{"report_id":"095660cf-d5ac-4e68-9cde-5e8834372be7","version":6,"status":"done","tags":[],"date":"2025-09-24T11:21:09Z","url":{"schema":"https","addr":"detectivpro.app/app/?app=amlCheck","fqdn":"detectivpro.app","domain":"detectivpro.app","tld":"app"},"ip":{"addr":"81.19.140.231","port":0,"asn":215540,"as":"Global Connectivity Solutions Llp","country":"Canada","country_code":"CA"},"final":{"url":{"schema":"https","addr":"detectivpro.app/app/?app=amlCheck","fqdn":"detectivpro.app","domain":"detectivpro.app","tld":"app"},"title":"DetectivPro | AML Check"},"submit":{"url":{"schema":"https","addr":"detectivpro.app/app/?app=amlCheck","fqdn":"detectivpro.app","domain":"detectivpro.app","tld":"app"},"ip":{"addr":"81.19.140.231","port":0,"asn":215540,"as":"Global Connectivity Solutions Llp","country":"Canada","country_code":"CA"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-29T11:21:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"detectivpro.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"detectivpro.app","ip":{"addr":"81.19.140.231","port":443,"asn":215540,"as":"Global Connectivity Solutions Llp","country":"Canada","country_code":"CA"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":7,"request_count":7,"received_data":34825,"sent_data":3227,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.29.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-09-21T22:11:31.798564Z","alert_count":0,"request_count":2,"received_data":81667,"sent_data":1408,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-09-21T22:11:31.014241Z","alert_count":0,"request_count":2,"received_data":122954,"sent_data":1094,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"detectivpro.app/app/config.js","fqdn":"detectivpro.app","domain":"detectivpro.app","tld":"app"},"ip":{"addr":"81.19.140.231","port":443,"asn":215540,"as":"Global Connectivity Solutions Llp","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef428828518f72c30b9c5a58fe45d316","sha1":"ad674fc54407c51ddfa43b5b2ed874933f3fd7c0","sha256":"0d3dcf0b9e8ee724b162e1d97881f4519c178d35e7fb0763dabbd3902f7b8ffe","sha512":"96c7db579f9ac1596b556dd25e1a332f32268f0e40bd53065fdc36fda6f7b8c677744b794d1521e7dd45c2a09fde800bc05d1d1e1918424a0e4bd1f716a20572","ssdeep":"","tlshash":"5bb0123e148a3f30b23421c39492b6423c0200c6764c85fdfd5bd073c8f2409948aa23","size":115,"data":"","first_seen":"2025-09-24T11:21:13.952298Z","last_seen":"2025-09-24T11:21:13.952298Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"detectivpro.app/app/?app=amlCheck","fqdn":"detectivpro.app","domain":"detectivpro.app","tld":"app"},"ip":{"addr":"81.19.140.231","port":443,"asn":215540,"as":"Global Connectivity Solutions Llp","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":true,"md5":"adc0c1b48cf94b7e3a348ab233bf2749","sha1":"ab434032959300a843156836d25c8d9143d82290","sha256":"759d0ee970a2b52592d6ad9c6032c9f2b73cf051b880f159f631b7101dfb80ca","sha512":"795559c6153e28b4b006f6c3d4ae26f8eb755c257cb08dcebb3d0e1ae50201305b3142e93aaba9cb8cb079255fbd11b9cfd111e0bbd92691a1c3ba6084406826","ssdeep":"","tlshash":"963178af32a704340def799b0797a3c4752440471986d1997ebe4fc44fe0a82907abcb","size":1509,"data":"","first_seen":"2025-09-24T11:21:13.962337Z","last_seen":"2025-09-24T11:21:13.962337Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"detectivpro.app/app/indexMain.css","fqdn":"detectivpro.app","domain":"detectivpro.app","tld":"app"},"ip":{"addr":"81.19.140.231","port":443,"asn":215540,"as":"Global Connectivity Solutions Llp","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://detectivpro.app/app/?app=amlCheck","date":"2025-09-24T11:20:48.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"detectivpro.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Sep 2025 17:38:10 GMT","end":"Fri, 19 Dec 2025 17:38:09 GMT"},"fingerprint":{"sha1":"D0:5D:46:2A:04:5F:33:26:32:07:1A:2E:6B:09:11:83:24:10:18:B8","sha256":"10:80:E9:54:6F:7C:32:BE:27:F5:54:A2:FA:10:85:BD:AE:0E:6D:40:EA:75:30:18:F6:E1:AC:FE:F9:E1:D9:23"}}},"request":{"raw":"GET /app/indexMain.css HTTP/1.1\r\nHost: detectivpro.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://detectivpro.app/app/?app=amlCheck\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Wed, 24 Sep 2025 11:20:48 GMT\r\netag: W/\"68cef37e-a59\"\r\nlast-modified: Sat, 20 Sep 2025 18:33:34 GMT\r\nserver: nginx/1.29.1\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2649,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (358)","md5":"ea8f429d9e25c4fb619f3a4ba174e951","sha1":"deee52208f3c2fc3dd86046ae792ecbe3748f347","sha256":"f3c518cd36f72415fd68126b003d1f98a85c9184fa569836b9c3cb750d3e333f","sha512":"943ba0d0d97543a084cf87ad8c2ab2530f15fafad199fbea24264de8cbda45471a49f80b145666e2a2134d7ac79287583450ffca89e96a45d4eb0a16efe32d69","ssdeep":"","tlshash":"e85142c7c65f6865b00268287766bf561009601b71bac6f4bf9db90ccfc93984a32f4d","first_seen":"2025-09-24T11:21:13.946248Z","last_seen":"2026-05-30T00:14:05.465635Z","times_seen":4,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"detectivpro.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"detectivpro.app/app/index.css","fqdn":"detectivpro.app","domain":"detectivpro.app","tld":"app"},"ip":{"addr":"81.19.140.231","port":443,"asn":215540,"as":"Global Connectivity Solutions Llp","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://detectivpro.app/app/?app=amlCheck","date":"2025-09-24T11:20:48.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"detectivpro.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Sep 2025 17:38:10 GMT","end":"Fri, 19 Dec 2025 17:38:09 GMT"},"fingerprint":{"sha1":"D0:5D:46:2A:04:5F:33:26:32:07:1A:2E:6B:09:11:83:24:10:18:B8","sha256":"10:80:E9:54:6F:7C:32:BE:27:F5:54:A2:FA:10:85:BD:AE:0E:6D:40:EA:75:30:18:F6:E1:AC:FE:F9:E1:D9:23"}}},"request":{"raw":"GET /app/index.css HTTP/1.1\r\nHost: detectivpro.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://detectivpro.app/app/?app=amlCheck\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Wed, 24 Sep 2025 11:20:48 GMT\r\netag: W/\"68cef37e-5868\"\r\nlast-modified: Sat, 20 Sep 2025 18:33:34 GMT\r\nserver: nginx/1.29.1\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22632,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (12391)","md5":"86ccf03da0b70e75e5be0f2a094aa2e4","sha1":"821a4d0f90d837a12477c1b32170ddeee877148a","sha256":"99d43b857691c247bf6ff806de7cf953eb16860178bfed37ef9355ccb08d5273","sha512":"306c126053de4c05c501f248c770fe5ecd065c4a494af547da1ca97b41a3a3bf0e3366f5393732042ec04370388608d15391ebd668e118719160e2f325eae55c","ssdeep":"192:85bIr0rxdPQZY+4tL8dF7z+E8/6LqJM84VMu0kGl7JBoEUB1K7sfRKnj7zxGd:AbII3QZY0dt8y+1ZH6+X8d","tlshash":"d8a2c92cd512cc2e3cdf9b8dd2e8d61fb0415846af1146ffbb7208967ad2a7151a26cc","first_seen":"2025-09-24T11:21:13.948539Z","last_seen":"2026-05-30T00:14:05.468726Z","times_seen":5,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"detectivpro.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"detectivpro.app/app/config.js","fqdn":"detectivpro.app","domain":"detectivpro.app","tld":"app"},"ip":{"addr":"81.19.140.231","port":443,"asn":215540,"as":"Global Connectivity Solutions Llp","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://detectivpro.app/app/?app=amlCheck","date":"2025-09-24T11:20:48.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"detectivpro.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Sep 2025 17:38:10 GMT","end":"Fri, 19 Dec 2025 17:38:09 GMT"},"fingerprint":{"sha1":"D0:5D:46:2A:04:5F:33:26:32:07:1A:2E:6B:09:11:83:24:10:18:B8","sha256":"10:80:E9:54:6F:7C:32:BE:27:F5:54:A2:FA:10:85:BD:AE:0E:6D:40:EA:75:30:18:F6:E1:AC:FE:F9:E1:D9:23"}}},"request":{"raw":"GET /app/config.js HTTP/1.1\r\nHost: detectivpro.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://detectivpro.app/app/?app=amlCheck\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: application/javascript\r\ndate: Wed, 24 Sep 2025 11:20:48 GMT\r\netag: \"68cef37e-73\"\r\nlast-modified: Sat, 20 Sep 2025 18:33:34 GMT\r\nserver: nginx/1.29.1\r\ncontent-length: 115\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":115,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"ef428828518f72c30b9c5a58fe45d316","sha1":"ad674fc54407c51ddfa43b5b2ed874933f3fd7c0","sha256":"0d3dcf0b9e8ee724b162e1d97881f4519c178d35e7fb0763dabbd3902f7b8ffe","sha512":"96c7db579f9ac1596b556dd25e1a332f32268f0e40bd53065fdc36fda6f7b8c677744b794d1521e7dd45c2a09fde800bc05d1d1e1918424a0e4bd1f716a20572","ssdeep":"","tlshash":"5bb0123e148a3f30b23421c39492b6423c0200c6764c85fdfd5bd073c8f2409948aa23","first_seen":"2025-09-24T11:21:13.952298Z","last_seen":"2025-09-24T11:21:13.952298Z","times_seen":1,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"detectivpro.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Montserrat:ital,wght@0,100..900;1,100..900\u0026family=Open+Sans:ital,wght@0,300..800;1,300..800\u0026family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://detectivpro.app/app/?app=amlCheck","date":"2025-09-24T11:20:48.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:49 GMT","end":"Mon, 01 Dec 2025 08:36:48 GMT"},"fingerprint":{"sha1":"9E:38:51:02:B6:22:9C:08:6B:24:B8:A0:EB:DB:60:D9:27:B2:68:90","sha256":"67:AF:7E:56:AB:8D:96:FB:D0:75:CA:28:6D:16:B6:67:FD:7F:58:6F:CC:AA:78:B5:01:13:76:2C:AB:BE:80:4E"}}},"request":{"raw":"GET /css2?family=Montserrat:ital,wght@0,100..900;1,100..900\u0026family=Open+Sans:ital,wght@0,300..800;1,300..800\u0026family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://detectivpro.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 24 Sep 2025 11:20:48 GMT\r\ndate: Wed, 24 Sep 2025 11:20:48 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37704,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"865ceb7ef2cb5fb427d9a094b850b0a4","sha1":"14bfed306a45175fe43d8a91e4426e8d777b1937","sha256":"c78806f22e3c1c379570a1dc0979e8baa2fa8766b46702e1b1b84022b79c8cf3","sha512":"3e94273012af392e2f9e491766bc7e000b1fcaac64c83ce015912eb4e368baa58baa1fb9ea17b489d42f9c233b7369581e2ce9ab7a0aef7258b818dca88ffe0f","ssdeep":"384:AhwCFnbL8gQOkTltULv1qY49GnDu6SqY4T3w3s3VR9xqWSUq+DnLami0A0BNBOiz:MFJNGkEA3mkX","tlshash":"cc03fd91083ba104ab831cc123cf7e36ee0ea255b444d5b8abfd1cd9ad9bc66537172d","first_seen":"2025-09-24T11:21:13.953662Z","last_seen":"2026-05-30T00:14:05.458567Z","times_seen":16,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":87,"dns":1,"connect":16,"send":0,"wait":37,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Montserrat:ital,wght@0,100..900;1,100..900\u0026family=Open+Sans:ital,wght@0,300..800;1,300..800\u0026family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://detectivpro.app/app/?app=amlCheck","date":"2025-09-24T11:20:48.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:49 GMT","end":"Mon, 01 Dec 2025 08:36:48 GMT"},"fingerprint":{"sha1":"9E:38:51:02:B6:22:9C:08:6B:24:B8:A0:EB:DB:60:D9:27:B2:68:90","sha256":"67:AF:7E:56:AB:8D:96:FB:D0:75:CA:28:6D:16:B6:67:FD:7F:58:6F:CC:AA:78:B5:01:13:76:2C:AB:BE:80:4E"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Montserrat:ital,wght@0,100..900;1,100..900\u0026family=Open+Sans:ital,wght@0,300..800;1,300..800\u0026family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://detectivpro.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 24 Sep 2025 11:20:48 GMT\r\ndate: Wed, 24 Sep 2025 11:20:48 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42591,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"deb672a81602d54151cb98eaa05995b5","sha1":"d8fdc5a1459fb87528c65e79e687732b42990cfa","sha256":"a3b5ea700b57c9efd34c037b3703636513630ad27edc70c768f8ccb7cda75700","sha512":"e45d4c568221ba178b5955b44449d4538a7e2af947e0b624d95a4e7bd5fa80c15b1e29943d56dc27dc3f57a424c0c5065ef837222ab4c43e8e7b562dd5876d0b","ssdeep":"384:vtfcHjg8ciIShwCFnbL8gQOkTltULv1qY49GnDu6SqY4T3w3s3VR9xqWSUq+DnLP:KFJNGkEA3mkX","tlshash":"5b13fd91082ba104ab831cc223cf7e36ee0ea255b444d579abfd1cd9addbc66537172c","first_seen":"2025-09-24T11:21:13.955372Z","last_seen":"2026-05-30T00:14:05.464701Z","times_seen":5,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":84,"dns":1,"connect":17,"send":0,"wait":34,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://detectivpro.app/app/?app=amlCheck","date":"2025-09-24T11:20:48.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://detectivpro.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Sep 2025 23:28:50 GMT\r\nexpires: Fri, 18 Sep 2026 23:28:50 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nage: 474719\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-07-27T05:10:17.95222Z","times_seen":316542,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":52,"dns":1,"connect":7,"send":0,"wait":8,"receive":10,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"detectivpro.app/app/logos/HAWK.svg","fqdn":"detectivpro.app","domain":"detectivpro.app","tld":"app"},"ip":{"addr":"81.19.140.231","port":443,"asn":215540,"as":"Global Connectivity Solutions Llp","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://detectivpro.app/app/?app=amlCheck","date":"2025-09-24T11:20:49.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"detectivpro.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Sep 2025 17:38:10 GMT","end":"Fri, 19 Dec 2025 17:38:09 GMT"},"fingerprint":{"sha1":"D0:5D:46:2A:04:5F:33:26:32:07:1A:2E:6B:09:11:83:24:10:18:B8","sha256":"10:80:E9:54:6F:7C:32:BE:27:F5:54:A2:FA:10:85:BD:AE:0E:6D:40:EA:75:30:18:F6:E1:AC:FE:F9:E1:D9:23"}}},"request":{"raw":"GET /app/logos/HAWK.svg HTTP/1.1\r\nHost: detectivpro.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://detectivpro.app/app/?app=amlCheck\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Wed, 24 Sep 2025 11:20:49 GMT\r\netag: W/\"68cef37e-37a\"\r\nlast-modified: Sat, 20 Sep 2025 18:33:34 GMT\r\nserver: nginx/1.29.1\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":890,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9cb18211da45aaf27536b711cefaf842","sha1":"aa6a79679f6c9f74ac454662bbc7079419e2ad99","sha256":"0a697796bdd0ef3661d1b14229be6823fae65d95dff518ba9c470772a7b5d2a8","sha512":"6521ba3e7fcebedb0fb3d34742e80b4dfc9a07edc30b5150bb329ca3839e4d37786670835e8dffdcfff7ae2f4fbb7d676b00ef34a7989e9ad9f6deedb9836620","ssdeep":"","tlshash":"57115c54b719832ea500da6bfe6ff06a18eba4d5258c4cb5e1542d94697cfc46c340c7","first_seen":"2025-06-20T20:04:58.74413Z","last_seen":"2026-07-12T21:52:22.287811Z","times_seen":46,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"detectivpro.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"detectivpro.app/app/?app=amlCheck","fqdn":"detectivpro.app","domain":"detectivpro.app","tld":"app"},"ip":{"addr":"81.19.140.231","port":443,"asn":215540,"as":"Global Connectivity Solutions Llp","country":"Canada","country_code":"CA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-24T11:20:48.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"detectivpro.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Sep 2025 17:38:10 GMT","end":"Fri, 19 Dec 2025 17:38:09 GMT"},"fingerprint":{"sha1":"D0:5D:46:2A:04:5F:33:26:32:07:1A:2E:6B:09:11:83:24:10:18:B8","sha256":"10:80:E9:54:6F:7C:32:BE:27:F5:54:A2:FA:10:85:BD:AE:0E:6D:40:EA:75:30:18:F6:E1:AC:FE:F9:E1:D9:23"}}},"request":{"raw":"GET /app/?app=amlCheck HTTP/1.1\r\nHost: detectivpro.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: text/html\r\ndate: Wed, 24 Sep 2025 11:20:48 GMT\r\netag: W/\"68cef37e-1536\"\r\nlast-modified: Sat, 20 Sep 2025 18:33:34 GMT\r\nserver: nginx/1.29.1\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5430,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"fa8c2ee25ff168fa8f567837d7bc1989","sha1":"c9a35b9cfcc52208e1e0daa73dfa86880a7d6d59","sha256":"fb5daf7c810ef384f3df725353b0345965b0008d2818bd6b94f5a5054b042675","sha512":"6e59769e14e68742e0554c4ebb19c89cb27bb9e283c0ea00f629096b8ff46be3889eecfbaaf2a7950b39df63edbbb5a9b7a0fec091d9ba0ecdb13edb47fa8e23","ssdeep":"48:L3qEPQbUAE1sOXaQjct4Dgf1OID7TQ3q16YwXQcF68wA6C2GKzxEgo3FKdjzh0x6:HBXBct51/D7TswESRnVs/ltrt8RND","tlshash":"b0b1546521f2043a11d751d62ae37b8a7f50d503ca0b9a98bbed4bd11fc3d81cc9768a","first_seen":"2025-09-24T11:21:13.958509Z","last_seen":"2025-09-24T11:21:13.958509Z","times_seen":1,"resource_available":false,"data":null}},"time_used":635,"timings":{"blocked":261,"dns":34,"connect":107,"send":0,"wait":107,"receive":0,"ssl":123},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"detectivpro.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://detectivpro.app/app/?app=amlCheck","date":"2025-09-24T11:20:48.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://detectivpro.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 19 Sep 2025 05:22:50 GMT\r\nexpires: Sat, 19 Sep 2026 05:22:50 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nage: 453479\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72964,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72964, version 1.0","md5":"91247c94dcda6ff52b445d71d6bbfb81","sha1":"ad2f62363ed047b430b91f32afa31df51fcd7c5e","sha256":"6a3c3e024b31eeacbf1f19c3c7be78612d91c623186f64035a50038241dad4f9","sha512":"a12dcac84e9f9ae02df3aabe29d76994281cd1005edca471194605cfcd6a0456eec872fd28c63c72ae124804d0b47d8377048caae49c40b0a18b5d6be4d6213f","ssdeep":"768:zbw+rLBkMxbCkupj4Y69/Yr71+j9pWiKahMM6+AWEqXB0oGuNGku+QCcIKE205C7:zbw+iwuS/iZWeaO1zP1/9Esvf8fXnm1","tlshash":"8f6302244e3c50c2a54d33aa286940f6f6e79c75b2b79ba4a69c589cd410f329cdfdc4","first_seen":"2025-05-29T18:51:13.223047Z","last_seen":"2026-07-27T04:59:00.34159Z","times_seen":30769,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":52,"dns":1,"connect":9,"send":0,"wait":17,"receive":8,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"detectivpro.app/app/logos/HAWK.svg","fqdn":"detectivpro.app","domain":"detectivpro.app","tld":"app"},"ip":{"addr":"81.19.140.231","port":443,"asn":215540,"as":"Global Connectivity Solutions Llp","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://detectivpro.app/app/?app=amlCheck","date":"2025-09-24T11:20:48.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"detectivpro.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Sep 2025 17:38:10 GMT","end":"Fri, 19 Dec 2025 17:38:09 GMT"},"fingerprint":{"sha1":"D0:5D:46:2A:04:5F:33:26:32:07:1A:2E:6B:09:11:83:24:10:18:B8","sha256":"10:80:E9:54:6F:7C:32:BE:27:F5:54:A2:FA:10:85:BD:AE:0E:6D:40:EA:75:30:18:F6:E1:AC:FE:F9:E1:D9:23"}}},"request":{"raw":"GET /app/logos/HAWK.svg HTTP/1.1\r\nHost: detectivpro.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://detectivpro.app/app/?app=amlCheck\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Wed, 24 Sep 2025 11:20:49 GMT\r\netag: W/\"68cef37e-37a\"\r\nlast-modified: Sat, 20 Sep 2025 18:33:34 GMT\r\nserver: nginx/1.29.1\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":890,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9cb18211da45aaf27536b711cefaf842","sha1":"aa6a79679f6c9f74ac454662bbc7079419e2ad99","sha256":"0a697796bdd0ef3661d1b14229be6823fae65d95dff518ba9c470772a7b5d2a8","sha512":"6521ba3e7fcebedb0fb3d34742e80b4dfc9a07edc30b5150bb329ca3839e4d37786670835e8dffdcfff7ae2f4fbb7d676b00ef34a7989e9ad9f6deedb9836620","ssdeep":"","tlshash":"57115c54b719832ea500da6bfe6ff06a18eba4d5258c4cb5e1542d94697cfc46c340c7","first_seen":"2025-06-20T20:04:58.74413Z","last_seen":"2026-07-12T21:52:22.287811Z","times_seen":46,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"detectivpro.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"detectivpro.app/app/icons/crypto/trx.svg","fqdn":"detectivpro.app","domain":"detectivpro.app","tld":"app"},"ip":{"addr":"81.19.140.231","port":443,"asn":215540,"as":"Global Connectivity Solutions Llp","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://detectivpro.app/app/?app=amlCheck","date":"2025-09-24T11:20:48.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"detectivpro.app","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Sep 2025 17:38:10 GMT","end":"Fri, 19 Dec 2025 17:38:09 GMT"},"fingerprint":{"sha1":"D0:5D:46:2A:04:5F:33:26:32:07:1A:2E:6B:09:11:83:24:10:18:B8","sha256":"10:80:E9:54:6F:7C:32:BE:27:F5:54:A2:FA:10:85:BD:AE:0E:6D:40:EA:75:30:18:F6:E1:AC:FE:F9:E1:D9:23"}}},"request":{"raw":"GET /app/icons/crypto/trx.svg HTTP/1.1\r\nHost: detectivpro.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://detectivpro.app/app/?app=amlCheck\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-encoding: gzip\r\ncontent-type: image/svg+xml\r\ndate: Wed, 24 Sep 2025 11:20:49 GMT\r\netag: W/\"68cef37e-217\"\r\nlast-modified: Sat, 20 Sep 2025 18:33:34 GMT\r\nserver: nginx/1.29.1\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.29.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":535,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2936a884c0e07e412f155e9c116c594e","sha1":"e93a5037a456bb582611898c9ee06cf592802408","sha256":"1c95442cc9567db441138f3c55bfdc4f9f5cfe0c9bfd93c4adce60a68bc94402","sha512":"c09d40d3fe37e947ffe48d13c9f413c808c6751ea803d0e4c63a0b975e22425c4fbcbd78b7106978eeb09211165df43b172466a485108f532b1934871c692280","ssdeep":"","tlshash":"36f09ef6b07ca6c48008973ce56e31d2b5761cd662164a14d2e01c497d824b76c7c3ed","first_seen":"2025-09-24T11:21:13.960387Z","last_seen":"2026-05-30T00:14:05.468045Z","times_seen":6,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-24","alert":"Sinkholed","trigger":"detectivpro.app","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}