{"report_id":"1c441006-5514-4b6c-9e8b-a3461c3d5548","version":6,"status":"done","tags":[],"date":"2026-02-06T23:32:31Z","url":{"schema":"https","addr":"check.amlsecuritywallet.org/","fqdn":"check.amlsecuritywallet.org","domain":"amlsecuritywallet.org","tld":"org"},"ip":{"addr":"172.67.200.3","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"check.amlsecuritywallet.org/","fqdn":"check.amlsecuritywallet.org","domain":"amlsecuritywallet.org","tld":"org"},"title":"New Year 2026 Mini App","dom":{"size":344,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (344), with no line terminators","md5":"c28f5bcfb309ae59b80ecba9ae7e1ec8","sha1":"c47db12565c4cde28b534d02053ee029c0b6fb46","sha256":"144d00dcaf025dc3291845ba59dd4653555e552a080c00e20ad47f905d34f55a","sha512":"5e0829508c9d20a7dd7c09e9f20056ae1ce0946d516965ef8fd891b8a1bf08794e8628256d2a07a351d7248841f6b9cccaf5372c52109eebe2ba74c3b2c901af","ssdeep":"","tlshash":"b3e026e95d76c83474e4078660f5e3dc166062a0bb11ea0442d8d83b9e20fd38c9298c","dom_hash":"domhashfa92bf49a0529f3ae8099507699ba65b","first_seen":"2026-02-06T23:32:33.856209Z","last_seen":"2026-02-06T23:32:33.856209Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"check.amlsecuritywallet.org/","fqdn":"check.amlsecuritywallet.org","domain":"amlsecuritywallet.org","tld":"org"},"ip":{"addr":"172.67.200.3","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-13T23:32:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"check.amlsecuritywallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"check.amlsecuritywallet.org","ip":{"addr":"104.21.36.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-14","domain_rank":0,"first_seen":"2025-11-18T07:29:56.594863Z","last_seen":"2026-02-06T23:30:00.09491Z","alert_count":6,"request_count":6,"received_data":86085,"sent_data":3291,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}]},{"fqdn":"telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":499,"first_seen":"2013-12-18T13:14:30Z","last_seen":"2026-02-04T11:51:17.83194Z","alert_count":0,"request_count":1,"received_data":114323,"sent_data":435,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-02-02T03:27:59.599518Z","alert_count":0,"request_count":2,"received_data":815931,"sent_data":846,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-02-01T23:21:11.670157Z","alert_count":0,"request_count":2,"received_data":776911,"sent_data":870,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}]},{"fqdn":"api.iconify.design","ip":{"addr":"172.67.71.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-10-17","domain_rank":89604,"first_seen":"2018-12-24T02:01:40Z","last_seen":"2026-02-04T22:12:09.171347Z","alert_count":0,"request_count":1,"received_data":9199,"sent_data":463,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"check.amlsecuritywallet.org/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"check.amlsecuritywallet.org","domain":"amlsecuritywallet.org","tld":"org"},"ip":{"addr":"104.21.36.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3bd58e84b37c31190b45501c9674fcf5","sha1":"0fa470786161ed47f3a6e37d4670acc6a23f2ada","sha256":"437e8b93b365aacff468e1e56b241cd64439c4116532bde1552e962cd7a5678c","sha512":"ada21498beaf011309b2a7413653544dad47254f239d18c1753e08b1bca7cd319f06250fa2582b401162af420db6dad664511eb8961b872272629bf6d66c81da","ssdeep":"384:YNkGVBSwE7ATX2NGtMY2ncsw9TQC2y3Ag0nBcmPXJi2S5HL9npO2t:YmKE7AS1Y2ncJ9TQM3ARnBcmPXor9np","tlshash":"4092c7c93dc5b2755666a0f9252f74cfaa6afc86381e0806c318dcf4bc31ba85497d6c","size":20846,"data":"","first_seen":"2026-02-06T22:48:36.912081Z","last_seen":"2026-02-06T23:32:33.869455Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-08-02T18:45:10.803919Z","times_seen":47823,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/lucide@latest","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d5db397849161e23ada0b123b2ce8db","sha1":"87c08639683d385e251b531c79ab1682416897bc","sha256":"e0d6edcc6716b9022262d9ebe0be03ca42e2309dec68f8b5e9f2aeac7bc3c9a5","sha512":"c6c22acd8525155f568639ab2a276a74c7abfb1fa4642ae9f2738472a2a82de06aeab1046eed43e4f05f376fe1e3237f398289bd5719df36de2b6fdec2b4f1a4","ssdeep":"3072:UiwYzPyQS4pJ9HtBIVAlzhjqqoFoTsnE61yPO4LLexyjimLaXthxvyjg0T8Bbz6Y:tb63gvolmLKajg0TMbz6Y","tlshash":"a28462af8fcd269f4c56e7881a4bb0501fed93bd331a8c12768e963bc252416dcb3651","size":387755,"data":"","first_seen":"2026-01-23T10:55:33.448568Z","last_seen":"2026-07-14T16:01:55.381026Z","times_seen":1975,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"70dbd7ade763706614c7ee99973dcc9c","sha1":"0b980ef4fe3e17d253fc2cdb672f1208736b733f","sha256":"b47f6cb105860d35b4ae512c22696a33157a365f4c885a33488f22ea8a3b6a03","sha512":"03c1f60831856975b61bea126ead239f116235fb0422178425d6b8c86553a3548d487c919f0f3f81e14de201680f63b7be24106589faffd8f3c56b28c2d19b45","ssdeep":"1536:pO5TpRdo54F0WN2Zbjcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV76/xHK8ITrm:s5TpRdccKFU76x1H","tlshash":"6eb32e4d6cb3612285b3b1bf8b5f924172759883301def20794d9b646f80e7c53eaad8","size":113990,"data":"","first_seen":"2025-07-29T21:33:08.487755Z","last_seen":"2026-07-18T07:05:28.914407Z","times_seen":3814,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check.amlsecuritywallet.org/","fqdn":"check.amlsecuritywallet.org","domain":"amlsecuritywallet.org","tld":"org"},"ip":{"addr":"104.21.36.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2ae0fe958054f31b60e7690dba4bfa68","sha1":"14fb147c163006819e55f18452b0c111fbdfedad","sha256":"71ffdef4722255fb7c19659837902b10be88a0dc7e1283e4150ee7069660bcdc","sha512":"dfe359b1e752d1d550eff1587f4ee6ddc8fd1535d4fb3f019f1acbb8c8c849fcdb822fd8db40f286831694b493532a7250815f51282546306b6a06527e304434","ssdeep":"384:G9HDWD060WhE5pEptp6Ryn05N7xt/U4w0tG9Y:G9HDWD060WhE5pEptp6wYsEp","tlshash":"e072722a27b704390c53a03bd78b67483972812b754bc6057cad8f696fe3d21867a7dc","size":16581,"data":"","first_seen":"2026-02-06T23:30:01.090569Z","last_seen":"2026-02-06T23:32:33.870438Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check.amlsecuritywallet.org/","fqdn":"check.amlsecuritywallet.org","domain":"amlsecuritywallet.org","tld":"org"},"ip":{"addr":"104.21.36.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a822620ebf15030eda8d510779d71de1","sha1":"154be00a94d52b4c1bf13dcc8813eb4352e11eff","sha256":"476b9797bee9ad86eea3767d956fa745285c7aa37ec21f928be0263ae5c73d6e","sha512":"370c10e0cb80b86c2fff0e31f3f061edec2cce63dd268c08c6ef07d625b18e57734eb11e91450c996c2e049bf1b40d26b5e41d9560dfec39a68d4bba15f1ce8f","ssdeep":"","tlshash":"c31100753b2a1534d5c5418b31bee7a83d3261617a02a044c3accc295d28e8314efcbe","size":902,"data":"","first_seen":"2026-02-06T23:32:33.87209Z","last_seen":"2026-02-06T23:32:33.87209Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab6641226cd8c83dcfc43df761df7890","sha1":"83c1d84b3151f88ed96a27a109837779915a107b","sha256":"aaf2bca8cf9847766f1850dd004c35e50db05ef642957b7a64c9993d4cf6f3b1","sha512":"50b3c56fccbd824115d66cdecd3ff043623f8ffa2785dd73fc522b35c2b02b0df4b9940c3916820cc2a16b4a092d55ffb52485ee02ca4207cda1abce0526bf0d","ssdeep":"","tlshash":"14d023951975853071d8064650f6e3d875a023917711760481c8cc2b7e31fd349f195c","size":217,"data":"","first_seen":"2026-02-06T23:32:33.874211Z","last_seen":"2026-02-06T23:32:33.874211Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"check.amlsecuritywallet.org/santa.svg","fqdn":"check.amlsecuritywallet.org","domain":"amlsecuritywallet.org","tld":"org"},"ip":{"addr":"104.21.36.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check.amlsecuritywallet.org/","date":"2026-02-06T23:32:14.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlsecuritywallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 11:52:26 GMT","end":"Sun, 12 Apr 2026 12:51:07 GMT"},"fingerprint":{"sha1":"6F:44:56:62:73:6D:2C:8B:40:7D:F5:74:F7:A9:A7:68:17:21:7E:06","sha256":"3D:E6:A1:D1:94:DD:2F:AB:0E:4C:3A:1E:D0:16:26:69:53:1A:D3:D6:F4:5F:A8:79:77:E0:77:A6:CD:19:37:29"}}},"request":{"raw":"GET /santa.svg HTTP/1.1\r\nHost: check.amlsecuritywallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check.amlsecuritywallet.org/\r\nCookie: cf_clearance=IjRXG4nt88spJDJ4su2MPskB5EnTLezYour_Wrra8IU-1770420732-1.2.1.1-JgWdkDtZTxJ5VUNR6gj4EW1ShRZ6wKL_0gYSuPGY421zTIs.eXRamWzystn1HAfAfdO7hVb0.yXxbfJMun2V1NxGpq9Ziu4IFGeivMr4y8n51MSU0QeIu9yOOs5fH4hV2CyaphEt2BWX4tv9GIdwM.GTlwmK5iXgqnYnIFMPFywZz5B3Zk_v4QtvbjRV59y7dqHW_TH9eXvMRUNDeIqo9TTBXeL98zWFtWfW7jV8VbE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Fri, 06 Feb 2026 23:32:14 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BbbYUkh58DG66YWWb36MRIg2kStLj%2BDZzGUt1oWYiVIglYXTTHrtBU7FgaR8HgH42SOhctm32E%2BClMK1MuC9lOsFNpRYTgIi8ZxddCdxyhc4FwXLBUGP1xU%3D\"}]}\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 153\r\ncache-control: max-age=1\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9e7215cdf05693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":289,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"b5dc271a61fb1d5e062a163274310482","sha1":"f1a520b120dd3c158902afbb70fac79048af8f4e","sha256":"58dd69decf57fc013d3bbdf65590a8915867c3ae051cfdc425fe74ea14a4741c","sha512":"b3451162103fcd2896b4a704a69cd242c000f08c4ef0bf8ff806b19d94425d676d27a2e5e3cbaec5394de73afc8210452e32624d172c77cad290296000d75246","ssdeep":"","tlshash":"a8d0ebeea04373834812006038c124c6274c22f6b03b42ac3ec6d887a29843ecd9bac8","first_seen":"2026-02-06T23:30:01.067627Z","last_seen":"2026-02-06T23:32:33.859346Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"check.amlsecuritywallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://check.amlsecuritywallet.org/","date":"2026-02-06T23:32:10.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/telegram-web-app.js HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check.amlsecuritywallet.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Fri, 06 Feb 2026 23:32:11 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 29 Jul 2025 14:26:51 GMT\r\netag: W/\"6888da2b-1bd46\"\r\nexpires: Tue, 10 Feb 2026 23:32:11 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":113990,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (768)","md5":"70dbd7ade763706614c7ee99973dcc9c","sha1":"0b980ef4fe3e17d253fc2cdb672f1208736b733f","sha256":"b47f6cb105860d35b4ae512c22696a33157a365f4c885a33488f22ea8a3b6a03","sha512":"03c1f60831856975b61bea126ead239f116235fb0422178425d6b8c86553a3548d487c919f0f3f81e14de201680f63b7be24106589faffd8f3c56b28c2d19b45","ssdeep":"1536:pO5TpRdo54F0WN2Zbjcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV76/xHK8ITrm:s5TpRdccKFU76x1H","tlshash":"6eb32e4d6cb3612285b3b1bf8b5f924172759883301def20794d9b646f80e7c53eaad8","first_seen":"2025-07-29T21:33:08.487755Z","last_seen":"2026-07-18T07:05:28.914407Z","times_seen":3814,"resource_available":true,"data":null}},"time_used":2283,"timings":{"blocked":1116,"dns":1,"connect":23,"send":0,"wait":48,"receive":0,"ssl":1090},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check.amlsecuritywallet.org/favicon.ico","fqdn":"check.amlsecuritywallet.org","domain":"amlsecuritywallet.org","tld":"org"},"ip":{"addr":"104.21.36.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check.amlsecuritywallet.org/","date":"2026-02-06T23:32:12.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlsecuritywallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 11:52:26 GMT","end":"Sun, 12 Apr 2026 12:51:07 GMT"},"fingerprint":{"sha1":"6F:44:56:62:73:6D:2C:8B:40:7D:F5:74:F7:A9:A7:68:17:21:7E:06","sha256":"3D:E6:A1:D1:94:DD:2F:AB:0E:4C:3A:1E:D0:16:26:69:53:1A:D3:D6:F4:5F:A8:79:77:E0:77:A6:CD:19:37:29"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: check.amlsecuritywallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check.amlsecuritywallet.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Fri, 06 Feb 2026 23:32:12 GMT\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3ti4rYlDh8tMA2vpBNttF9shMI6701%2BA8HwNZgQtYaz4xpGaR%2FBzQeFQMjMXLlx5ZIFjA%2B6V2JXEWG%2Fj%2BZHz4eM1XJklU1pGBKb94JXkQilsnwVS82AtKtc%3D\"}]}\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=iso-8859-1\r\nage: 153\r\ncache-control: max-age=1\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c9e72089d845693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":289,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"b5dc271a61fb1d5e062a163274310482","sha1":"f1a520b120dd3c158902afbb70fac79048af8f4e","sha256":"58dd69decf57fc013d3bbdf65590a8915867c3ae051cfdc425fe74ea14a4741c","sha512":"b3451162103fcd2896b4a704a69cd242c000f08c4ef0bf8ff806b19d94425d676d27a2e5e3cbaec5394de73afc8210452e32624d172c77cad290296000d75246","ssdeep":"","tlshash":"a8d0ebeea04373834812006038c124c6274c22f6b03b42ac3ec6d887a29843ecd9bac8","first_seen":"2026-02-06T23:30:01.067627Z","last_seen":"2026-02-06T23:32:33.859346Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"check.amlsecuritywallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check.amlsecuritywallet.org/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"check.amlsecuritywallet.org","domain":"amlsecuritywallet.org","tld":"org"},"ip":{"addr":"104.21.36.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://check.amlsecuritywallet.org/","date":"2026-02-06T23:32:12.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlsecuritywallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 11:52:26 GMT","end":"Sun, 12 Apr 2026 12:51:07 GMT"},"fingerprint":{"sha1":"6F:44:56:62:73:6D:2C:8B:40:7D:F5:74:F7:A9:A7:68:17:21:7E:06","sha256":"3D:E6:A1:D1:94:DD:2F:AB:0E:4C:3A:1E:D0:16:26:69:53:1A:D3:D6:F4:5F:A8:79:77:E0:77:A6:CD:19:37:29"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: check.amlsecuritywallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nlocation: /cdn-cgi/challenge-platform/h/b/scripts/jsd/d251aa49a8a3/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\ndate: Fri, 06 Feb 2026 23:32:12 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9c9e7208ad8f5693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20846,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T18:49:44.792728Z","times_seen":17676519,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"check.amlsecuritywallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check.amlsecuritywallet.org/cdn-cgi/challenge-platform/h/b/jsd/oneshot/d251aa49a8a3/0.3739265494661249:1770417298:4Na2vwS1BBYN4736LRZ-txIbi7KywiesdpIQ2ggaSwc/9c9e71fb9a8b5685","fqdn":"check.amlsecuritywallet.org","domain":"amlsecuritywallet.org","tld":"org"},"ip":{"addr":"104.21.36.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://check.amlsecuritywallet.org/","date":"2026-02-06T23:32:12.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlsecuritywallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 11:52:26 GMT","end":"Sun, 12 Apr 2026 12:51:07 GMT"},"fingerprint":{"sha1":"6F:44:56:62:73:6D:2C:8B:40:7D:F5:74:F7:A9:A7:68:17:21:7E:06","sha256":"3D:E6:A1:D1:94:DD:2F:AB:0E:4C:3A:1E:D0:16:26:69:53:1A:D3:D6:F4:5F:A8:79:77:E0:77:A6:CD:19:37:29"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/jsd/oneshot/d251aa49a8a3/0.3739265494661249:1770417298:4Na2vwS1BBYN4736LRZ-txIbi7KywiesdpIQ2ggaSwc/9c9e71fb9a8b5685 HTTP/1.1\r\nHost: check.amlsecuritywallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12162\r\nOrigin: https://check.amlsecuritywallet.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check.amlsecuritywallet.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12162,"data":"IBP5C8fpx$QEET6TETUfEQ$xT3PTrTV5KA-5xLTn5t6x162Ve0TR5I68A2TYTqqTL027T0ZxU1T$6xN6oVbPfttVyPTyllTn-Trdqu$TAUTPp-t0EcVKTXzcauyAv3-T9WD56PnpZ849sBeTTMsdPLW2KT7db76kB5ddXfThgN0Yuh3HL876U8w5TvWdvAjdD$Txs4al0Aw8Kw0jgs1TxrOTfeThPJO5QlypZIPYoRd4-QnY4kxaBfeTxv0TTeZBDb97EbbTf3S9kOIfPKTTs4AUQxPTxX1ITXPlg8TLB7KgPDt$18eTfl0LTeVnylWREpeuNOTfntx8OSX$TT6OWbu8WlNf9NxvNTQ2l5fGuLnTT84hfYrh24nTVOEaz79RPD31N41sKpjz8O3wWzry8W68lqQ8yRpx5ugxTPPOxgFCWTPJs-EhhCh1VfqhsRPhzY0St0QIwT1VanmTuVn9T$flR2l5598MyC45H6z8RChj8w5CGnbuJSuN9gHypygU9vrnvTLlnTWV9CJ43JrB5TxEIkQCY9wlI4MNnsm8lNlgRl6THfU7OU9r94+TH9Rjq9WacUeH7MMwSCg6CPbaC-TYOrnfHMFdgWIM3$$7YwFL7dL9b1J5xpI16OxeV-4aVKA$cPjsFEk3x32V3L1Q6BgvnYmetle5Got56t6Xzd3q0SuQ+1BsjWhKN43sGSwPQ-fJTLyWe60XDrx+TMMZSBdlg-sN5FBakf6XXNLfsRTEhv6kgPKLD3RXPq340RP8bsQ8w1ZKL-nxgTT+EmWzPEZK53K-4bp-WhBPx5CWdS-6fJLBuNexelTQUe1z8O6kzrx6l6B57KzlLPkn5I4sz7V-tVaC5zx7M6cyXl6-NJtKKN4$ZFT7K-S9NtBSnptKafKfpWn4$P6TClPZzxY2eX9IZ6x7MP4CtT8h25V$Eh2LPEamM6Bn5u3tv8fP5PYnqYyPNARx8lWjn5KWB4zTxmmfMWtf2l6+nmO4bO4uV7gxH54bxQZu98LctafjcWNRH4pvffI9nBKIEZbeI1x0p9mn2Q-efPq-h49eOqJZkI7mR-4Azf-R5nR9p64hacTcOVmKUWg6IfplWTlpOkwb$lWxOYOGPP3fAk-AC7P3Rh-woQ-Tzz-ZO5V3g8ZW8-NBf-0T9YZKapy77YP7zgtWX64b-+Q2S$QZwbApZ40KL-7lUfPCQdu5st2Zx-h4byRtQOZOfKLT4h7Hbs54usyJpusVfTrTVy2XPBD37qnTvFx7EwQ2t-94-bmxTSWz$nSOzMo5szKbQxmdtB6TsnzPfqLGay+YK7W7LTwZcQB6fKKp4OylW8Clh6f2A$pcUgIxpJWERTaXV6NIZNc$4nrT4ptHuXW7$P7N5$pMJtH57s4TKed$l6mhdM6YPTm-Mp5fOtULl6P$LVxvb1vTTdwx-1TL3-bfxfo-1Bhlf5LV$fNd-tajk3H2wIvZB9b+5Pt7V6wzdPdkpll8lZHG11BHG9pWHAljLltlITmQaLEQ8jItR9TcPaQjsFomSKLoBWs8tX8+7dX6LE6-FdjHw6fTVFcZVL0-TPZVoc$hTq-6TvmPxTOFhwFkMM+q4x5FYu5I0PYZ9T0rf5-uBtT6-ofep-TDu7$Eewc5GMExJLoHl7-vAJZTLW7VKlm4Zj-VxkLW$HaTGxvxEf6M6MNJ3$+O9zY6P-F4r6Y9HNDyrRxLuC3p$PuK0TIlBTbSPEUK23NKQKtT5Km8mTMc$$VfU1BDgJV7IZMgym+htKtq3MmoVIv8up9xalozouVnAs69NM7Tqv8x-AfKs5aTOTJT4VZSE7TZzNIKoTEyBDKNy82wKqQXgI-oN25WjnAQ$fvJ22Tny7q2ul0-dW+xbnGV68+uYEhpDmxln44-vZZTDbcS4wPJ-7TD4qQ-fgOT5UZ2sSDeP-nBUhCTVZKLm$TWmC8-462bqpsX9PTWT0s5l53r6$P-vC2XAXcpS5KBONJ50bX5AflV4gsGTPt20Yl8cU0hB$7j0XycqnqAg3aAPfK9kUnQ-OKF-Gg8VwYkMgc9TQ9W5VTh9ljlVl$4r2OlxhR6ZCRdCfa19alAONyUjaehKx565k6cvl9BP3JClu3PWLMTWGc1D7vyg6VUVIr6bI$P8arxhLW8u1U-KX4GXUIhv$xSWmhA94WTVHHPgSbMgpb8qJfVMIleWCJb-seJ7m1ZO52XywjKvXDI5Ju3cpm6BqSM6h4sPn08clf4tlkg8tWkT8QdfmIBoNQ9eOdOrdaTZ5HLUeo$T6VYDvI28gW$onq7-s45bvExAJ$CAXD9uU$WKFgD5nE89KXJnvyqJxzfxdljC2opSTh+xnBS4yChNgEoT0sMM8u2lWpwGMxgBVOyypPKMb5aVzeMz0Ynm48Lfpvcq2sgcmnXP0HqeMgQJVAgZl0fHgsXWfM89X4vhCElKlrrVK$-xFTgLX$TPNQ2EKbSbVIQy0r8f0-4RNkq1qTlORE8I0WAHZq4pxgG8hSqJxBs6MkFHMB3fVWza0Dq5naYgfOxealfcfShNy4-xZgQyISH5tRQ2Zfnzcz+4-hX7fDSNM6MZ0TBWdlp4-uRTgYh5QYuc9UKMwKxPx$xFRsL3HO9qO3DsDLaHErzpxXsTfVLL1bm35V2HxtN3p5JWqrjwUUQ4KyTWLl7c-plsXzEN4-jqULbnANljNBXDNwMK0Lh34Qr4-SEmJW2u5Dqr6uYkD3QZjpNLcZMaUPlnfZ5+1fngB2n2T6OP+jxHkDugWT6xK0nnbThtpRZP8AVMLWSxx6nafzu5T9QmfMr9XBnboOnpxWoUG7VNvgXLptUpHgMRs6OVoVfT-HxuJ8UZ6dxRqN-EvT0cOnJxVTwyqEgzOdJ7aeunkGSCbXa3q-38Wh9JQXRvSmVrx5bzQP2TWyNT-$kzMljsSQS$RWVvC8Z41PBJrZZz4E6-SfGIJ3ffPjBNNMdSCpLWMyzU9DALYuZcKSvwgWdJHwGIzUAav2nCm6-dIHQLxWbQh+xZ3c5ffUW9PbT7Qor19AYA+I7E3Ke9VkOTaBpYR9a4NseYpjvH4tFfLW5OsgLL6u9be0Pqppm4bwPOL+Tujv+1s8d-7TqYLjJgZSL8$j-gOld$7s6njOq6+KyUrYaTkLe$Gqty9AHcsU76--yesWA6ZLoIBvuJalWM9ZVzInQ0ns4SpU3Mhu1J29Q0O3Lv26pgeESsu2UT9J1Gw084obYYMgjWL5S+oc86WX6OCv5LM4vvovZJ4Gg2QlI3xfHdSnQlATCqN-MUhlkTae7KlKzg$Lu$T-XsMHe0tu$ZaEHYXq$g6Gv81dc5jhJ36lP-jAbM6n1QykeGmvv4QBNxh1QkbY4OtGqAX5bVcxBLRaaMI9UvR2dRARxBvkjeBuyFeGLltnflMnEZHJZ5-0j9c66Ko6T4T85D0KHbQvvP5-rvtUwwEJ+9e7$8lwkepPvr+X7UO5G7D9B$$lOTSK$e$EkXP1+9s5SKHXSTCEIgTgS6IJ9UxwaLjlWeO9UB$Upr0T9$75VTKP2UZ4vXvLVJj-IJspCZHZ1LwLqfV9yJaP2LPfQ26rjJW3qlclp4KZW3Vpo8a-UE0J47WLa-+ZywQ4S3n8Kx3fZwpPC5CTaYKMXe+lgPEg7gHxqTLlK8S1C2+19ZnTIE2-d5KP4ed$qeeg9lx5FTD$Z4afKX7UwLrf5NEE2f+eRfxf8Ul86r4weNS-Uv4Ze4QJfNa3VXJeXJq$vPaep8K2EY79-4OE$ee6qMoK0W$e$PZvaTg4zUIwI$RwrYKXdMe2098Y7gDXh8+$8P$1x7Wec93wb1aNqrBelfZlqNAfl7nT8NpP9Un9E63n8eBeRnDrxmVgbKX-I$aTfTWmJv9nJUnLS6aNtNDMFNPT+x$Wv8$L4gcPcnW1INt2UBHZGLp4dxtg+ZMrKmF711bESEoTHwoe3Mawfvull3S84l4Z$wqUpw044PbTpJI$rJ6e797WQlkmKXj-v5zYYfYJRTLJDeCKgXz1MmS-nJ2hrLPMqpT8O5zwr28pM1PJ4PQEWrzU9Zm579ZlvfKwr4Ze+hFvax2PaJzUpXf-lTjmuwf55hErQ40TaN-4P4WrWepw+$hZyTx5w$DrWeegaKQ4q$hmegyvEPhmn90eX75slrm9J7456ftKKfEEjYc4-sWsnTVTV7umT14PhnK52WZlDxFJ-5Dxoxt$HJ2sz4fnM5TP6EZJOUZWLpaTyT+Z+9yxZl5gYBe2mfa60M2U$LJwaTYwCK6r4g4hth792W5--fEPZedx1B14fT2Ym5P3Z5+xAZ9rZ00TFnheOTuU5Pjpq$qen9DxyZOTwUSm63CsOh$r20Bm5lM08s$Lt-aTRTw0Irdl6N5sUXIp0LTP34nrHZsr-P4e+$P$506Tfpg5G7+0LXzN4vEw0hK22AC2$eggaTgeSlj-LxEPLr40Uv$-cYQw32a09Mgh8hf-DZe434QA3lTU1NXUxnrvQJfYoeM0uekLZ8SvtZ6rXl65+0Ks-VUfEPWmBfxPuJf5JhOxTPfTtwpMV-lfQffL5VXnYeWf-VcPHTLBSKCn5VywCwIV34jnDEVvq0BYI0J7R0$Y8A0Ws$f5VX4gm3q5bK0WYUax0NIncEG3$3XA4VRe$V1mevUUG7bgSYwmj-7qkTdTN5NsXvzhx7WY23b$BhBNeES3Kwa4K2Fngq7ZIpKNT34NNEIp$AmlPT2WcTj$HqZf1gCTCw7qZYV9EmRT7AUhV9hwH1J$$vqwQp97QqlfFnM0r87PUpZUhmOJ53L03vOfXv80zUWL8Pk2tTy2Yec49Yt-yZvZs5ceSUnl+gbwT-$Nd0pYD2mqb3ZlxJaMuY97cXHO+UI8t2TfFqNvw-GLeT7epxLqpP5w$hg8s5NmdN4Pq7e4pMqNr9zUjqUMRsKMe6mPF5aTyLg5MfLMEE6r-coM2WvZLpeLp4-m79f-qTMVWY9APMfEB-47bgQEE0W1LJ-hs11TYO04YXhhQ7dZf-$9l4fTanrM6rJ-R-bTDVl4CONl64SJ7-dVBhS-kwXs3OXv$qvm5Vn9+0PLLODhjVk$gK2-vhQqIpWwCEUOQI7ng3Tr+IUEfv0M0lFnl355TrPO+AscKPUEWmPBNwN5EI4g2ZaU7Oe9bJEsW4tnV97Wm-MgbV4xBpV9hI6qCht2bOnLM$Sv5X64BI54Y-t2K5x4CrHMC1nTswJ$oqa1Mc4nbkaN10fkqxFZBvFeBA-sOcIp4g1lUE+VhV4g2OUmq1$enrx5f5lAOIZmKw-f$UkT652Z7Z+cf-OKJctc0WsUbX0WVhcp47nsKVzUf-LnzVknM$ST$mXvhAevzUWZWLBLnTPNV0wwB0BmO54mb1bgCp+Z3cdxyKdEVA8cqUCgelbhRfFn6rTvtp5Jenf-UMPLcXqNlIE1YI4sehxVYJbJ2-EORTHLmZe140$EeVss+X28W7KhCkHk+ZgOBMop7gFww57gyku90ObKm$Znqxl3lsqeceL7-1U0PexOc-b3U1n24rFk7-HWuWahxhBlgPxfIT3MRpH3f5G7EnXU5wlnnNHs-fd$hkaZnn+sOMlhhV-suJ7PbsXrpMzGI1$UbJQeNlecB0ZlRRX$9ZjpTIsckQoK7W8R0V$e4hg5cxZ4tq2WUprvFZw4zpcXdZ8vr4+w470mcXQn+pdednYhq$uk$Ns5Yl4znEITvNCObJpARTEI5g04ZgYEMhY4xY5VXe$hWh47a-a-dZlUUEqezRf$Yx3$M55y91G1-V4Pqh3PzUegDcx54lH3+9hmWLmPp946JzmGPTWRyKoepzK5Lp+$TlRN7-hZpLmraNyzyZgPPgIkPho847+0+mF-ZABQ1IUkqxn9fRkI60GInIyICIlv0Rn-N5m59UqqoYB0Wz7xIfVO6corSwaMyXUeDMoMw0O0KYZq3YLp276r9YlYh8AJegZIyXhmf0IA04Bbn5h5NqwsoY14yT7hzVn9cPfc5VV4g7OTq3BZuN4GM$UEqNpx5lqNwRpzn0f-5UN1MXD0Yn+$qeDRcXMNDKNNR5ApC0QfqTbf5PYMNxv52E-7-OJ4TJSz20asmRcU1BtKCbRUa5PY5V-NHPAG54oTmN5k5lCR79FwkVhV8ORNJ$-4l434Mz5W9m6qWJd$UmMJfQ3zcbg5kb2bBAJIZ52RO5Fq7VDInIPkM3L37VuqcXoRdRq$gC6rjnNlzV9Y46-CQJs5xQVTlG9pmsGs0sbVIOaCGR$LdCzVbgOQ0kTOMXlp$pCyMX28zej4N56rbgsRRL6wrSVv1S6khLMqOR5YQqcga-6rLgxv9vW5WblObKU4gXR0GyYed$jJsg4ffsSINeRfl3SZ+ZHfWzV-dKbsJ1hsMR790yS-POO1+qjR200nmR$zVRHI0sRAS-0L04MstLCXSnPbSMlMrb-q4YG0cP81nvb020$qZQfIGHtfzeRmSGVehJB7q$+GmgI3W5szO5ak9fAIW5B-r1zUvsITSeFqX14PuMcYj4CTU1dKIQaKbZaO1LTPskrG8PLzeH+ZovBRGhsRGClkVyCTb5d0kHzv5Z2-t2xP6ITXj5vkBHNl+N3ybqQww5RbrQ1QDEwQG7WUultJ90$1q58ZO5TIqe+QNlwRyQe+mgTbgUaI9HL3Bk7uAROp6Abk4gPkZ590cYe2-lvMv8T4emBrTG5kdqRTSv0HvN2W81T41hhgQvcG9SGb-V00WNFqAwbMwH9+9UuMA5qeXlnT28HpxZmzTNyl0szsThhLulWzUvwD2pjA90S6eLu-$JcsxPhmbCGzSxN+I+Yur7hOV93bomHEIkozbyJONq6gKgXyXz8vAfEu0zqU9RRs$k1Yrv9UjIxHbGOVurcx-P6wx5eGoy7-blogX$Y-cAkr04fqvU6CEbWcHWJyO-q5Sakhqxesb3nASwvVBrPBFS7VnYhY6S1GbuMVxsIAjlYcEv7vGMeHWbcPE0l5ew0DBOl4$e3bZlTSAl$41qpMs$mZd$4COVLRtZv9mR5RPg2O1U9q5V5OvD-CjrZXTXfyMfdZNp7-Tlm26q$zKqVX+0s5TzIElYT4J3ASWnYBGO7gAf-CzVOkB--z64dz0U65Zek+MHwnY-R+GGxlCEegFSZrbvgVVykNRor8SZA+ftQ9W0JNI9mRuUK5IQXI$gOCJPHuduop0tVDqtG+WCgPIS+ZCxRRM56q8Pb2J24dOerR2o7-QcM5fNoUDsWVIzwwPBsRvomY0A5Jll4yNMYNEP9UneoK8LY32STWJ3Z9xP5GxeuVS6lTCDcOwCAcX-6rF0pEvs85Ms+Yx1G77WF5M5Q$T4eGCuhHJDtrYDP4cO98NDmv1XHdOTaNPXd4xz9ze4lz-Pm+9O+ZjJZAq+Z8UXOAC0H0MXCSqe+0fU04plA4uy3yYX2yWHBvHy47-vPvMXrVPtc4kf4sFnhIDjjjQdPTXI5ZgSoDDwdDt9VVKXEaAN7WaN4FKMFsXflmf-j9TdyC9GaIhIM05U9d$l7oc9RDLbM5yn6NsO799kD2kfpsB-gjtZnM9WWm3pmoGN$B8-v22vETPI36hmPPu3KosKp-WAJlBW625PhnKf2HTZQ3L4+eZxe+zfKNX-nP$ASKnE4ZPJoxbRRNKA5MXzZ2NSn$P1pJus1E56K2402UQ9Bxca062saMIjMjguqrxdTlT7hMgCEKO-$6M2jpxjLRcrx0-Qeo34ZCExhNCkUJoQhdC5VrxzTT$6TMBq6Lg-lxR565CXISyn5Z0VfIDJLlcy8lgxKW$5DPl$z38mqVTrAK+tWCu5gPST28t9t0QZx2$hMX5D6VHT1TZ24x0o4KhqTLyxT1WOVTZVQahQNQ232-N-IKlNWB5w5p-EagC29uWP-WE-8ptKIVmRnB6APYrIu2pv559Ne+OPp4tfP9-JfNVPRxnalKcQfWul9dK3tPbdnJ5z-EK$3PZunsEfDEaTyfqfQ2ZzvH-D6LWLgf5fmNV-EHY3Ce8u7hZV-DRV$aNCq0ANkAl6lPuUgbcTZV-cfEfu-M$4INW5ayqLURCMKGNb-EByAT1KOB3Ne-zPe329LAQTZq2jv14hsC2NJP6w0mQEfwK1Zj5uZD6KmLKTZGgpAPHsCqLl8jn-NYZ6UCENNLLV5N4572T8hMBjnQxzOLD8AQnKl6$na-ZZqCzmLPK2na3tWQIvjnq-9n8PbKOGxmmFx2WeE$-Im9UQ2Nn5CxM+U4Cfxlm8N24$x2DT9855UnLlL0KlhrQRPa6qM-Pfza0LRTD7y$M4aC8LZyNhnuLpBL0NnX-zhfTDVDU7zfL7mZfeZGzuD5pz4ZkWEHxpY8Yvzq2R2IPUdt5IA5q25E6-DPQMPE+2N-nNt4BnPTzH25qfE$H3R6$NuhsbnS-936LfvztxZmK6c3H3UrBth3NmAl5$Eu0bvxqNQ2L-UTQyVN80NU6rvuzqbunIvNw6dUla9CVCG--flapuGTDQpTMmpPg6PBt4PKTP-g5j8I4PXuBWHpmZDWn3I9Vc77Tha9$O63mMfN$W2tjQY$IfVRKrmYXp4e6Lsyu2RMHP1EOZTHLbzP-FWSkuL4B8k8kmKBl6xcQoVkzv-LBYZE$5LzVxTBVe6EyETb8dqB-BZF01KbZfA8tPuKYW-eD7z-I8NhLhkYlY4f4fJTb3Yn2ATQM555hPKS5VQyvSdfjKKBQYKhrULRWBhjZk-$5rQHYfkmmBU0VNhS855LWeOHYVE9A-sN5-CB$-u5uBxUfJmXtVyE0u2BnQyTreQClzxD8APB$bK4PV6Qnvf0rh03VLlXq38HqNTT2oTusTxQ89-TnmalE65g9vykejpCDUHckzQPK-HfpsWm-A-MkvJEW1-YboRvUfa5dstT$jvtC3mxwk-VRSJyr6hnJhp1KHlQb$QdAd5g5eOtyTkSBkjTNU6bKQQpZYndn1fM5J5nfTKOlKSKNK5BPv8KENTV-Y8M6TTf9j-R2hZPpQ9GH3mgj5CMCSn9PuMpfnnUPTK9SRQlG$fAKaT4KAfuKR8jZH1uhZfyz2w5rAtxQ-uXQ6v++np4cCWC6EUxx1CNQ6CrTukLrwCa6L4QgMT50Tw5S9IdN4QBqFf7PJjsMc$K+fE7STTMjnYkWyNPsd636pUzZXfNSg2aj+k3YWxDqtnQqp2lbuxQ88B-cpR$6LuM2jkThA5IMe9Qhy8zt$D2p447VVWHnzwAPnUT-VAz8zXm4vQX-Mq0BEPtsIqnqk3$fQZ5ygR6mRIScfTf-GnO4kX9nDVu5NP-u68pKAf$yPRImpPs5TVTLyKb8NwBc-tYCeDY-4wO$72lylnT$v4Z46y9Q9yYAbT-WruQZY6xXfWBW7cPFZa5-WQk8BY474KtZuJ58TOn5646Kg$UQqftnR5YssMfWTtTa5V9xVQGhYzgT4ZbO$9QJhS5Y-D5Z3GWT8nIDmRe68qH+Pm4kDQyS01u9Uh-TVUq-CP25k0S5TpNU-sBQ2-v$0uRqSnq5333h8TLG2SzoTbTYl1+P0NnvO9$pq5PBP4QLfFT++4b5ALYQ0W6AmrLrfDlwVevdK2lushmhzDOf+BLpULhDtwZmvCXfpc-PZfQUAvdW-XRrerCx8c8ZAbpG1jbySqQs2Wbma1e2Ty8wv1Af5jy2L4+DkzGPRpo8fq8SDY9W2u2tVURv8ydBOAz2-VtboRDUfWAfp7ZKHQEQ1vsEx5L5jA-pzuvx4M5b1pjYez1bGMR73+UOxo2VbGM04PQLL9k5tvcTB7wPTAuMTFqyA+EFwJPTnQLbUTZxDlTmUgNFbRemBWfHScO8RvPVZ7wfywOd2VbJPgVPCTAu2Qnmo075u7d5dz2Vv2AOwy1RAKy-rAo0Z5weRT16xqGjAGx3Lu-dJfy-xASxSaYdth++0lWt$6+TWVeQD6C0wj4-K5oR25lxxMOy1OnCFyEl$9kx7nOHLThplc7CEpnRy5Hu1bB0W50XVWyW45Rg$7Pfnn5dVyFqmVwTDwe6kkuEmzVDpd9xtTd-BlInUEJY4buZaYlST5x2NnBgGNkZDVVZLATDup4fC4AzxDUxKs-ael-qWx2eeKS$bGvXVlRn0QBkE-0BaAF20h9Kk9J8ExAWZlJyl$Lxrl6Vu-jhyClruYfYB5pN$RmuRb6lwBc9F-Ydh6xo6s$9N6np31aCuPS6K7qI5wU5M1lTffpUzEpU5MIlkVmORUV+QtUM6wqq$9mn5dZPp3LqupNvxCPPleWJqQ2-KM7m5vSCVqLvbsj$E+qSla6Zv85gdtaqJflqfpE5x4xEQenjPfpX1lp8+ycmLVbvkOfxDd2Vb-nfTPspyDDzJIZ5FvolNSyWJ5gZWOv7STAxWTmfK0DpNvtxsZONnJm9F0VRRlfU3QvVc-jyspPpNyT57q$LaVb8BOY9XVKl6qHxuHL8fxORErKEyqY+1bmB8Jht5Ax5Z+-UOCF$YfDuE8GT7W-E5X40VBOFQ7OQq6jLGVEJ5NZACvbXnhLwT7nCN4gd1ups$-KRtP4PNOa7hBN7-K-aFIKf$C6OdQuP3EzLslsrfwvyO5ZlVnCtIOnvjVg3EcjBd8JPISOAPy$94cX2u6bOy$mAWMzRL4QTZF5jQ$x8SKwl4ePMD6l4WmWnSA03EmJjWTz4YnlTDEWcy+CR4HvTAKBhIy-LQ2Ab3cuvg6QdISqLS6A9pGIMJsOPsbMTD5pkR3nVap-7cJMNkjAuSJ7gAOSE0tYJSCDqSlARMDkjgsI2IbLcngk1nFnuOQWmqyM3RyKdyJzgKqEXWRhKduasTzq9ggeJoQaJbbl6zgvZKdlBnZ8CqTgsOJ9UjqLg8cTXEU$FD2-ugrTvlCm4MWdq4lUcI7zRHM1wOLSaA6pPHNwEjUgfoAsXsOjSOaJrgPVGXsOnTsDOIgPV7XgQHTgxJZMjv8x7Q-51uuPM3VSXc0O5dyJBCVOkg5NJM8IOqgUcsxgn4gWWJzZeLyMUNargWov$Ccd4Y-2rWBasgYV2XWcRZ1MA7lRv58FpE$Ik49lzcFLFPhPSuOlg0V1chzjPsWoEMqVOlqzMWWdaG6qLupsORWk3Oz8qOf81CQ1d68909I-Ur3pfg$+Jl$A3Ucy6U22ScgBqC8rsRNs7O5M7It8Gf6ns7OZC8It8sQ6AW8JWMdI0U9Q9Asx4ZMzO99XbO6LvJS8jcT44CHXDAKnH2Ih9vce4soOACKkA-Oc4rWXObbHILJA0yeEvr4mkqw3sOjqd0NLM0qPv+RRqgIODCnqlUrcyOEsNyC3cQJ3SR3Wd4DlQqLJIz4gWX3qMkqH9oEaEWWQSlwka9A8Ycdr4kMCqXMGCJ7C6sJTdmwgw-tmLUVozqkeUH2-92Ka4AF$zT$NMxKETGhRkjY4yyEToftTLnAPRkM6-5Ts5l5QZ4sjLd7Wt8GE4ZHxSEfez7fzwR+u4-lkLUVZxxGoKPjWPp8+EosgJNIHGSNLmST5yrqKahE-DGEwOulq$VBKJyxfPTTTe2mcac36KZcWxPVe3u0rPZf$TYMdxZtfS0u+93xlfjTWhcPY8fBIW535sNq3A5T+T7Q0rLhfPl6L9zUWTTKvZTpLJumfPPu51ZjvfPuDlJ5Z1SNhgTmTUuSz2-yZJPesxgUrPGZx1wEMSkZxs5R5xTjD-TTW55yBTThy8+VRaTRW1cnyxrfUTLKxo6BCTf2W0RD-Ya0zSc3L+QRR1U5pPuAcBNwRsBja-TLAwRR1sflu1JTn+wRJELTf5x-QX+yRFY5QYzxWx6X3TsBfTleL5Q7+0K4Z-v$EKmo-fBGw18oyw9PQQmW2l6VtMZTWUXTtkF5PbCknyQXTTTkI9Q9KlXUTN5PVa1fHo$frGj-HTV0x+rTgSWqW0Ia-T6QR+rT4KP5NYKYU$QkfpW93Y8zdmeGbK4Kevfw$x5fW4Z9Wl$lodWN6n$ARnyJKMtlVy3B5q3gY-197-I-LBl6Rk0zg7TKXH-HMDokz3kxB+JTwYZDRg1hoPZp5AY7IVfL1S+fbTqWlBVdWfcphC-Z2yu-5QCQs+NP06jD95TZx-T$P$TyxPLx0qB6LWy2M29UTNyEXhsqBX2OfuflDq8nAKUPQMxefG-QTbTT5ookZTU9eTKwL3fZpGJOnMQ1TL3h$tOJ+n30uTq$TTLhVGYflxYRkt03m4RfoQuRzsFcFXYI5f3D9Tpm3rN4665amIpTTxwwNWTT"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-out-s: jhaCUs5/0RRPUbmJOnj/rA==$/eyRnQQUGnop/cVcXnIfDg==\r\nset-cookie: cf_clearance=IjRXG4nt88spJDJ4su2MPskB5EnTLezYour_Wrra8IU-1770420732-1.2.1.1-JgWdkDtZTxJ5VUNR6gj4EW1ShRZ6wKL_0gYSuPGY421zTIs.eXRamWzystn1HAfAfdO7hVb0.yXxbfJMun2V1NxGpq9Ziu4IFGeivMr4y8n51MSU0QeIu9yOOs5fH4hV2CyaphEt2BWX4tv9GIdwM.GTlwmK5iXgqnYnIFMPFywZz5B3Zk_v4QtvbjRV59y7dqHW_TH9eXvMRUNDeIqo9TTBXeL98zWFtWfW7jV8VbE; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=amlsecuritywallet.org; Expires=Sat, 06 Feb 2027 23:32:12 GMT\r\ntiming-allow-origin: https://check.amlsecuritywallet.org\r\ndate: Fri, 06 Feb 2026 23:32:12 GMT\r\ncontent-length: 0\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9c9e72097d995693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T18:49:44.792728Z","times_seen":17676519,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"check.amlsecuritywallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check.amlsecuritywallet.org/","fqdn":"check.amlsecuritywallet.org","domain":"amlsecuritywallet.org","tld":"org"},"ip":{"addr":"104.21.36.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-06T23:32:10.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlsecuritywallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 11:52:26 GMT","end":"Sun, 12 Apr 2026 12:51:07 GMT"},"fingerprint":{"sha1":"6F:44:56:62:73:6D:2C:8B:40:7D:F5:74:F7:A9:A7:68:17:21:7E:06","sha256":"3D:E6:A1:D1:94:DD:2F:AB:0E:4C:3A:1E:D0:16:26:69:53:1A:D3:D6:F4:5F:A8:79:77:E0:77:A6:CD:19:37:29"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: check.amlsecuritywallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Feb 2026 23:32:10 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Fri, 12 Dec 2025 05:17:33 GMT\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cpkVbkO53ReHByeZSsltWG8Y9Lu6ZBpdhAiDbfRCc%2FxPRx14Py0ckLEmoVdOIPRxNXwCcDhIV9o2lCmaDrqTt%2B8%2B0rsnyVhqwoeqn2wRyGrUIwIylLC6eF8%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c9e71fb9a8b5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40375,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (926), with CRLF line terminators","md5":"1ab5ae2858d339aa898d3b624e9b9213","sha1":"76db3e180a52aa1801461ae793672aa504c932e0","sha256":"4c0235d8adf2b547d9714c0edf5092d0099d2f3629f51dd78ada74527752a13e","sha512":"fd64ba575dcadb513b70660abe63e6bd85005ff9b602f51bad484dbea7bfdf0cede2de5f0ba7eda8b93dd0c35e11268018bb3abee803296fad4810cecb2c8385","ssdeep":"768:k1Ypyyy5HMH9t/DPDI+Ht8E0E3EoEdbqXwRVox/q:W6yN5sdNDPDPfgTox/q","tlshash":"0503a52422d2047a44b39176eb616b4dfea6c22be60bc34475dc1b6b2ff3c10c917b98","first_seen":"2026-02-06T23:32:33.863258Z","last_seen":"2026-02-06T23:32:33.863258Z","times_seen":1,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":18,"dns":1,"connect":1,"send":0,"wait":69,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"check.amlsecuritywallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://check.amlsecuritywallet.org/","date":"2026-02-06T23:32:10.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:26:32 GMT","end":"Tue, 21 Apr 2026 09:26:27 GMT"},"fingerprint":{"sha1":"90:9B:CE:CB:FE:F2:C6:A9:53:13:5D:52:B6:07:F4:B4:84:28:97:60","sha256":"61:49:94:E8:FB:D1:24:14:DF:C9:92:BE:60:84:A8:D8:37:E3:89:DC:42:7B:0A:64:D3:F2:32:FD:D0:93:4C:4B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check.amlsecuritywallet.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Fri, 06 Feb 2026 23:32:10 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::rz58t-1770420364805-089dcfc53abf\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 365\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=484gLtKRIMmO1RjnQsAIa1KZ5w93A9De3p130AwTZDXXiHzqJrNfEjN8%2BzO%2BRwy0SzZFrqa4nJRQlCp3EpkP8%2BTXT4rnI93umu2G%2Bf9OXpc%3D\"}]}\r\ncf-ray: 9c9e71fdbb310b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T18:49:44.792728Z","times_seen":17676519,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":22,"dns":1,"connect":1,"send":0,"wait":8,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/lucide@latest","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://check.amlsecuritywallet.org/","date":"2026-02-06T23:32:10.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 07:56:49 GMT","end":"Sat, 21 Mar 2026 08:56:47 GMT"},"fingerprint":{"sha1":"26:50:C2:17:0A:FF:C4:D7:84:D7:E7:28:A7:58:4B:CD:0A:7B:2A:79","sha256":"93:15:E6:80:68:21:48:A6:B0:14:8D:F2:4E:A3:50:33:6C:01:5B:84:8D:F6:75:2E:09:A4:79:DD:37:13:FA:B0"}}},"request":{"raw":"GET /lucide@latest HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check.amlsecuritywallet.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Fri, 06 Feb 2026 23:32:10 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 53\r\ncf-ray: 9c9e71fdcf4456a8-OSL\r\nlocation: /lucide@0.563.0/dist/umd/lucide.min.js\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":387755,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-02T18:49:44.792728Z","times_seen":17676519,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":30,"dns":1,"connect":4,"send":0,"wait":47,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.iconify.design/noto:christmas-tree.svg","fqdn":"api.iconify.design","domain":"iconify.design","tld":"design"},"ip":{"addr":"172.67.71.159","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check.amlsecuritywallet.org/","date":"2026-02-06T23:32:10.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"iconify.design","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 03:00:19 GMT","end":"Sun, 26 Apr 2026 04:00:16 GMT"},"fingerprint":{"sha1":"06:96:2B:A7:16:04:70:E2:E8:5F:1B:69:8A:D8:D3:23:53:25:70:1E","sha256":"25:46:C3:C0:80:39:3A:62:7D:18:59:B4:5C:82:98:75:26:A1:D5:60:A1:A9:C5:5F:9D:53:92:8E:60:8A:F3:FC"}}},"request":{"raw":"GET /noto:christmas-tree.svg HTTP/1.1\r\nHost: api.iconify.design\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check.amlsecuritywallet.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Feb 2026 23:32:10 GMT\r\ncontent-type: image/svg+xml; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Accept-Encoding\r\naccess-control-max-age: 86400\r\ncross-origin-resource-policy: cross-origin\r\ncache-control: public, max-age=604800, min-refresh=604800, immutable\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b9qpBfPtgFpUMn00Y%2BtfcAuS%2Bh9fBiuIotDwtV8AUlknM8%2FRAEXXxe8NO96AmmtUs1XXmxhYaBp2wIw%2B7%2B%2BakxmdA6%2FJibmnw45eCgrR7Q%3D%3D\"}]}\r\nlast-modified: Fri, 06 Feb 2026 22:23:11 GMT\r\nage: 4139\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9c9e71fdcf8b712e-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8305,"size_decoded":0,"mime_type":"image/svg+xml; charset=utf-8","magic":"SVG Scalable Vector Graphics image","md5":"70f4e7c4431ff014d8b3c6ca0bb17d05","sha1":"8699a457932220f51b691ac3d3f24fb2302414f4","sha256":"d9685db67b4b2ff26dc1262b51a7633ae1084a494c1a4db32c5e91c68a904cc3","sha512":"489e476f11f841d8da882eee6bb5f285de9245fb8e68bdfa32d494d300e4c38b7b5a349542039e9cb15d587445bffb5afb677cf4938c30eb1a14cb9f4e8fb910","ssdeep":"192:3DCSGscW4GgXo1NvvHv8yohxmgH08po/6Ch:3DCSGfY1NXTojpy/6O","tlshash":"e30232d24721abb426478a68ce65a1e23f0fb4fd9b9913e822b3d731f5457c2d84493c","first_seen":"2026-02-06T23:30:01.079225Z","last_seen":"2026-02-06T23:32:33.865821Z","times_seen":2,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":27,"dns":9,"connect":1,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://check.amlsecuritywallet.org/","date":"2026-02-06T23:32:10.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 08:26:32 GMT","end":"Tue, 21 Apr 2026 09:26:27 GMT"},"fingerprint":{"sha1":"90:9B:CE:CB:FE:F2:C6:A9:53:13:5D:52:B6:07:F4:B4:84:28:97:60","sha256":"61:49:94:E8:FB:D1:24:14:DF:C9:92:BE:60:84:A8:D8:37:E3:89:DC:42:7B:0A:64:D3:F2:32:FD:D0:93:4C:4B"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://check.amlsecuritywallet.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Feb 2026 23:32:10 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::gv5lr-1767495562922-401ec0c56245\r\nlast-modified: Sun, 04 Jan 2026 02:59:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 2925167\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AwmgTaTfboPcEF27pYvQbz7mBQiFFUsOoAuUnyE0gfpQ6mcsUCBcWBM%2Frc%2FqhGqyYKAIXOBFtVzTtHtSWN2fCrWDhHJ9uo1t3mr4dZSgeLM%3D\"}]}\r\ncf-ray: 9c9e71fddb3e0b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-08-02T18:45:10.803919Z","times_seen":47823,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/lucide@0.563.0/dist/umd/lucide.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://check.amlsecuritywallet.org/","date":"2026-02-06T23:32:10.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 07:56:49 GMT","end":"Sat, 21 Mar 2026 08:56:47 GMT"},"fingerprint":{"sha1":"26:50:C2:17:0A:FF:C4:D7:84:D7:E7:28:A7:58:4B:CD:0A:7B:2A:79","sha256":"93:15:E6:80:68:21:48:A6:B0:14:8D:F2:4E:A3:50:33:6C:01:5B:84:8D:F6:75:2E:09:A4:79:DD:37:13:FA:B0"}}},"request":{"raw":"GET /lucide@0.563.0/dist/umd/lucide.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://check.amlsecuritywallet.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 06 Feb 2026 23:32:10 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: 9c9e71fe6a4556bd-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 23868\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 06 Feb 2027 23:32:10 GMT\r\nlast-modified: Fri, 23 Jan 2026 10:45:10 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:4NbtzGcWuQIiYtnr4L4DykLiMJ3saPi16fKurHvDyaU=:\r\nfly-request-id: 01KFN7AEXD1A018WAAFPNAWEDQ-arn\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":387755,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65368)","md5":"4d5db397849161e23ada0b123b2ce8db","sha1":"87c08639683d385e251b531c79ab1682416897bc","sha256":"e0d6edcc6716b9022262d9ebe0be03ca42e2309dec68f8b5e9f2aeac7bc3c9a5","sha512":"c6c22acd8525155f568639ab2a276a74c7abfb1fa4642ae9f2738472a2a82de06aeab1046eed43e4f05f376fe1e3237f398289bd5719df36de2b6fdec2b4f1a4","ssdeep":"3072:UiwYzPyQS4pJ9HtBIVAlzhjqqoFoTsnE61yPO4LLexyjimLaXthxvyjg0T8Bbz6Y:tb63gvolmLKajg0TMbz6Y","tlshash":"a28462af8fcd269f4c56e7881a4bb0501fed93bd331a8c12768e963bc252416dcb3651","first_seen":"2026-01-23T10:55:33.448568Z","last_seen":"2026-07-14T16:01:55.381026Z","times_seen":1975,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":26,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check.amlsecuritywallet.org/cdn-cgi/challenge-platform/h/b/scripts/jsd/d251aa49a8a3/main.js?","fqdn":"check.amlsecuritywallet.org","domain":"amlsecuritywallet.org","tld":"org"},"ip":{"addr":"104.21.36.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://check.amlsecuritywallet.org/","date":"2026-02-06T23:32:12.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlsecuritywallet.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 11:52:26 GMT","end":"Sun, 12 Apr 2026 12:51:07 GMT"},"fingerprint":{"sha1":"6F:44:56:62:73:6D:2C:8B:40:7D:F5:74:F7:A9:A7:68:17:21:7E:06","sha256":"3D:E6:A1:D1:94:DD:2F:AB:0E:4C:3A:1E:D0:16:26:69:53:1A:D3:D6:F4:5F:A8:79:77:E0:77:A6:CD:19:37:29"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/d251aa49a8a3/main.js? HTTP/1.1\r\nHost: check.amlsecuritywallet.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ndate: Fri, 06 Feb 2026 23:32:12 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9c9e7208bd945693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20846,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (20846), with no line terminators","md5":"3bd58e84b37c31190b45501c9674fcf5","sha1":"0fa470786161ed47f3a6e37d4670acc6a23f2ada","sha256":"437e8b93b365aacff468e1e56b241cd64439c4116532bde1552e962cd7a5678c","sha512":"ada21498beaf011309b2a7413653544dad47254f239d18c1753e08b1bca7cd319f06250fa2582b401162af420db6dad664511eb8961b872272629bf6d66c81da","ssdeep":"384:YNkGVBSwE7ATX2NGtMY2ncsw9TQC2y3Ag0nBcmPXJi2S5HL9npO2t:YmKE7AS1Y2ncJ9TQM3ARnBcmPXor9np","tlshash":"4092c7c93dc5b2755666a0f9252f74cfaa6afc86381e0806c318dcf4bc31ba85497d6c","first_seen":"2026-02-06T22:48:36.912081Z","last_seen":"2026-02-06T23:32:33.869455Z","times_seen":4,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-06","alert":"Sinkholed","trigger":"check.amlsecuritywallet.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
