\nETag: \"56ede9ef59428be88a458e9ba1dcedd670f7f53a\"\r\nX-Cache: MISS\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36826,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"aba13635939c03a17afa4a41fc1b4088","sha1":"446186abfb16b55801c6099f37f971f3566cd921","sha256":"e98877382ccca0e6291109e87d31161085d9a58bf265b86becd48f816616f8e9","sha512":"36aa6e41b8c08717912ffc1c4f766f1fc5dd1c3d47db9313214df729ee80e2bd0388252a23490a51415df492948f5bf27c932d24eb0d445c3b499a32d9593c03","ssdeep":"768:/BIS5OxR20o7ZOcTlgtOvWLcvXbCWuyy5nKATOHIQRHn42gd5vs:/B0Rzo7Z/TlgtOvWL8AyyZKAiIY41v","tlshash":"edf2f2a7deb36b87f2921171ece6c26c190bd08972ea8e5255158f1e561ca338e4e430","first_seen":"2025-06-28T19:40:28.802755Z","last_seen":"2026-06-28T21:40:24.461149Z","times_seen":112,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amltrustservices.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amltrustservices.com/services_icons/icon-4.webp","fqdn":"amltrustservices.com","domain":"amltrustservices.com","tld":"com"},"ip":{"addr":"109.107.168.66","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amltrustservices.com/","date":"2026-01-30T05:42:00.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amltrustservices.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 14:15:26 GMT","end":"Sat, 18 Apr 2026 14:15:25 GMT"},"fingerprint":{"sha1":"F5:F0:1A:42:9C:2D:29:51:A3:7D:8E:85:CB:0C:38:C6:B3:53:65:AD","sha256":"AE:3F:7A:AA:60:8E:88:57:F4:A3:F9:02:D3:89:7A:28:56:A6:62:13:56:C5:35:B4:7A:85:BA:C1:7A:65:FE:76"}}},"request":{"raw":"GET /services_icons/icon-4.webp HTTP/1.1\r\nHost: amltrustservices.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amltrustservices.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 30 Jan 2026 05:42:00 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1132\r\nConnection: keep-alive\r\nContent-Disposition: inline; filename=\"icon-4.webp\"\r\nETag: \"6ca78148a17b5af332077336c2ed87b189b78178\"\r\nX-Cache: MISS\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1132,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"478ea8f97e026d89d89102a62d248391","sha1":"7cd02f8fd283250136ae178778d0fa860c2566cb","sha256":"dcb653f0e65d7c0e57423c18d6eb38f965a1d435fe1786456b49315dbfdb6376","sha512":"ae17d44cc8e0baae3c42a6691700f5a6a8c3fd67d84f7b0f88d3488f919c0c7eadef7e7b39cc8639a7c3fa888d68750248caa4a7eb1dafcea80dc357bc2f341f","ssdeep":"","tlshash":"a6219659c723302bf18e8d395889af395b8e24066f90750cd0483e2821c5babf9f1199","first_seen":"2025-07-03T04:30:38.211485Z","last_seen":"2026-05-11T00:12:39.054045Z","times_seen":36,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amltrustservices.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amltrustservices.com/","fqdn":"amltrustservices.com","domain":"amltrustservices.com","tld":"com"},"ip":{"addr":"109.107.168.66","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-30T05:41:59.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amltrustservices.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 14:15:26 GMT","end":"Sat, 18 Apr 2026 14:15:25 GMT"},"fingerprint":{"sha1":"F5:F0:1A:42:9C:2D:29:51:A3:7D:8E:85:CB:0C:38:C6:B3:53:65:AD","sha256":"AE:3F:7A:AA:60:8E:88:57:F4:A3:F9:02:D3:89:7A:28:56:A6:62:13:56:C5:35:B4:7A:85:BA:C1:7A:65:FE:76"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: amltrustservices.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 30 Jan 2026 05:42:00 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Disposition: inline; filename=\"index.html\"\r\nETag: \"73ca325217a4df164d7fe33a4aa22d943a75aa1f\"\r\nVary: Accept-Encoding\r\nContent-Encoding: br\r\nX-Cache: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1045,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"9e79098684488e8712d0d009ac3f03c7","sha1":"605f791a4c068e618ca7b06d016e02d7f712394f","sha256":"12e3e6359a64a584acdd653f97d66228901cb71952fe08f3ffd1544f64567931","sha512":"beaaa8ea9a34daa444db5ed4d9f6edef5c715a7124fabbef6f83bd5862114b2949278d96e9dbd62480be07f039492e86b846cc867508bbad2b3fd6f062aecb4f","ssdeep":"","tlshash":"1b11af934c9a895102700655aee0f048545bb60faa4ee45cb1dcf07d8f81fb6b9c7aac","first_seen":"2026-01-30T05:38:10.387998Z","last_seen":"2026-03-13T02:52:38.477527Z","times_seen":4,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":41,"dns":1,"connect":20,"send":0,"wait":21,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amltrustservices.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amltrustservices.com/partner_logo/credits.webp","fqdn":"amltrustservices.com","domain":"amltrustservices.com","tld":"com"},"ip":{"addr":"109.107.168.66","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amltrustservices.com/","date":"2026-01-30T05:42:00.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amltrustservices.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 14:15:26 GMT","end":"Sat, 18 Apr 2026 14:15:25 GMT"},"fingerprint":{"sha1":"F5:F0:1A:42:9C:2D:29:51:A3:7D:8E:85:CB:0C:38:C6:B3:53:65:AD","sha256":"AE:3F:7A:AA:60:8E:88:57:F4:A3:F9:02:D3:89:7A:28:56:A6:62:13:56:C5:35:B4:7A:85:BA:C1:7A:65:FE:76"}}},"request":{"raw":"GET /partner_logo/credits.webp HTTP/1.1\r\nHost: amltrustservices.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amltrustservices.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 30 Jan 2026 05:42:00 GMT\r\nContent-Type: image/webp\r\nContent-Length: 7402\r\nConnection: keep-alive\r\nContent-Disposition: inline; filename=\"credits.webp\"\r\nETag: \"eb89c867f55ed112729148cd420dc5a232c414ac\"\r\nX-Cache: MISS\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7402,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6a53df6d9fd79ede9178041a2ba61da8","sha1":"91e6eb309b3f3e392ed707f6edf28275102e01c1","sha256":"4fc8119fc793f06bb74cefe9f9ef9ae10660a108af5672cc788a1c7e27bbcd27","sha512":"826f3d7590888bf73495592e09f3ac2633bc188c25646cbd275c688361afdd690e63e8998aeeb4af141ff414849677632b2ae9bbe6ee835ece41735e89f81f36","ssdeep":"192:63bfqwKfdI+1gui3KUPYigj12tHYqMys1A6uWr:67qxLCbxo1Gg","tlshash":"33e16e788a5b3beec01e56bd02646ec7078ad2375d74bb6e138c4c9744a33239cd4159","first_seen":"2025-05-30T09:05:59.239627Z","last_seen":"2026-07-13T03:13:12.540073Z","times_seen":167,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amltrustservices.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amltrustservices.com/team_photo/slava-demchuk.webp","fqdn":"amltrustservices.com","domain":"amltrustservices.com","tld":"com"},"ip":{"addr":"109.107.168.66","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://amltrustservices.com/","date":"2026-01-30T05:42:00.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amltrustservices.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 14:15:26 GMT","end":"Sat, 18 Apr 2026 14:15:25 GMT"},"fingerprint":{"sha1":"F5:F0:1A:42:9C:2D:29:51:A3:7D:8E:85:CB:0C:38:C6:B3:53:65:AD","sha256":"AE:3F:7A:AA:60:8E:88:57:F4:A3:F9:02:D3:89:7A:28:56:A6:62:13:56:C5:35:B4:7A:85:BA:C1:7A:65:FE:76"}}},"request":{"raw":"GET /team_photo/slava-demchuk.webp HTTP/1.1\r\nHost: amltrustservices.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amltrustservices.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 30 Jan 2026 05:42:00 GMT\r\nContent-Type: image/webp\r\nContent-Length: 3130\r\nConnection: keep-alive\r\nContent-Disposition: inline; filename=\"slava-demchuk.webp\"\r\nETag: \"ebfb64a5b22f4ccff718d495500cf7614dec3b95\"\r\nX-Cache: MISS\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3130,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x366, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2d31961f03995004043bc75cb47a352e","sha1":"85fbbbed31ccf33309e03046b9d7f8718c223a18","sha256":"48df89880c736246d7d187d96c6a85b7fa9b5325d23f014c9dce512976546ea6","sha512":"fe6cdb69b9333d3f51c2575612e0643aa4bc8fcaa96c20feccc91c398f75e50da063bde46eefed1ae33c6fec243225a74387b05739ff40f63cd44df6ca29034d","ssdeep":"","tlshash":"84513b0e476800f28e6d81bfa137d9161d483908e906727110afd0210a4fbe67d5bf4c","first_seen":"2025-06-28T19:47:13.73795Z","last_seen":"2026-06-28T23:08:29.215758Z","times_seen":50,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amltrustservices.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api-amltrust.com/scripts/main.js","fqdn":"api-amltrust.com","domain":"api-amltrust.com","tld":"com"},"ip":{"addr":"176.123.4.62","port":443,"asn":200019,"as":"Alexhost Srl","country":"Moldova","country_code":"MD"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amltrustservices.com/","date":"2026-01-30T05:42:00.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api-amltrust.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 10:55:33 GMT","end":"Tue, 14 Apr 2026 10:55:32 GMT"},"fingerprint":{"sha1":"A3:DE:8A:4B:C1:B3:B7:43:97:16:2D:D8:A0:65:6B:8A:B6:89:2B:E2","sha256":"B6:FE:88:BA:D7:AD:45:40:6C:83:D4:8F:18:F6:F8:75:74:F6:7E:C2:82:6D:8A:88:AA:4C:8B:DD:ED:CF:7D:B5"}}},"request":{"raw":"GET /scripts/main.js HTTP/1.1\r\nHost: api-amltrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amltrustservices.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: no-store\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Fri, 30 Jan 2026 05:42:00 GMT\r\netag: W/\"6df605-19c0475d4c8\"\r\nlast-modified: Wed, 28 Jan 2026 11:55:57 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7206405,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (36062)","md5":"995253b37a5b516bb7a9ca59b8bc24cb","sha1":"7d186dd5cf282d3282561e709feed10ab6dde893","sha256":"0db287e33b00c0650231f1d2f8846ae9d086daa88132680e9b26ce34e1059ef7","sha512":"540010e72bbe5228f5c338a9a82b70de4a33282e5af49570923069685575d7fc2ba027386b27639916f36663ee845b98d0970a200cac9e55286f562d5757f03c","ssdeep":"24576:qFqTTPV3xGx8df4YF0nF2lvmLyHqzWwhhpoEIP1Scx:qFqTTPV3xGx8aYusluLyHQWwhhpoE81l","tlshash":"bb255d9073a1f07643ef5199646b1101f238ac94504d446cfbe8d9fbbae988886bff35","first_seen":"2026-01-30T05:38:10.389593Z","last_seen":"2026-01-30T05:42:30.633722Z","times_seen":2,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":111,"dns":1,"connect":52,"send":0,"wait":63,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"api-amltrust.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amltrustservices.com/services_icons/icon-3.webp","fqdn":"amltrustservices.com","domain":"amltrustservices.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amltrustservices.com/","date":"2026-01-30T05:42:00.359Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /services_icons/icon-3.webp HTTP/1.1\r\nHost: amltrustservices.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amltrustservices.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T02:51:48.557212Z","times_seen":17519369,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amltrustservices.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amltrustservices.com/AMLBot.png","fqdn":"amltrustservices.com","domain":"amltrustservices.com","tld":"com"},"ip":{"addr":"109.107.168.66","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amltrustservices.com/","date":"2026-01-30T05:42:01.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amltrustservices.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 14:15:26 GMT","end":"Sat, 18 Apr 2026 14:15:25 GMT"},"fingerprint":{"sha1":"F5:F0:1A:42:9C:2D:29:51:A3:7D:8E:85:CB:0C:38:C6:B3:53:65:AD","sha256":"AE:3F:7A:AA:60:8E:88:57:F4:A3:F9:02:D3:89:7A:28:56:A6:62:13:56:C5:35:B4:7A:85:BA:C1:7A:65:FE:76"}}},"request":{"raw":"GET /AMLBot.png HTTP/1.1\r\nHost: amltrustservices.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amltrustservices.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 30 Jan 2026 05:42:01 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Disposition: inline; filename=\"AMLBot.png\"\r\nETag: W/\"03309184207d5b1dbb2072cfff3a9d54882e69b4\"\r\nX-Cache: MISS\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10350,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 101 x 126, 8-bit/color RGBA, non-interlaced","md5":"af3e5690579f1ffb8317b18a063f12d2","sha1":"8b2aeea45991a6a7275a3f53325051a512cb0db8","sha256":"4f7e4562da6eadef52b1c9c54df093c8a4036a16ce970b2cc5c9a9d30036923e","sha512":"c78f83a38361d08d88dbbc7f3c4a6ecbc11eb830f39241bb311260f285cc958925e1e3803207ad7d121a32e605895861966c999d924ac35625ea7801e21d42e9","ssdeep":"192:0jhfs27Z9mf/f0k/YpNtGCWi/YfWjTScHX80pjarYHfaKor9N:8f5Z9mfH0/GCB/Yf3cHX8Y/H89N","tlshash":"ae22bf630c205efb19a274329e1d8bbcdcc93d772e1076bc182e434625e9a3a55f0f94","first_seen":"2026-01-30T05:38:10.397015Z","last_seen":"2026-03-13T02:52:38.456584Z","times_seen":4,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amltrustservices.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amltrustservices.com/partner_logo/goodcrypto.webp","fqdn":"amltrustservices.com","domain":"amltrustservices.com","tld":"com"},"ip":{"addr":"109.107.168.66","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amltrustservices.com/","date":"2026-01-30T05:42:00.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amltrustservices.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 14:15:26 GMT","end":"Sat, 18 Apr 2026 14:15:25 GMT"},"fingerprint":{"sha1":"F5:F0:1A:42:9C:2D:29:51:A3:7D:8E:85:CB:0C:38:C6:B3:53:65:AD","sha256":"AE:3F:7A:AA:60:8E:88:57:F4:A3:F9:02:D3:89:7A:28:56:A6:62:13:56:C5:35:B4:7A:85:BA:C1:7A:65:FE:76"}}},"request":{"raw":"GET /partner_logo/goodcrypto.webp HTTP/1.1\r\nHost: amltrustservices.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amltrustservices.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 30 Jan 2026 05:42:00 GMT\r\nContent-Type: image/webp\r\nContent-Length: 3198\r\nConnection: keep-alive\r\nContent-Disposition: inline; filename=\"goodcrypto.webp\"\r\nETag: \"62998240b7bba319d990eb90583519119586c91f\"\r\nX-Cache: MISS\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3198,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a00b8023fae452242e915d0e956f7492","sha1":"6aab0859ae1a861df90d5075a352736715a4e393","sha256":"d36df6b7661585f42d200878a8bf9f162d71b3dd5723133a324a3ffff4becc1f","sha512":"ec10d518aabbefe4621e09c7f3a7b9dad8d6460b3e0d2ea3aa431d8e5325ce674ab14f6fc3e3dc917a4bb101d0a896468abdabb2e6d658ed241e752413eab69b","ssdeep":"","tlshash":"80615d958c972396d98358b885fa58047e12d0cfff78dd72091ddd5090ec864b34735a","first_seen":"2025-05-30T09:05:59.245346Z","last_seen":"2026-07-13T03:13:12.525917Z","times_seen":105,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":53,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amltrustservices.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amltrustservices.com/partner_logo/letsexchange.webp","fqdn":"amltrustservices.com","domain":"amltrustservices.com","tld":"com"},"ip":{"addr":"109.107.168.66","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amltrustservices.com/","date":"2026-01-30T05:42:00.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amltrustservices.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 14:15:26 GMT","end":"Sat, 18 Apr 2026 14:15:25 GMT"},"fingerprint":{"sha1":"F5:F0:1A:42:9C:2D:29:51:A3:7D:8E:85:CB:0C:38:C6:B3:53:65:AD","sha256":"AE:3F:7A:AA:60:8E:88:57:F4:A3:F9:02:D3:89:7A:28:56:A6:62:13:56:C5:35:B4:7A:85:BA:C1:7A:65:FE:76"}}},"request":{"raw":"GET /partner_logo/letsexchange.webp HTTP/1.1\r\nHost: amltrustservices.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amltrustservices.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 30 Jan 2026 05:42:00 GMT\r\nContent-Type: image/webp\r\nContent-Length: 8814\r\nConnection: keep-alive\r\nContent-Disposition: inline; filename=\"letsexchange.webp\"\r\nETag: \"4711a7f92e06028a1698dfa3b741ce16c8583d5f\"\r\nX-Cache: MISS\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8814,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"119bf014f4b65bf3b9b2db4b2508eae1","sha1":"c2e0a1ce31ea866fdeaa9f9d592e45c2b330d3b5","sha256":"15004e55113144494f446546861ae6cafda331cf608332e491a4cabed03cd648","sha512":"742729ec83720921a3c57c2983cb546696639077aa55238e97e98ff6b3b576b6a24db5bdddd6534b8f14cf56507cc36335aff5be9779f41385374d751dd03c27","ssdeep":"192:NpU3EZahOMn0EeFFkL8iiHmh1HE7D1/lLLwYEET8Hud89px:NpU3zzn0EQFSheNJLwYAuun","tlshash":"bd02afc5e198385cadf1193a3e4a5f8d465540eb1f1fa58cd4b5b2d7022b0bb3d181e9","first_seen":"2025-05-30T09:05:59.251093Z","last_seen":"2026-07-13T03:13:12.55621Z","times_seen":156,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amltrustservices.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amltrustservices.com/logos/eba.png","fqdn":"amltrustservices.com","domain":"amltrustservices.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amltrustservices.com/","date":"2026-01-30T05:42:00.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amltrustservices.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 14:15:26 GMT","end":"Sat, 18 Apr 2026 14:15:25 GMT"},"fingerprint":{"sha1":"F5:F0:1A:42:9C:2D:29:51:A3:7D:8E:85:CB:0C:38:C6:B3:53:65:AD","sha256":"AE:3F:7A:AA:60:8E:88:57:F4:A3:F9:02:D3:89:7A:28:56:A6:62:13:56:C5:35:B4:7A:85:BA:C1:7A:65:FE:76"}}},"request":{"raw":"GET /logos/eba.png HTTP/1.1\r\nHost: amltrustservices.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amltrustservices.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T02:51:48.557212Z","times_seen":17519369,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amltrustservices.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amltrustservices.com/partner_logo/misttrack.webp","fqdn":"amltrustservices.com","domain":"amltrustservices.com","tld":"com"},"ip":{"addr":"109.107.168.66","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amltrustservices.com/","date":"2026-01-30T05:42:00.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amltrustservices.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 14:15:26 GMT","end":"Sat, 18 Apr 2026 14:15:25 GMT"},"fingerprint":{"sha1":"F5:F0:1A:42:9C:2D:29:51:A3:7D:8E:85:CB:0C:38:C6:B3:53:65:AD","sha256":"AE:3F:7A:AA:60:8E:88:57:F4:A3:F9:02:D3:89:7A:28:56:A6:62:13:56:C5:35:B4:7A:85:BA:C1:7A:65:FE:76"}}},"request":{"raw":"GET /partner_logo/misttrack.webp HTTP/1.1\r\nHost: amltrustservices.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amltrustservices.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 30 Jan 2026 05:42:00 GMT\r\nContent-Type: image/webp\r\nContent-Length: 6130\r\nConnection: keep-alive\r\nContent-Disposition: inline; filename=\"misttrack.webp\"\r\nETag: \"7169ca720bfd201b87765f605da34b83ca110238\"\r\nX-Cache: MISS\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6130,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8abdaae2103aa2fa1ab718911ad885ac","sha1":"9a7661bfcac192f1b82f24cb541980168b4d5154","sha256":"3d42b6d5f559c879833949cba8074322db7442e0257729023b8ccf23f740274f","sha512":"1ccdd462f3ba3950f678c48693707393a7da75526d9a7cbae74e79ab82b4207b341f3418521805608f4ca3420dfb6679d20c2f3fc7332e528ef7b0c6b218b9fb","ssdeep":"96:2EkX5GjN7mb6SUNfrGUJlVtPY5Hb+o6f3SPC3uRZjuHovwfwB/T7Hehe0mW:LYGBmb6SsrGUrcHb+o6fCPMuR9uHQFF6","tlshash":"74c17dc683d986976427dfd57d31b0a7dde03a86ae6b8c17a14ccb8e90341215e32c4e","first_seen":"2025-05-30T09:05:59.250044Z","last_seen":"2026-07-13T03:13:12.535738Z","times_seen":159,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amltrustservices.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amltrustservices.com/partner_logo/gateio.webp","fqdn":"amltrustservices.com","domain":"amltrustservices.com","tld":"com"},"ip":{"addr":"109.107.168.66","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amltrustservices.com/","date":"2026-01-30T05:42:00.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amltrustservices.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 14:15:26 GMT","end":"Sat, 18 Apr 2026 14:15:25 GMT"},"fingerprint":{"sha1":"F5:F0:1A:42:9C:2D:29:51:A3:7D:8E:85:CB:0C:38:C6:B3:53:65:AD","sha256":"AE:3F:7A:AA:60:8E:88:57:F4:A3:F9:02:D3:89:7A:28:56:A6:62:13:56:C5:35:B4:7A:85:BA:C1:7A:65:FE:76"}}},"request":{"raw":"GET /partner_logo/gateio.webp HTTP/1.1\r\nHost: amltrustservices.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amltrustservices.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 30 Jan 2026 05:42:00 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2424\r\nConnection: keep-alive\r\nContent-Disposition: inline; filename=\"gateio.webp\"\r\nETag: \"4d0cc4ac735eb40ede99627d46987b9e80c50d9f\"\r\nX-Cache: MISS\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2424,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"db46eb6f3bc974c066784fc584ddee5d","sha1":"6fa1850da7b1c1928c88d6015fbd17446fd96063","sha256":"fd1e6edc292b582b9ac513d480239ca96b193b84d29305e9744d6b4df58ad6c8","sha512":"141721771142408b8eb8064e6c5f8e2fca4e8428d937181fada5ff1376b52f9fc9797ee22293a09a7fcde6af9db14a30736471307d07e27ca7e0d092bf2c85c6","ssdeep":"","tlshash":"94416b902130049a8d081a096e3a81d16a573f89f345c3097bf8ccff3bcac1b2c221be","first_seen":"2025-05-30T09:05:59.266696Z","last_seen":"2026-07-13T03:13:12.522902Z","times_seen":58,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":9,"dns":0,"connect":21,"send":0,"wait":22,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amltrustservices.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amltrustservices.com/logos/ftahk.png","fqdn":"amltrustservices.com","domain":"amltrustservices.com","tld":"com"},"ip":{"addr":"109.107.168.66","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amltrustservices.com/","date":"2026-01-30T05:42:00.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amltrustservices.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 14:15:26 GMT","end":"Sat, 18 Apr 2026 14:15:25 GMT"},"fingerprint":{"sha1":"F5:F0:1A:42:9C:2D:29:51:A3:7D:8E:85:CB:0C:38:C6:B3:53:65:AD","sha256":"AE:3F:7A:AA:60:8E:88:57:F4:A3:F9:02:D3:89:7A:28:56:A6:62:13:56:C5:35:B4:7A:85:BA:C1:7A:65:FE:76"}}},"request":{"raw":"GET /logos/ftahk.png HTTP/1.1\r\nHost: amltrustservices.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amltrustservices.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 30 Jan 2026 05:42:00 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Disposition: inline; filename=\"ftahk.png\"\r\nETag: W/\"141a218fa662f7be9b6cb4370298e78f8b070737\"\r\nX-Cache: MISS\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34168,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"ab6bfcfd969a2cbb8dbd720d0573c8f9","sha1":"6b9f189d2b6bf48c59725329dc0b6ae01885e60b","sha256":"a1a509f376e09d1bbd7ecde916623498c411232efb675d64ea5e716e0eba1d0a","sha512":"2db87279bb07c4289c0508f0fc0ae3d6473faa8eeb64365baeea00654662570008996892108c6524f9dd0b642e31a05e2ac16b65faa82093fd27800db3571bd7","ssdeep":"768:lvpLyxwVAskkwLjm35CJp29vsyhDeUffU0X/n8NiGlXS/b:lBiwNkfPm35CdANffUan8VZS/b","tlshash":"02e2f1c943cea3b60201a5cb49209fe095ab684bb42e13d741afc253134be5ddd1fe2d","first_seen":"2026-01-30T05:38:10.407371Z","last_seen":"2026-03-13T02:52:38.462985Z","times_seen":4,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amltrustservices.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amltrustservices.com/team_photo/anmol-jain.webp","fqdn":"amltrustservices.com","domain":"amltrustservices.com","tld":"com"},"ip":{"addr":"109.107.168.66","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://amltrustservices.com/","date":"2026-01-30T05:42:00.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amltrustservices.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 14:15:26 GMT","end":"Sat, 18 Apr 2026 14:15:25 GMT"},"fingerprint":{"sha1":"F5:F0:1A:42:9C:2D:29:51:A3:7D:8E:85:CB:0C:38:C6:B3:53:65:AD","sha256":"AE:3F:7A:AA:60:8E:88:57:F4:A3:F9:02:D3:89:7A:28:56:A6:62:13:56:C5:35:B4:7A:85:BA:C1:7A:65:FE:76"}}},"request":{"raw":"GET /team_photo/anmol-jain.webp HTTP/1.1\r\nHost: amltrustservices.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amltrustservices.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 30 Jan 2026 05:42:00 GMT\r\nContent-Type: image/webp\r\nContent-Length: 9200\r\nConnection: keep-alive\r\nContent-Disposition: inline; filename=\"anmol-jain.webp\"\r\nETag: \"b2d3aa22eafad1d7abc7ac4e74743ed3a0011887\"\r\nX-Cache: MISS\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9200,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x366, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"60eef43af6cc74e96dba43599a8dc699","sha1":"e4b0077796f3312e6fd3dc323d02c7fed04e8805","sha256":"fc19750c80b6d122b5bc553410ceefbd4cc19ee28163db35bf495ec5755e928d","sha512":"130a3d7c48bd42eae4b68e350dc012afff81d7311da62dd727008d40c3eab594a93643274408d98544059adca754e44f576b6aff8b8afcf27baf692284e4ff61","ssdeep":"192:G6c0/WXpb0F4Z03Zo70Oa32rV1OnOiyzyRLjUblZH1EMLnYKJKiNtd:PduPcZogOi2ruONmRLIhHEMLnYKR3","tlshash":"3212b0ed5d0c2ed69045b9f532022999916d3bef4ecb3ce8db416c095718f96cb36054","first_seen":"2025-06-28T19:40:28.796698Z","last_seen":"2026-06-28T23:03:28.384951Z","times_seen":81,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amltrustservices.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amltrustservices.com/why_sec_icons/2.webp","fqdn":"amltrustservices.com","domain":"amltrustservices.com","tld":"com"},"ip":{"addr":"109.107.168.66","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://amltrustservices.com/","date":"2026-01-30T05:42:00.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amltrustservices.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 14:15:26 GMT","end":"Sat, 18 Apr 2026 14:15:25 GMT"},"fingerprint":{"sha1":"F5:F0:1A:42:9C:2D:29:51:A3:7D:8E:85:CB:0C:38:C6:B3:53:65:AD","sha256":"AE:3F:7A:AA:60:8E:88:57:F4:A3:F9:02:D3:89:7A:28:56:A6:62:13:56:C5:35:B4:7A:85:BA:C1:7A:65:FE:76"}}},"request":{"raw":"GET /why_sec_icons/2.webp HTTP/1.1\r\nHost: amltrustservices.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amltrustservices.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 30 Jan 2026 05:42:00 GMT\r\nContent-Type: image/webp\r\nContent-Length: 44418\r\nConnection: keep-alive\r\nContent-Disposition: inline; filename=\"2.webp\"\r\nETag: \"ab9c593586f124efa2b75112ec08723f0a0a2b85\"\r\nX-Cache: MISS\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44418,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0f6ee693bd7c2cc364dd525fea2cd879","sha1":"348f0675f932d4832054a94ad86625426d57f50b","sha256":"78f9728f566efff17dca3ef313a71e5cf3685cb8056ea1ef3a5c5aee9206dde7","sha512":"7ff54abb9b821aa61dfe40136e88b2fecccca536c952e17ba1e40f4ca000e363551a8cc34597beaab5d850f05e385fc49ff338dd18c1eb48ca1ad05901a83599","ssdeep":"768:+elg0W7aRWM1O3sD3T93x7AmJQ2e7pD4E1R5sJi8kQ9D6evzHIwM5d8:6t7oWM1isDlx7Am6P1D5AkQ9vr9MT","tlshash":"b913f26f949711d6fb8e28fbc9cd26ac7e4aa05a01936530e73009e25f63411fb7253d","first_seen":"2025-09-08T08:19:30.649251Z","last_seen":"2026-06-28T23:03:28.374188Z","times_seen":10,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amltrustservices.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amltrustservices.com/partner_logo/cryptopnl.webp","fqdn":"amltrustservices.com","domain":"amltrustservices.com","tld":"com"},"ip":{"addr":"109.107.168.66","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amltrustservices.com/","date":"2026-01-30T05:42:00.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amltrustservices.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 14:15:26 GMT","end":"Sat, 18 Apr 2026 14:15:25 GMT"},"fingerprint":{"sha1":"F5:F0:1A:42:9C:2D:29:51:A3:7D:8E:85:CB:0C:38:C6:B3:53:65:AD","sha256":"AE:3F:7A:AA:60:8E:88:57:F4:A3:F9:02:D3:89:7A:28:56:A6:62:13:56:C5:35:B4:7A:85:BA:C1:7A:65:FE:76"}}},"request":{"raw":"GET /partner_logo/cryptopnl.webp HTTP/1.1\r\nHost: amltrustservices.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amltrustservices.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 30 Jan 2026 05:42:00 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2402\r\nConnection: keep-alive\r\nContent-Disposition: inline; filename=\"cryptopnl.webp\"\r\nETag: \"69584100e4e1d3aae7f01859e9f0f93b075a1f0d\"\r\nX-Cache: MISS\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2402,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"770b2a2be55ec2a99aa407eac37b722d","sha1":"c8e55f8f6e7c0d6052a58f68ca9a3dc462afedb6","sha256":"d91833cac40d348ec66a4d26e282260cc802d125f942f54a21b0c6ecac84039c","sha512":"91ab9b96d41e758dd840d15755a51bb9f9cb6cac2a68b31e374fc4e5137bbcb671ac829bbd5a2cf6db436b6b49e6862d8b37341df5004a167476926a12ec5d81","ssdeep":"","tlshash":"ac415b625f724d97b32bc8fc2f4172a7e1b10931ca29ee11735a57f4086af0650b3c46","first_seen":"2025-05-30T09:05:59.272357Z","last_seen":"2026-07-13T03:13:12.539513Z","times_seen":58,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":9,"dns":1,"connect":21,"send":0,"wait":22,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amltrustservices.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amltrustservices.com/services_icons/icon-2.webp","fqdn":"amltrustservices.com","domain":"amltrustservices.com","tld":"com"},"ip":{"addr":"109.107.168.66","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amltrustservices.com/","date":"2026-01-30T05:42:00.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amltrustservices.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 14:15:26 GMT","end":"Sat, 18 Apr 2026 14:15:25 GMT"},"fingerprint":{"sha1":"F5:F0:1A:42:9C:2D:29:51:A3:7D:8E:85:CB:0C:38:C6:B3:53:65:AD","sha256":"AE:3F:7A:AA:60:8E:88:57:F4:A3:F9:02:D3:89:7A:28:56:A6:62:13:56:C5:35:B4:7A:85:BA:C1:7A:65:FE:76"}}},"request":{"raw":"GET /services_icons/icon-2.webp HTTP/1.1\r\nHost: amltrustservices.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amltrustservices.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 30 Jan 2026 05:42:00 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1406\r\nConnection: keep-alive\r\nContent-Disposition: inline; filename=\"icon-2.webp\"\r\nETag: \"5d9d7bf3e059ceb5a01d55da2b9c34885e1c5ec0\"\r\nX-Cache: MISS\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1406,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"968df9d76465a033a5940d6dcc9ddc06","sha1":"3be6cedac92320068cb0175d5ca8ca02a11b73ac","sha256":"e574fb04d32ef17699701d7ecdaeeaab572723cb883b1e6d5c3f776c1c2fcee8","sha512":"04442e37c4cf314524dd6935d2442c44ab7f581cbd3be8e3ef2f79fb434177a22b8ffe0f9dec41433b8b303d6839d46407b4a3294427c1e6a066bb42677fcc28","ssdeep":"","tlshash":"6b219655b0245a15fe0558303489adecaeea3cb583853eb6728ba2a09b5d0f00a50ccd","first_seen":"2025-07-03T04:30:38.177373Z","last_seen":"2026-05-11T00:12:38.977864Z","times_seen":29,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amltrustservices.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amltrustservices.com/services_icons/cover.webp","fqdn":"amltrustservices.com","domain":"amltrustservices.com","tld":"com"},"ip":{"addr":"109.107.168.66","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amltrustservices.com/","date":"2026-01-30T05:42:00.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amltrustservices.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 14:15:26 GMT","end":"Sat, 18 Apr 2026 14:15:25 GMT"},"fingerprint":{"sha1":"F5:F0:1A:42:9C:2D:29:51:A3:7D:8E:85:CB:0C:38:C6:B3:53:65:AD","sha256":"AE:3F:7A:AA:60:8E:88:57:F4:A3:F9:02:D3:89:7A:28:56:A6:62:13:56:C5:35:B4:7A:85:BA:C1:7A:65:FE:76"}}},"request":{"raw":"GET /services_icons/cover.webp HTTP/1.1\r\nHost: amltrustservices.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amltrustservices.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 30 Jan 2026 05:42:00 GMT\r\nContent-Type: image/webp\r\nContent-Length: 31006\r\nConnection: keep-alive\r\nContent-Disposition: inline; filename=\"cover.webp\"\r\nETag: \"01076598665fa8fe2ef023f0764667ae22684a39\"\r\nX-Cache: MISS\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31006,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"254491e06f6b608cd8e5c0075e4789af","sha1":"762be735797f40d6c3e54e638080061bba0268da","sha256":"e348f7a083f03ea38e5f894c568e4a83b2fd83b45c3720fb965c4ed4108d3b8f","sha512":"e63ffbdadeaa5d494f2be1ca302241ed49854d4d78093e45d897d00571671d5026948b95189efcf8beb0bbd7ba6517897d590845fdf96f3a99c39687114addda","ssdeep":"768:Xlj0ILRO9fnOySTCD9yLgmwdPi8qY478nL38zgzsQk:uaqGP6QLgmwdDqS38zO0","tlshash":"a4d2f1c3ab7b6a8a7d1d539e38fe2d8c9661990538be20718c4a40890d938f1f5c4fdc","first_seen":"2026-01-30T05:38:10.410405Z","last_seen":"2026-03-13T02:52:38.482176Z","times_seen":4,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amltrustservices.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amltrustservices.com/logos/cda.png","fqdn":"amltrustservices.com","domain":"amltrustservices.com","tld":"com"},"ip":{"addr":"109.107.168.66","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amltrustservices.com/","date":"2026-01-30T05:42:00.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amltrustservices.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 14:15:26 GMT","end":"Sat, 18 Apr 2026 14:15:25 GMT"},"fingerprint":{"sha1":"F5:F0:1A:42:9C:2D:29:51:A3:7D:8E:85:CB:0C:38:C6:B3:53:65:AD","sha256":"AE:3F:7A:AA:60:8E:88:57:F4:A3:F9:02:D3:89:7A:28:56:A6:62:13:56:C5:35:B4:7A:85:BA:C1:7A:65:FE:76"}}},"request":{"raw":"GET /logos/cda.png HTTP/1.1\r\nHost: amltrustservices.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amltrustservices.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T02:51:48.557212Z","times_seen":17519369,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amltrustservices.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amltrustservices.com/partner_logo/safe3.webp","fqdn":"amltrustservices.com","domain":"amltrustservices.com","tld":"com"},"ip":{"addr":"109.107.168.66","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amltrustservices.com/","date":"2026-01-30T05:42:00.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amltrustservices.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 14:15:26 GMT","end":"Sat, 18 Apr 2026 14:15:25 GMT"},"fingerprint":{"sha1":"F5:F0:1A:42:9C:2D:29:51:A3:7D:8E:85:CB:0C:38:C6:B3:53:65:AD","sha256":"AE:3F:7A:AA:60:8E:88:57:F4:A3:F9:02:D3:89:7A:28:56:A6:62:13:56:C5:35:B4:7A:85:BA:C1:7A:65:FE:76"}}},"request":{"raw":"GET /partner_logo/safe3.webp HTTP/1.1\r\nHost: amltrustservices.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amltrustservices.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 30 Jan 2026 05:42:00 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2602\r\nConnection: keep-alive\r\nContent-Disposition: inline; filename=\"safe3.webp\"\r\nETag: \"60fa67fe3cbb7f9c552e177874b7d756d4dd5026\"\r\nX-Cache: MISS\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2602,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"186e963314d0538e867ce526fb9855d8","sha1":"bfc6211238211318021bcac851c9f8bf3ddd7f54","sha256":"2b72f9be51e71ba407fef40ada21df31bf7713c64f3dfef576bbc899e31a51d7","sha512":"d22c717552229c7ee34c8e6a429c9c31f46b5476fe231828000f5f682420ee305a2638de9572ad69a759ab03c279017244871af1df3bc2e0b7fae411123963e5","ssdeep":"","tlshash":"b8513dab4103a2682ff7402a1480049321ddafaf25bbcea5861e553df750779dbd014f","first_seen":"2025-05-30T09:05:59.244518Z","last_seen":"2026-07-13T03:13:12.524732Z","times_seen":57,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amltrustservices.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amltrustservices.com/services_icons/icon-1.webp","fqdn":"amltrustservices.com","domain":"amltrustservices.com","tld":"com"},"ip":{"addr":"109.107.168.66","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amltrustservices.com/","date":"2026-01-30T05:42:00.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amltrustservices.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 14:15:26 GMT","end":"Sat, 18 Apr 2026 14:15:25 GMT"},"fingerprint":{"sha1":"F5:F0:1A:42:9C:2D:29:51:A3:7D:8E:85:CB:0C:38:C6:B3:53:65:AD","sha256":"AE:3F:7A:AA:60:8E:88:57:F4:A3:F9:02:D3:89:7A:28:56:A6:62:13:56:C5:35:B4:7A:85:BA:C1:7A:65:FE:76"}}},"request":{"raw":"GET /services_icons/icon-1.webp HTTP/1.1\r\nHost: amltrustservices.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amltrustservices.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 30 Jan 2026 05:42:00 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2384\r\nConnection: keep-alive\r\nContent-Disposition: inline; filename=\"icon-1.webp\"\r\nETag: \"273374d5b26053e3fdedc2fcc9a10012ec5dc018\"\r\nX-Cache: MISS\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2384,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8825a51190c5dde290cff5f4a2472a22","sha1":"1384b21c315e86bb779ede2b6d7d25bbc97ed818","sha256":"06fe569ad3988ad4a9255f91142e52c0b97c77b9278a542381e30190c7d1aee8","sha512":"c146659e8594db0221b7a140c71ccca2050dbbdf5be9fbf35577bf48b6f3b5b6d9733296e4f5446ab61a1b0e1f9f7e267d5a2da052d12062786102f46fcc5e78","ssdeep":"","tlshash":"9f413ad213e6d724d904e6df660909e3288b68033b7a712e342b59e7aa77673a113139","first_seen":"2025-07-03T04:30:38.179225Z","last_seen":"2026-05-11T00:12:39.035995Z","times_seen":29,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amltrustservices.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amltrustservices.com/team_photo/sid-panda.webp","fqdn":"amltrustservices.com","domain":"amltrustservices.com","tld":"com"},"ip":{"addr":"109.107.168.66","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://amltrustservices.com/","date":"2026-01-30T05:42:00.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amltrustservices.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 14:15:26 GMT","end":"Sat, 18 Apr 2026 14:15:25 GMT"},"fingerprint":{"sha1":"F5:F0:1A:42:9C:2D:29:51:A3:7D:8E:85:CB:0C:38:C6:B3:53:65:AD","sha256":"AE:3F:7A:AA:60:8E:88:57:F4:A3:F9:02:D3:89:7A:28:56:A6:62:13:56:C5:35:B4:7A:85:BA:C1:7A:65:FE:76"}}},"request":{"raw":"GET /team_photo/sid-panda.webp HTTP/1.1\r\nHost: amltrustservices.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amltrustservices.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 30 Jan 2026 05:42:00 GMT\r\nContent-Type: image/webp\r\nContent-Length: 4960\r\nConnection: keep-alive\r\nContent-Disposition: inline; filename=\"sid-panda.webp\"\r\nETag: \"bc4d885e69227fd14bd5dfcfca6a81b2a42d425d\"\r\nX-Cache: MISS\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4960,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x366, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"667a7a156924eb8cf1ea2cc310fa84be","sha1":"a0c41d24550cb1375e1e7184e562cdd1fc19bdaf","sha256":"687e6062d6b65a7669c1badbbf7a4f374eb95572ab40efefcabee1208b96f679","sha512":"c7f8d10bc7c4d14fc2a2444150999baf64f7ae98728ddcc09bbc6147d8452bfdf08f3e17780641303299482bc7ab237d9df36f332446d674632771ff81d2b99e","ssdeep":"96:MZETuQouq6zgoF7sOUTf/l6RdFDcPAnD+zFc5msuDmMIui/Jyx9woc0BhNC3:3TuQo67sO4/ATFDoAD+zW5mVTIRhnocb","tlshash":"e6a18d621f66e1a1eb564f3b2431ca4a218337c487c490a8b3a99c9561d597cabe3b12","first_seen":"2025-04-08T20:33:55.212733Z","last_seen":"2026-07-07T12:36:49.703173Z","times_seen":528,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amltrustservices.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amltrustservices.com/partner_logo/comistar.webp","fqdn":"amltrustservices.com","domain":"amltrustservices.com","tld":"com"},"ip":{"addr":"109.107.168.66","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amltrustservices.com/","date":"2026-01-30T05:42:00.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amltrustservices.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 14:15:26 GMT","end":"Sat, 18 Apr 2026 14:15:25 GMT"},"fingerprint":{"sha1":"F5:F0:1A:42:9C:2D:29:51:A3:7D:8E:85:CB:0C:38:C6:B3:53:65:AD","sha256":"AE:3F:7A:AA:60:8E:88:57:F4:A3:F9:02:D3:89:7A:28:56:A6:62:13:56:C5:35:B4:7A:85:BA:C1:7A:65:FE:76"}}},"request":{"raw":"GET /partner_logo/comistar.webp HTTP/1.1\r\nHost: amltrustservices.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amltrustservices.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 30 Jan 2026 05:42:00 GMT\r\nContent-Type: image/webp\r\nContent-Length: 17968\r\nConnection: keep-alive\r\nContent-Disposition: inline; filename=\"comistar.webp\"\r\nETag: \"6d229b6c083af619ecac8ca900c05abd702080ab\"\r\nX-Cache: MISS\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17968,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3d3722efefed42cdcbaa90a8b964b9d1","sha1":"8514e462c3251717c43bd756a6ddbfcf0fe53787","sha256":"816bb854ca5c01e5881a3609f1b66a356e3c9c4ed1137ee1cf74814891082eaa","sha512":"61efb0b90d8aaa54cd9b37e7f89038d2fee952e82a6365b1ce556a35213c114aee059b013804628be609d535a119c96a66cab07305bb44afca18c7da6943e273","ssdeep":"192:cJhK2CsxwyHNkdkD64IvPouMew+Slt4zgrB/Ofi1AYreMDBsmgsqLDjtrzkoLwkB:TCNwUIXos4gibreMDBALDNzki8zyIRs","tlshash":"b682d03c6e81191ff3879425d620d0d051bb8ad58f132e9b1662ec941970bf8dee0e0f","first_seen":"2025-09-08T07:14:17.220026Z","last_seen":"2026-03-13T02:52:38.460711Z","times_seen":12,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amltrustservices.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amltrustservices.com/logos/lsw3.png","fqdn":"amltrustservices.com","domain":"amltrustservices.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amltrustservices.com/","date":"2026-01-30T05:42:00.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amltrustservices.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 14:15:26 GMT","end":"Sat, 18 Apr 2026 14:15:25 GMT"},"fingerprint":{"sha1":"F5:F0:1A:42:9C:2D:29:51:A3:7D:8E:85:CB:0C:38:C6:B3:53:65:AD","sha256":"AE:3F:7A:AA:60:8E:88:57:F4:A3:F9:02:D3:89:7A:28:56:A6:62:13:56:C5:35:B4:7A:85:BA:C1:7A:65:FE:76"}}},"request":{"raw":"GET /logos/lsw3.png HTTP/1.1\r\nHost: amltrustservices.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amltrustservices.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T02:51:48.557212Z","times_seen":17519369,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":37,"dns":0,"connect":19,"send":0,"wait":0,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amltrustservices.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amltrustservices.com/partner_logo/boxexchenger.webp","fqdn":"amltrustservices.com","domain":"amltrustservices.com","tld":"com"},"ip":{"addr":"109.107.168.66","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amltrustservices.com/","date":"2026-01-30T05:42:00.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amltrustservices.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 14:15:26 GMT","end":"Sat, 18 Apr 2026 14:15:25 GMT"},"fingerprint":{"sha1":"F5:F0:1A:42:9C:2D:29:51:A3:7D:8E:85:CB:0C:38:C6:B3:53:65:AD","sha256":"AE:3F:7A:AA:60:8E:88:57:F4:A3:F9:02:D3:89:7A:28:56:A6:62:13:56:C5:35:B4:7A:85:BA:C1:7A:65:FE:76"}}},"request":{"raw":"GET /partner_logo/boxexchenger.webp HTTP/1.1\r\nHost: amltrustservices.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amltrustservices.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 30 Jan 2026 05:42:00 GMT\r\nContent-Type: image/webp\r\nContent-Length: 6100\r\nConnection: keep-alive\r\nContent-Disposition: inline; filename=\"boxexchenger.webp\"\r\nETag: \"a105a9c4dfceead88349d1b61d76c231c0571ddb\"\r\nX-Cache: MISS\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6100,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"748d5a1c458ef1553c43ca21a5e79638","sha1":"378e17a5baf9ee9b1e3395b7428c3763b7ab7afb","sha256":"e31a1c736ec1dd8158b822b306987370e69788e756edd9943c5a5f1ff7cdf3d2","sha512":"71d7e8a3560fd25f4adad2716cad914368a833b475d405a1c10fec42f493685629ab101529e4265e625a111a4211abffd779623b6fddd61f71cfe5c207ac98ec","ssdeep":"96:jnNTtnxRvUXzbLMlUUMatn9rUwNgV+aN4Tl/gbztvgJY+vK9drOrSOssq0/2uDeQ:jnNRb8XzbL7a595YNNw4PmbKurS5squ7","tlshash":"8ec19e9cea1e7929bce3d19efbb8c1d31e8921bc3c5e401142cee50a17dc0b0c5ad969","first_seen":"2025-05-30T09:05:59.265702Z","last_seen":"2026-06-29T01:18:40.211726Z","times_seen":134,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":11,"dns":0,"connect":19,"send":0,"wait":21,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amltrustservices.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amltrustservices.com/logos/eba.png","fqdn":"amltrustservices.com","domain":"amltrustservices.com","tld":"com"},"ip":{"addr":"109.107.168.66","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amltrustservices.com/","date":"2026-01-30T05:42:00.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amltrustservices.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 14:15:26 GMT","end":"Sat, 18 Apr 2026 14:15:25 GMT"},"fingerprint":{"sha1":"F5:F0:1A:42:9C:2D:29:51:A3:7D:8E:85:CB:0C:38:C6:B3:53:65:AD","sha256":"AE:3F:7A:AA:60:8E:88:57:F4:A3:F9:02:D3:89:7A:28:56:A6:62:13:56:C5:35:B4:7A:85:BA:C1:7A:65:FE:76"}}},"request":{"raw":"GET /logos/eba.png HTTP/1.1\r\nHost: amltrustservices.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amltrustservices.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 30 Jan 2026 05:42:00 GMT\r\nContent-Type: image/png\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Disposition: inline; filename=\"eba.png\"\r\nETag: W/\"a06ef380c9229c017a42e8114ff033e010915390\"\r\nX-Cache: MISS\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15664,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"08996ef4c77d4a56369a1c2b5b3f1469","sha1":"f35574b6d23c1eda0d778ece591bebc5085c5942","sha256":"c98e3bf9c27d6322dbbbe938edc01192d581693c2efe70cfaece6ca0aaf73a7a","sha512":"87bb2032dfde759f116261bed97361a5081a4e93c38854aa10f9fe5d841b1359e31dbeb56f674ae73121195d391d7508d7abfccf5ce4c019bc69261b95ae281d","ssdeep":"192:GHy9J4W0Y5JUeOB8Dznd9ru3xtwQylkbk8A4DDs4x2sbQPizK5AB0pGzpk2qI82q:rJVK7aDDdCFzNrxbc4/fJqv7lpSrRG","tlshash":"a662e1fbcb2454d6d71342e40118675187a0c5b628dfb995bcdefe39c72882a2e09d60","first_seen":"2026-01-30T05:38:10.403704Z","last_seen":"2026-03-13T02:52:38.453911Z","times_seen":4,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amltrustservices.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amltrustservices.com/assets/index-CoIjC6gj.css","fqdn":"amltrustservices.com","domain":"amltrustservices.com","tld":"com"},"ip":{"addr":"109.107.168.66","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amltrustservices.com/","date":"2026-01-30T05:42:00.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amltrustservices.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 14:15:26 GMT","end":"Sat, 18 Apr 2026 14:15:25 GMT"},"fingerprint":{"sha1":"F5:F0:1A:42:9C:2D:29:51:A3:7D:8E:85:CB:0C:38:C6:B3:53:65:AD","sha256":"AE:3F:7A:AA:60:8E:88:57:F4:A3:F9:02:D3:89:7A:28:56:A6:62:13:56:C5:35:B4:7A:85:BA:C1:7A:65:FE:76"}}},"request":{"raw":"GET /assets/index-CoIjC6gj.css HTTP/1.1\r\nHost: amltrustservices.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amltrustservices.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 30 Jan 2026 05:42:00 GMT\r\nContent-Type: text/css; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Disposition: inline; filename=\"index-CoIjC6gj.css\"\r\nETag: \"c2e524d50eec66fa352d3f9b680c52eb66c1b9c0\"\r\nVary: Accept-Encoding\r\nContent-Encoding: br\r\nX-Cache: MISS\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16414,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (16413)","md5":"f9e11fb7f90e0c9e7a3da2c5af5b6869","sha1":"520e236badd69492e16402cd97f3eed71e9ee2f1","sha256":"faeefe4a921f87126fbd25daf16fa7a37a8048fc41c6e6f8739f00e078e2e78c","sha512":"84ed073684e5ae70d8ae2b2fbe6b78c3c81d26c71aec9b5e854e76e7d2fa042d827ebceda3615f54b509e78f0fbb43a034f82ae6b5cb0ff0a7cf4744f912e643","ssdeep":"192:O9JyW9JyyxwO43zTgsfysfWlXCUYG1+Seje0:kwV3zT0lyIeje0","tlshash":"ea72415eab10103f7c6740fad5e5ba5db62ab0c1ef3e96e96d834111abd73b60c93204","first_seen":"2026-01-30T05:38:10.374613Z","last_seen":"2026-03-13T02:52:38.447498Z","times_seen":4,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":39,"dns":1,"connect":20,"send":0,"wait":22,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amltrustservices.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amltrustservices.com/partner_logo/purefi.webp","fqdn":"amltrustservices.com","domain":"amltrustservices.com","tld":"com"},"ip":{"addr":"109.107.168.66","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amltrustservices.com/","date":"2026-01-30T05:42:00.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amltrustservices.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 14:15:26 GMT","end":"Sat, 18 Apr 2026 14:15:25 GMT"},"fingerprint":{"sha1":"F5:F0:1A:42:9C:2D:29:51:A3:7D:8E:85:CB:0C:38:C6:B3:53:65:AD","sha256":"AE:3F:7A:AA:60:8E:88:57:F4:A3:F9:02:D3:89:7A:28:56:A6:62:13:56:C5:35:B4:7A:85:BA:C1:7A:65:FE:76"}}},"request":{"raw":"GET /partner_logo/purefi.webp HTTP/1.1\r\nHost: amltrustservices.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amltrustservices.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 30 Jan 2026 05:42:00 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2846\r\nConnection: keep-alive\r\nContent-Disposition: inline; filename=\"purefi.webp\"\r\nETag: \"0112631720cf906b1289467c367cdadb3455287e\"\r\nX-Cache: MISS\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2846,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1946ddb4ccc7e54f38c2d6744c347609","sha1":"b01181b8dbe5a2ee8f2c537666a407d364135e92","sha256":"e0f01c6542d3e1dda96710f281529de1d69fe76303886c4ed8a9e7b2af99b963","sha512":"9abc175e917a64afbe1cfb117b658859a1d5f21af2ef38f5a91c0ff305af2fe3aaea3e736f0a689f0fe06164905ff9630fa43d072f596e40e135113902cbb067","ssdeep":"","tlshash":"9a516b52293e28057b67e3785273513beb80e20f75b0484147e969534d4bf66f2e0a4c","first_seen":"2025-05-30T09:05:59.238411Z","last_seen":"2026-07-13T03:13:12.53682Z","times_seen":50,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amltrustservices.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amltrustservices.com/why_sec_icons/1.webp","fqdn":"amltrustservices.com","domain":"amltrustservices.com","tld":"com"},"ip":{"addr":"109.107.168.66","port":443,"asn":0,"as":"","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://amltrustservices.com/","date":"2026-01-30T05:42:00.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amltrustservices.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 18 Jan 2026 14:15:26 GMT","end":"Sat, 18 Apr 2026 14:15:25 GMT"},"fingerprint":{"sha1":"F5:F0:1A:42:9C:2D:29:51:A3:7D:8E:85:CB:0C:38:C6:B3:53:65:AD","sha256":"AE:3F:7A:AA:60:8E:88:57:F4:A3:F9:02:D3:89:7A:28:56:A6:62:13:56:C5:35:B4:7A:85:BA:C1:7A:65:FE:76"}}},"request":{"raw":"GET /why_sec_icons/1.webp HTTP/1.1\r\nHost: amltrustservices.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amltrustservices.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 30 Jan 2026 05:42:00 GMT\r\nContent-Type: image/webp\r\nContent-Length: 53024\r\nConnection: keep-alive\r\nContent-Disposition: inline; filename=\"1.webp\"\r\nETag: \"9c8109ac7c99a20c831b5a68801b9eb2fd2a1836\"\r\nX-Cache: MISS\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":53024,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c2600f730f9575b49eccf369efb0bb3d","sha1":"5235cee32a51b995843bf5841069abd69c4e5efc","sha256":"68775bf5e21160ef7e92f75683df65d445dbf5e4f1f1089a1d4d27c5fef80d35","sha512":"27fd6fa82a1e604fd48c6aa9605446610aa799fa1c32b3df5bc63062ba77d7d4d7312d310138c19438a3b71ce7c813f83bb90004a328c8d7a0ab5974ecfd68c7","ssdeep":"1536:AiJsiF2ZxWHVWLXn+7k/xQ6YTC5ZKG39ZpFm:ASRF2+HVKXGkZdtZO","tlshash":"8a33f14a4e71c90cd9bf79b8e06e70ba3b1806d4b52d9fc7b6d1225ab834af510fc510","first_seen":"2026-01-30T05:38:10.385133Z","last_seen":"2026-03-13T02:52:38.483068Z","times_seen":4,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":23,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-30","alert":"Sinkholed","trigger":"amltrustservices.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}