{"report_id":"28e43a88-9021-4734-8b19-367ea79042cb","version":6,"status":"done","tags":[],"date":"2025-07-07T04:36:36Z","url":{"schema":"https","addr":"amlchecksusdt.com/","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":0,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"final":{"url":{"schema":"https","addr":"amlchecksusdt.com/","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"title":"AML Check - The full-fledged crypto compliance solution"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-15T04:36:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"free-check-aml.com","ip":{"addr":"172.67.139.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":398,"sent_data":441,"comment":"","tags":null,"fingerprints":null},{"fqdn":"amlchecksusdt.com","ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"domain_registered":"2025-06-20","domain_rank":0,"first_seen":"2025-07-07T04:36:36.883453Z","last_seen":"2025-07-07T04:36:36.883453Z","alert_count":62,"request_count":62,"received_data":895202,"sent_data":32420,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":439,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-07-02T15:20:57.840413Z","alert_count":0,"request_count":1,"received_data":643545,"sent_data":432,"comment":"","tags":null,"fingerprints":null},{"fqdn":"i.ibb.co","ip":{"addr":"45.43.142.7","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"domain_registered":"2010-07-20","domain_rank":13485,"first_seen":"2018-11-25T10:13:48Z","last_seen":"2025-07-06T13:45:43.584102Z","alert_count":0,"request_count":2,"received_data":92961,"sent_data":878,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":8877,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-07-02T15:13:13.4762Z","alert_count":0,"request_count":2,"received_data":41458,"sent_data":997,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"amlchecksusdt.com/","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":true,"md5":"f156a36be7b1c824f754f6cf82aa589c","sha1":"bf5d61c3b2780a8f24443a4596b7ea77248eb95b","sha256":"1b9f2347babd636c7e7f952951a9ba52be7c698c167bff20a31be0cb4d5eef7e","sha512":"430dab990bb4c76d0a39e38c1c0c4aca487a5da3fee9156fc86de75a844b828ca0a7fb8ff7e924eb5b98d6897c11a9df21e695778222ffae0e541ab81d41c822","ssdeep":"","tlshash":"7001d072655a0c98090775058b854a0c3df1d97f3b199354b83c1fba2f93425896eafb","size":821,"data":"","first_seen":"2025-07-07T04:36:43.861738Z","last_seen":"2025-07-07T04:36:43.861738Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd54a8518330436e819c3427f486978e","sha1":"9cbc6b2a9797e1098dea676e91ae5a546db7057c","sha256":"46c1f7d7cc3a19c53c3adfe8549c20ea30af0325a16723a35be2a5e35a52ac31","sha512":"2c92fa6d87e43fed1f5798b90e7aa66639c7833b2ecb97b05ae10d331905b0b31e9fd43889569ca3d111618674d86f90f35454c1e15ba8e9b197c18f12b90843","ssdeep":"","tlshash":"43f03005f16a2b9b207f60bd0b1fe58aa12a0d074b1fb595b5f260171c98cc775cbd28","size":440,"data":"","first_seen":"2025-07-07T04:36:43.862745Z","last_seen":"2025-07-07T04:36:43.862745Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":true,"md5":"3cb669178e00dda393b70fd7e54547f7","sha1":"a9a79fbf4dcc79354bc5302c22bf6bd346b5b395","sha256":"0f8206ce61aca627863369f6ccf3ee46b7927834b2c251cd14d2c87a6a327559","sha512":"f74709ed3a23c005634cd6e00a276452f59550701e2f2cc5b2e9e647151bcd6f1ef4a2188159e56ff67749a8eaa882eb0e77a11ca846e7db09e17b5e69a39ca6","ssdeep":"","tlshash":"7a01f434736c422ae725cd659f681fae363434475048609e39dcd81d33c99b01ef36e4","size":658,"data":"","first_seen":"2025-07-07T04:36:43.863797Z","last_seen":"2025-07-07T04:36:43.863797Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/services-icon4.png","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/services-icon4.png HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 3086\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Wed, 18 Jun 2025 12:15:01 GMT\r\nETag: W/\"c0e-19782f6c988\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3086,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 62 x 60, 8-bit/color RGBA, non-interlaced","md5":"6cfe46d382e7be5a375d3a5abe22e9f8","sha1":"314d9d4e8498ba69e904013ec969bd82dd3b21dd","sha256":"2b1185803fd5232a93f6bce7e427e49739ff7c9395eb69818201de0d709b4b26","sha512":"9b8212f1e63bce1bf34fc253265316e83c1564bd9584e156307750fb73b7819967aed1060e1f296a3ed32c291f3a9239396d31517f1699650ec30cb7c38efbfa","ssdeep":"","tlshash":"51515db2b39d153f6ff917298cdce001140a76c341d5e85e2eb337a914865d28b12841","first_seen":"2025-06-01T13:01:52.416944Z","last_seen":"2026-07-07T12:36:49.715857Z","times_seen":73,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":52,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/44-DcUgPKtf.webp","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:16.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/44-DcUgPKtf.webp HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:16 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nContent-Security-Policy: default-src 'none'\r\nX-Content-Type-Options: nosniff\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":231,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"29122e8bc7a493b4e1cb8431128c1d3c","sha1":"3460f45c1cff085582ac1aa1f58a2cf424c95750","sha256":"6af4f550bc851d74abb9ff588e7463401e7e3b4be191c9750002d780549a1fab","sha512":"565d66f296e252b4f795fd02294d0d1ff83a6616ec4777774b2a6ffbaada55856f84578893295429f640161d0ed518d1e35d5381f63b90500c203c17283c9217","ssdeep":"","tlshash":"93d0a78f15002951aa7292802ad0759d3c5b3a596bd249745787d017ecd5a2bcecb4ac","first_seen":"2025-07-07T04:36:43.810658Z","last_seen":"2025-07-07T04:36:43.810658Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/site-opened","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:17.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"POST /site-opened HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amlchecksusdt.com/\r\nContent-Type: application/json\r\nContent-Length: 96\r\nOrigin: https://amlchecksusdt.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:17 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 2\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nETag: W/\"2-nOO9QiTIwXgNtWtBJezz8kv3SLc\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"e0aa021e21dddbd6d8cecec71e9cf564","sha1":"9ce3bd4224c8c1780db56b4125ecf3f24bf748b7","sha256":"565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3","sha512":"900110c951560eff857b440e89cc29f529416e0e3b3d7f0ad51651bfdbd8025b91768c5ed7db5352d1a5523354ce06ced2c42047e33a3e958a1bba5f742db874","ssdeep":"","tlshash":"c710000000000000000000030000000030000000000000000c000000c0000000000000","first_seen":"2023-03-09T09:04:49Z","last_seen":"2026-07-28T09:55:10.189986Z","times_seen":356331,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/bootstrap.min.css","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/bootstrap.min.css HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:15 GMT\r\nContent-Type: text/css; charset=utf-8\r\nContent-Length: 232803\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Wed, 18 Jun 2025 12:14:53 GMT\r\nETag: W/\"38d63-19782f6aa48\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":232803,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"a549af2a81cd9900ee897d8bc9c4b5e9","sha1":"c5ac1dee961cb59a045256ec203f69e317872f7c","sha256":"3c8f27e6009ccfd710a905e6dcf12d0ee3c6f2ac7da05b0572d3e0d12e736fc8","sha512":"8e74ae0384acd8f9248a448e2ed62cf0195821e7882b587df6dcb861fbd13c0973af7efbbebdc25c36fbb1bede1040588c3b5c623f808c11f714bbf9b9226e5e","ssdeep":"1536:O9YnIWbn98fdRfvO5wlP77k9P3EV98IsYRElV6V6pz600I41r:RnIw98fbV986I6V6pz600I41r","tlshash":"dc3482d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-07-28T09:06:59.317759Z","times_seen":25727,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/script-Dut2HEAs.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/script-Dut2HEAs.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:15 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nContent-Security-Policy: default-src 'none'\r\nX-Content-Type-Options: nosniff\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T09:56:18.908735Z","times_seen":17577185,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":40,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/LSW3.png","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/LSW3.png HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 1545\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Wed, 18 Jun 2025 12:14:58 GMT\r\nETag: W/\"609-19782f6bdd0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1545,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 33 x 33, 8-bit/color RGBA, non-interlaced","md5":"754f316a6b2d4ccb5c9a50c4540e2ef0","sha1":"58c71c1f6950177e9aa0dc8ce3e34daa89fa4adc","sha256":"7f7fcf0d2f06440b99811706d96fa4d8722b95961565024231e4d84ffb3caa81","sha512":"759b1d7ef5a957bd5c36a2b005aa53f3dd571bf5a53bed682ed4e84c05693b452b943b6ac1bc3f0d487af48c0ba77416c492875dd8c9db0bbd1dee9358e5502b","ssdeep":"","tlshash":"ac312c8df243d4f5cc77ad7b00584b2c884685c64f5878152515d3170d537ce4f65767","first_seen":"2025-06-01T13:01:52.396786Z","last_seen":"2026-07-07T12:36:49.727843Z","times_seen":72,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":209,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/services-icon.png","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/services-icon.png HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 3493\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Wed, 18 Jun 2025 12:15:00 GMT\r\nETag: W/\"da5-19782f6c5a0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3493,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 62 x 60, 8-bit/color RGBA, non-interlaced","md5":"9d0d2c7e02081b3f637d3e90a0fdc56e","sha1":"4178020e899c48f9e6169ae8e5822b47eb97d8b8","sha256":"afd7d95d9a9de5a8cbb0d6afac20d048cfe002d4d066031e8dfe96c650b82f51","sha512":"7fb95943398f91a552aa47309eeab60377a30923383bbccc5703e98c07526c3de32ad2ef2a549aaf9f76d10d6d6c4a0b051970ef1cfd3cc388469fedfaa6163d","ssdeep":"","tlshash":"55714ad31e5fb85e80697a83620b4cd5ce9dbe8c0a0d2ac75d7b9ae05147d82e210a77","first_seen":"2025-06-01T13:01:52.417823Z","last_seen":"2026-07-07T12:36:49.671433Z","times_seen":72,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-07-07T04:36:15.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:15 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: public, max-age=0\r\nLast-Modified: Tue, 24 Jun 2025 13:53:17 GMT\r\nETag: W/\"2ea25-197a236ec0d\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":191013,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (23853)","md5":"2fec7e804c5df2542000536aec8298a7","sha1":"2ecb8f55a54d477f89b8420ff6c5221ec4b72802","sha256":"d55e7759144d5b56ee0f05cb891984c5fe14138467f88bd3a8449eed2fa78251","sha512":"e713572ee3796df41e0a0f1264e4d5444bac91941d376070c161d3fa1181b360cb824b638026be67aa81bc573a6505ab8485c121acd364a6d41bb6598a47bd36","ssdeep":"3072:/13NMAs4ilLicTqc1aMAeMdc87YLH6U76lZQ2J7p1neEkphgU:IAs4ilWq1aMbMdkHGY2ljA","tlshash":"0814ae1125892573b6a352e51675fb8936d9c407ee234c98baecd3088fc7ec96cb7188","first_seen":"2025-07-07T04:36:43.814602Z","last_seen":"2025-07-07T04:36:43.814602Z","times_seen":1,"resource_available":false,"data":null}},"time_used":517,"timings":{"blocked":183,"dns":102,"connect":36,"send":0,"wait":74,"receive":75,"ssl":43},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/swiper-bundle.min.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/swiper-bundle.min.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:15 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nContent-Security-Policy: default-src 'none'\r\nX-Content-Type-Options: nosniff\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T09:56:18.908735Z","times_seen":17577185,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/slide3.png","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/slide3.png HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:16 GMT\r\nContent-Type: image/png\r\nContent-Length: 6186\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Wed, 18 Jun 2025 12:15:03 GMT\r\nETag: W/\"182a-19782f6d158\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6186,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 100, 8-bit/color RGBA, non-interlaced","md5":"bb7ad1ccc1c268e0cbe83e30660f007a","sha1":"3e27ebb92b3ba395fb468aba901830a566fe91a8","sha256":"13977a88413e28eea22d7e6a04f3bb6c4a1ee7ca0bbe669a1ef6d4be37603226","sha512":"e0c576ea5970ece59e25d4d8e0d7437fc8265bf9ffb35064a1a566092905c7914f7745a77615cd06937ec4dc9e6a1301ab2a8d14ef34c7590c366fe03159a85e","ssdeep":"192:zSlFSi+fXfpU0H+O9XPgqesCLEn9rykfC01SxYEVSnZ19QHc:miG0eOFgCCLEnRfx1YVSZ19Gc","tlshash":"eed18ff84f25a4e508cc5f84993a2d0be73e493c44fdd42a6da15bd889f481edb126d2","first_seen":"2025-06-01T13:01:52.429335Z","last_seen":"2026-07-07T12:36:49.722437Z","times_seen":74,"resource_available":false,"data":null}},"time_used":474,"timings":{"blocked":450,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/main.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/main.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:15 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nContent-Security-Policy: default-src 'none'\r\nX-Content-Type-Options: nosniff\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T09:56:18.908735Z","times_seen":17577185,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/shield.png","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/shield.png HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 684\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Wed, 18 Jun 2025 12:15:01 GMT\r\nETag: W/\"2ac-19782f6c988\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":684,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 31 x 30, 8-bit/color RGBA, non-interlaced","md5":"d61f1be61fd72d2fd74a0e0be9e1bd26","sha1":"ae25d0a6254c08adb998328a53cabaa2be1d8c7f","sha256":"574daae295145dcfcc088057fe691891ef18512afd4382ff302bf25f67d51021","sha512":"c9963c9423adf63d4fab097da28048f5639e4dc30caecfa64b4b0a4ac525765296584797a1d8041303908cac025e7cd0ec3d3a0accf6ff9f670f1cc1007276e3","ssdeep":"","tlshash":"af01d3e827c420632b28283d364f93427d23ff8ee090030d8c53c8ac9403c090d45f6b","first_seen":"2025-06-01T13:01:52.391787Z","last_seen":"2026-07-07T12:36:49.669013Z","times_seen":72,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":190,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/slide8.png","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/slide8.png HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:16 GMT\r\nContent-Type: image/png\r\nContent-Length: 8649\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Wed, 18 Jun 2025 12:15:04 GMT\r\nETag: W/\"21c9-19782f6d540\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8649,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 100, 8-bit/color RGBA, non-interlaced","md5":"f73013855ccde4d3c144d8530cec3d1a","sha1":"3648f9205b5eac29542a3d76b72d092831382a1d","sha256":"a24a8365b1f826d70ff497de45334240e430af3eabeaf85b8f724ae5f67159d2","sha512":"9404b0e7ee8ae29f08e6a099842bca12b9101a8c573b03683d7b05087fe33db38871fbc56592a479367ef923149bcc5d39d90c198cf1837105b26365f870ad6a","ssdeep":"192:zSrJxxWnHbDDJoAGZs4M84tmX1LDUvOHARVSE1zquJwCVK9hPOo6Tz:mNzWnHfXH4N00pQAARDqawCVAFOo6Tz","tlshash":"4f029ea6680ede46e8d5044aa427a26260fd395c4d20eb32a2af2bf0d9d1134c561fed","first_seen":"2025-06-01T13:01:52.424008Z","last_seen":"2026-07-07T12:36:49.7179Z","times_seen":74,"resource_available":false,"data":null}},"time_used":495,"timings":{"blocked":457,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/navbar-img.png","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/navbar-img.png HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 98172\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Wed, 18 Jun 2025 12:14:59 GMT\r\nETag: W/\"17f7c-19782f6c1b8\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":98172,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 840 x 520, 8-bit/color RGBA, non-interlaced","md5":"bb60165383a5edd986e842fba84cadf1","sha1":"da8b01be32e9ea40d0a4f56f79dd4bf78c293645","sha256":"ea364226bb2428fb2b15205eb59cad8eff37c01490dd8e86d58d472a1660efc3","sha512":"e7998b01f9c4af21d18990bc8908741424b588e59cd651f14c513c88b2af6710746f1ac99fca94efcc26dd06833f11270b5a4a693c856b1154eaef866c0b6924","ssdeep":"1536:hQ88siBceemoQ1z31NRQvkE4H23JYOQXpo5SdEiwKnWS4sUEFRqEv:hYsiBce6QxDRQvT5OJiibnL75rv","tlshash":"bfa3022132c7c782dbaf347a9bd1370e2f7666086336fc4021bdb2ab7c9252d5918765","first_seen":"2025-06-01T13:01:52.374211Z","last_seen":"2026-07-07T12:36:49.702251Z","times_seen":74,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":192,"dns":0,"connect":0,"send":0,"wait":24,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/all.min.css","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/all.min.css HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:15 GMT\r\nContent-Type: text/css; charset=utf-8\r\nContent-Length: 101784\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Wed, 18 Jun 2025 12:14:50 GMT\r\nETag: W/\"18d98-19782f69e90\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":101784,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65317)","md5":"6cb5a85b30082e3d59d7e371e002ce8d","sha1":"0c639634f474b4601a7937f440096185f3a9d8d3","sha256":"01b035efb5dfa529c512f82962ed633328222da6f33c224244806d4798c67349","sha512":"c61e8efc2910a0f3960dd6130ea79174f0957754a9bc203d5d77149d94b616624da75728005cefb4237d0666a613ee1a1caf32c941d44827091e05e5a13c93d8","ssdeep":"1536:4fMCMPMCMjMCM4MCMwMCM3spL70pgbPMfjSFbTyMGu3prfZCC:070pgMGFvyMGu3pfZCC","tlshash":"23a3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-04-06T20:32:18Z","last_seen":"2026-07-27T13:19:31.037217Z","times_seen":5593,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":1,"connect":23,"send":0,"wait":82,"receive":49,"ssl":43},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/okx.png","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/okx.png HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 391\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Wed, 18 Jun 2025 12:15:00 GMT\r\nETag: W/\"187-19782f6c5a0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":391,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 21, 8-bit/color RGBA, non-interlaced","md5":"407cc8edc023a59938b48b84702241e6","sha1":"9bbdffb0a7592cdc27af353108a3e69153d30448","sha256":"f1f6560268230bad18794ccd48be54d8739f6986ef58399c19b24421a74c4e70","sha512":"c0ddccda6e1048ffad3a1b6288cbaf29460963ccbc9abf33f8e4bf8be1136a2d9c89819d7079593d16d320a8e72181d1b68aa54fca883298e518372247a1e0a7","ssdeep":"","tlshash":"39e0f1e12d00107d806d1e5f70f564e1f13f2a2b84411c0d1eb533243121824df12211","first_seen":"2025-06-01T13:01:52.372397Z","last_seen":"2026-07-07T12:36:49.71412Z","times_seen":74,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":33,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/icon-login.png","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/icon-login.png HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 304\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Wed, 18 Jun 2025 12:14:56 GMT\r\nETag: W/\"130-19782f6b600\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":304,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 17 x 17, 8-bit/color RGBA, non-interlaced","md5":"eb0c50b250e1cae284b3a625aba26c74","sha1":"c2125af73e88658d72e1645cb89f6d4fdaab00f5","sha256":"be59152dcf3fc367f92b6e48f153c77d542df43eb1c9d177efa90a8e2df95a0c","sha512":"1b47590622e67b2a8db09fefa69261abcfe5ef8602bafd2e887b4dde8b4edaa7e6f6171ef80f6fff56be0fc619b9ecd370dd76ba0a75c08b5511daede5c20c8a","ssdeep":"","tlshash":"fae07dcb6662ec6e4d29899390a11595e931a9d846001e09346a9405a81ec8852de5cb","first_seen":"2025-06-01T13:01:52.421468Z","last_seen":"2026-07-07T12:36:49.696051Z","times_seen":70,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":173,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/slide12.png","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/slide12.png HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:16 GMT\r\nContent-Type: image/png\r\nContent-Length: 3361\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Wed, 18 Jun 2025 12:15:02 GMT\r\nETag: W/\"d21-19782f6cd70\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3361,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 100, 8-bit/color RGBA, non-interlaced","md5":"e19b83669b9d4aced614ba8b899994a9","sha1":"3736260229cd30d4cb8ae806850d2d7184f001e2","sha256":"a9a590991c30d808b615d3ec1903e6db2122615cc7eb266a273cb8180fba2af7","sha512":"0744bf340a2f7369d9eda816c29510b11d3e3e7260a3b47aef029cf110e4a5d675b47ed8d6d940fb8954f1243f2d36f08bba27197a41f3570dac79339ca5b69f","ssdeep":"","tlshash":"2d614baa4951606f360daa9fc4dadaae144e084e6499ad74a9a63030f4da71220bc7d3","first_seen":"2025-06-01T13:01:52.410152Z","last_seen":"2026-07-07T12:36:49.709223Z","times_seen":74,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":402,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/style.css@4675e92176edf772f3e788f2292b2f52.css","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/style.css@4675e92176edf772f3e788f2292b2f52.css HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:15 GMT\r\nContent-Type: text/css; charset=utf-8\r\nContent-Length: 25883\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Wed, 18 Jun 2025 12:15:05 GMT\r\nETag: W/\"651b-19782f6d928\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25883,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"447f2eb8c76bf83e6b41886ae8b0bd06","sha1":"8626757d2037b44ac1be0b3747a3144229e8743c","sha256":"0a12b95376715d9ed8002f43e0e4bec9455c3c8983b730f4303dd929f0ecef3d","sha512":"d1afb651f43cff43ea6c2db5c751deb723e295113890d258e01a2cca5419a46297170ced72fb51e9bbb02c560ebe306fd98975ca7f626b8b3a8ff560ce005381","ssdeep":"384:/JGDdlPQs80vYUmEewAR6KQIKX9vbvGSvFdk:/JGDdlPQL0vYUmEewARLQIK9bvGSvFdk","tlshash":"b0c254072a292402e60b94543ee06f469a1ed053db0eddf72c62a5acd7cd18d1db3bde","first_seen":"2025-06-16T00:02:12.559923Z","last_seen":"2026-06-29T00:48:36.884554Z","times_seen":21,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/logo-trustpilot.png","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/logo-trustpilot.png HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 1864\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Wed, 18 Jun 2025 12:14:57 GMT\r\nETag: W/\"748-19782f6b9e8\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1864,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 117 x 30, 8-bit/color RGBA, non-interlaced","md5":"87ac191111810f4917347d918de5ab81","sha1":"5c9f9de5c9ddf72f58b9ff833f7a945d45c60a6c","sha256":"817668b6f09724724028aeff54f579ece3df2f0a3e8c83aa5e8aafda58418500","sha512":"f88d2eaecf2b99100063aac90059d31669d61545c5ab76b4266c3dcd13ed8833fb9cf050d5f4fcb5acc1229059ebe548779080852c57ed2d410ed2604dfed7fe","ssdeep":"","tlshash":"7731f98cedb1d4fd524458c7da5ff084a50eeb02628166af353074304460a0c49c6567","first_seen":"2025-06-01T13:01:52.378809Z","last_seen":"2026-07-07T12:36:49.711907Z","times_seen":71,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":191,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/services-icon2.png","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/services-icon2.png HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 3710\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Wed, 18 Jun 2025 12:15:00 GMT\r\nETag: W/\"e7e-19782f6c5a0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3710,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 62 x 60, 8-bit/color RGBA, non-interlaced","md5":"645a117700784560ed6213280eeb94b2","sha1":"587c97c6919344463d475f5633eb4ba7b95b82f0","sha256":"f3a4e6a09e09a8b0c967cf6ab0683f293f99bf5fb8bd276d4c4e23b567f8a7e6","sha512":"5f23fe8a74797f5bcf2ad549d276c929c978c38a6876169dba0c1c59f33aa30267691c1914adf9f70e78ecedb8756d0c9f997c1736133f61c8398250b533b22d","ssdeep":"","tlshash":"e9716edbf9f410e72918a6c7888138e5097231652aa32ae5f8517c0418376dfd19fde7","first_seen":"2025-06-01T13:01:52.404972Z","last_seen":"2026-07-07T12:36:49.728683Z","times_seen":73,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":54,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/binance.png","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/binance.png HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 1298\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Wed, 18 Jun 2025 12:14:53 GMT\r\nETag: W/\"512-19782f6aa48\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1298,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 140 x 29, 8-bit/color RGBA, non-interlaced","md5":"c04f9a2b330c9b720caf32bfb5654adc","sha1":"a9ff9b5da0e20626b28f642aec9e4644795149a8","sha256":"5239fa19f2816d305e7f7024057b5dbc3fb535eb06b5203be71b566aca75480c","sha512":"bf4345eb584ca6a8d6eab95841a9525499760d4d3e1caa181a9cbd3672e911f0bead2e04d30c5eb8d7dd1d82ce403c5cd6c0fd3ead935e2a819e9a3dd367dd03","ssdeep":"","tlshash":"f521f8907be5666f63520c3c4a925840ba21538ed76b539648c42078cf01fe80130d2e","first_seen":"2025-06-01T13:01:52.381186Z","last_seen":"2026-07-07T12:36:49.681046Z","times_seen":74,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/css2","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.701Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/css2 HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:15 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 7413\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Wed, 18 Jun 2025 12:14:54 GMT\r\nETag: W/\"1cf5-19782f6ae30\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7413,"size_decoded":0,"mime_type":"application/octet-stream","magic":"ASCII text","md5":"639332557266b2ecccb5b691764307d6","sha1":"26bed04e79a9ff2e1ad1d5cec5e4f62a0654a9c7","sha256":"5cb858cf871d21014027344d00b02a1c80d34f27657266c24943421cccf681fc","sha512":"4dc1fa7368e1f688fdf9c8afe7ee7953df93299daa477521cae26523740865d527e5da9405c8ce3c2944c6565a124886768c59a5aeeb7e9e8ac6713b60b9932e","ssdeep":"192:9pNQlq34+tDcpraDq3i0tljpEJ8q3RbtGi:bn25puz","tlshash":"9be1ab92402b9500ab471cc223cf7f266ece10996486d1bd6ffd1cda9cead76436871e","first_seen":"2025-06-02T11:44:32.816569Z","last_seen":"2025-08-19T13:50:20.847245Z","times_seen":57,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":14,"dns":1,"connect":43,"send":0,"wait":40,"receive":1,"ssl":63},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/33-1yWRRjf1.webp","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/33-1yWRRjf1.webp HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:15 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nContent-Security-Policy: default-src 'none'\r\nX-Content-Type-Options: nosniff\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":231,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"fb6b2b4a978798d3a4f758ae8803ea2b","sha1":"0d037e3243ca3452e8d0b8b19fdb76897846167d","sha256":"c1c10aa51ee3c1be91c328a1484524ab0be35001974d042692acdfafdd19fb18","sha512":"48e2228755c9cb4a95d502f0044674b74df9ae3f0aadcac5959f6f4092e7234cbc8346c525903ef31a0e73c987646caa919763367dd184b6b60784adb810961b","ssdeep":"","tlshash":"31d0978f10003900a23282802a80318938633a1962d249741397d013ecd0a1bcacf09c","first_seen":"2025-07-07T04:36:43.823959Z","last_seen":"2025-07-07T04:36:43.823959Z","times_seen":1,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":91,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/faq.png","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/faq.png HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 1738\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Wed, 18 Jun 2025 12:14:55 GMT\r\nETag: W/\"6ca-19782f6b218\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1738,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 34 x 34, 8-bit/color RGBA, non-interlaced","md5":"5d24b460799ddff1b0c5f23adf110469","sha1":"cf6778469e56d44617dbe9a8300750bda5e9672e","sha256":"9edf7e20a7dea0508861ce6962f0405b2deeb8ac0053da384674a8f288d5127c","sha512":"3cea1c4ab719bfdcdee8555ca63f560f82d1d22ba8fa6a8b8ab8cbfa033a7b0708fc252a23ca6768fcfaf6a696d3141440c1569a5f4d7b7bd94a7c31a344026e","ssdeep":"","tlshash":"b231e9dabb3575ff40c932fa71494611ac9b462e4724401a5d054beb3f940c88e3446f","first_seen":"2025-06-01T13:01:52.379687Z","last_seen":"2026-07-07T12:36:49.66802Z","times_seen":71,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":87,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/slide5.png","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/slide5.png HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:16 GMT\r\nContent-Type: image/png\r\nContent-Length: 10148\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Wed, 18 Jun 2025 12:15:04 GMT\r\nETag: W/\"27a4-19782f6d540\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10148,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 100, 8-bit/color RGBA, non-interlaced","md5":"03df1faee9acb7dce2fb5b3c063b8294","sha1":"b4e91703c0e07aee0b93c36431d14651101fb70c","sha256":"1ec389614a6dac80ed3342001e9d81432579260aec767c4164be9645688cbf5e","sha512":"b4b9b0bc5a44ec6d031a65df0ed4470a72668cd5a54403abe868676c9b32e911ba3b33172be11e7fdcad9db8fde3df24469e01151a73bbf50ba9bd240e961619","ssdeep":"192:zSMYelaGnppnMRaVBAPOaQpOLIhAlsdrYf3HFIO2B+l0yzGSS13nw0HD:m/elbppQaHCOELflsdrYf3Hv2glASwnR","tlshash":"ed22bf4b0c0dfc20e7f9b6dca6067bfa68ab15c8d8e75f116a4b816299986c3c743021","first_seen":"2025-06-01T13:01:52.430202Z","last_seen":"2026-07-07T12:36:49.713195Z","times_seen":74,"resource_available":false,"data":null}},"time_used":450,"timings":{"blocked":421,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/slide10.png","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/slide10.png HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:16 GMT\r\nContent-Type: image/png\r\nContent-Length: 11554\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Wed, 18 Jun 2025 12:15:02 GMT\r\nETag: W/\"2d22-19782f6cd70\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11554,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 100, 8-bit/color RGBA, non-interlaced","md5":"a9bb7b778f36bf5566e1790a135f9d49","sha1":"ce95149fcdf402c289f92c14fe30e13349ca784d","sha256":"ce77aaf2e13c1a1a29f763855dbd69d67e20b82fe3ba274336e7fc6599ad891d","sha512":"2edb3a871b6d15f745aa627e5bfd48d8b1d4267422183ff4001ed728e730385129fcfec5d89f195dd121dd35058fb5d2e242c1191b10e804406f77f33d9a5901","ssdeep":"192:zSqMAX44c3KkgwRNz+PXkXTsBy6bOwlfASRafMPD16hxR5I6hzNcDQRs2vd:mOXsaKU0XYrOwkfex695I6hiesid","tlshash":"6732bf03e769acb764079364b5363070fb0dadf66aa21611e50939dc8b1072f0f5ec9a","first_seen":"2025-06-01T13:01:52.393141Z","last_seen":"2026-07-07T12:36:49.69665Z","times_seen":74,"resource_available":false,"data":null}},"time_used":471,"timings":{"blocked":445,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/aos.css","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/aos.css HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:15 GMT\r\nContent-Type: text/css; charset=utf-8\r\nContent-Length: 26053\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Wed, 18 Jun 2025 12:14:50 GMT\r\nETag: W/\"65c5-19782f69e90\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26053,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (26053), with no line terminators","md5":"847da8fca8060ca1a70f976aab1210b9","sha1":"0557d37454b67f42f2cb101e57e5070fb1193570","sha256":"1aa8845fd06e475aefe733d4e55b36a92fcd487975049c8172341827ac9cc03e","sha512":"d5c2bbf1ad68fa1b7625c696ea0f0e5d8c2aa5ebfdfba1aa3a4cfdc6604df625148489dd2adc7020b19660e4a26ce2a32ec11d8f28d9bd80eafdc67035e6a4d3","ssdeep":"768:CMJihoCcZCOud8G8tKS65wqsZQ1G+dM2cl6iCRotsV84sxIKcv4g01UeEPEQEB4D:CMJihoCcZCOud8G8tKS65wqsZCG+dM25","tlshash":"f0c24b5a7a4cd100bf831b4762df2a0859347588e5301986be3f35ca2cd5ce6b973fa9","first_seen":"2023-04-05T07:18:45Z","last_seen":"2026-07-28T04:58:42.476353Z","times_seen":42351,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":1,"connect":26,"send":0,"wait":80,"receive":2,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/css2(1)","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/css2(1) HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:15 GMT\r\nContent-Type: application/octet-stream\r\nContent-Length: 2499\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Wed, 18 Jun 2025 12:14:55 GMT\r\nETag: W/\"9c3-19782f6b218\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2499,"size_decoded":0,"mime_type":"application/octet-stream","magic":"ASCII text","md5":"f4d9d0109810973a13ac3db01549685f","sha1":"59e8a807e6d28e33edb7f2954af47372e2d2d9f1","sha256":"86f058d46174cfc927fdbb0e6a245b819d56f881e5aef5bb146ccbc8f88776bb","sha512":"bf9222f8dc655c7ad7d87d97e40acf0a4e4f974dd97fb1b3a0422aea9a84457ba2cd820fa9a06142b1da3298e12d94e30ff03a2beb0bffabd2ed30fbd5a04809","ssdeep":"","tlshash":"cd51ab92442b8504ab471cd223cf7f266ece10856485d2bd7ffd1cd69cead66436870d","first_seen":"2025-05-30T11:58:25.297731Z","last_seen":"2025-08-19T13:30:27.009572Z","times_seen":457,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":42,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/slide13.png","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/slide13.png HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:16 GMT\r\nContent-Type: image/png\r\nContent-Length: 5319\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Wed, 18 Jun 2025 12:15:03 GMT\r\nETag: W/\"14c7-19782f6d158\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5319,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 100, 8-bit/color RGBA, non-interlaced","md5":"aea70862b5742c027509c09e402a07a7","sha1":"51199b1bfa3d268b5036f1b74f11a2182f19cb32","sha256":"eaa91b1c073b10ddc95c3c13a7b7696c6beaa91afe37574df0403ef83c7dea27","sha512":"270bc56da40075dad0a847659eabffa785d8f288023bce76a3406b17867fd56375b977c3b74ed68468273bfe6bcd8592772e308397c0a98c4faf2da60a96461f","ssdeep":"96:zSu+SFfnzCpQeLiEhf1aorlfVt7T8Gpqpy32OKXPGqHphNL4PyWpEWuYsda:zSu+ybuOEjTfj4yLK/GqHfNOyWpgHda","tlshash":"8fb15bef2206ac1f5ce6c15637ad6cfb7888509ee2859b09be3d08c152b3cc2750c788","first_seen":"2025-06-01T13:01:52.424837Z","last_seen":"2026-07-07T12:36:49.71877Z","times_seen":74,"resource_available":false,"data":null}},"time_used":427,"timings":{"blocked":400,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/22-CzpWkn_R.webp","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/22-CzpWkn_R.webp HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:15 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nContent-Security-Policy: default-src 'none'\r\nX-Content-Type-Options: nosniff\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":231,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"b9bb78dae16909c04988e583ff289da9","sha1":"058eafa9df2250b73525d9a4979a02c5ee33bd46","sha256":"f7c177e1700eec316126a7a693fcc9b19a1e204ecd3335351b723e4cb1932a39","sha512":"a35560b122cc4b36ba475efbf182bfea9336112a646f21be7d340a0990ceb047f453ed7219b4c105104d23bed279bb7ca69bee38fb166141afd8b1ce8e9ba1fe","ssdeep":"","tlshash":"fcd0974f10002c01a33283c1268031993c933a0862c20a7c5387c027ecd0b1bcacb09c","first_seen":"2025-07-07T04:36:43.835921Z","last_seen":"2025-07-07T04:36:43.835921Z","times_seen":1,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":90,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/web3/dist/web3.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/web3/dist/web3.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 07 Jul 2025 04:36:16 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 149085\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 4.16.0\r\nx-jsd-version-type: version\r\netag: W/\"9cd7c-M9qpM1YeVfmYjiviVEgHj5fvDbI\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-etou8220141-FRA, cache-lga21949-LGA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=UA4rMqcfecczKK8FkSpUy7WoRNuZFlnt7%2FS8F3e9JNSVG6sci6Qm5p4XLZmKfOifJj4JbYN74midFfAckd1nuuqXVW3G89UZ52g%2Bk22E6pBRGEQuqDXAYnYUn9egob3hVUw%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 95b4a3ce3d455688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":642428,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65470)","md5":"ce5bd54ade787e3757d0d32ff267280a","sha1":"33daa933561e55f9988e2be25448078f97ef0db2","sha256":"f03340295d792adb763c777eaa96039aa831c2402bd7cbc970db44931fa736b8","sha512":"11ca21748cd36a3ee4bcfd3298cdd188ac5a9ef7f01af8ecae6a2e15139e2dbb485cd5e04010d479eeb0adfecbe1b8304a25c66512e2d8094390e4385ab08a62","ssdeep":"6144:iNajiG1YOdqCibdPB8c118X1Unf9F9CvU9sT6Q479FwwQPvi6naRq3A7Hpa:ic+skHYW79FlDpa","tlshash":"98d44b847690f0a10bdb50e554b70002f334b965701d94a8b7b99cebbea9ecda137f39","first_seen":"2024-12-04T22:03:33.643534Z","last_seen":"2026-07-27T14:16:57.648471Z","times_seen":2211,"resource_available":true,"data":null}},"time_used":471,"timings":{"blocked":-1,"dns":3,"connect":8,"send":0,"wait":426,"receive":8,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/Nt9kMbc/bg-2.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.7","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:16.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Jun 2025 07:18:01 GMT","end":"Wed, 17 Sep 2025 07:18:00 GMT"},"fingerprint":{"sha1":"54:9B:89:F2:DD:E2:46:5A:E1:68:2B:B3:06:E5:D6:77:0E:E6:62:A5","sha256":"2E:66:18:C6:F9:73:F0:F9:32:D3:D7:77:88:0C:73:C5:B2:E3:87:3E:A1:6B:91:80:7F:D6:7F:D1:07:84:1C:ED"}}},"request":{"raw":"GET /Nt9kMbc/bg-2.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 07 Jul 2025 04:36:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 60396\r\nlast-modified: Fri, 09 Feb 2024 00:29:47 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":60396,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 352 x 502, 8-bit/color RGBA, non-interlaced","md5":"bb29d047afa4888ffcd42ac121944e11","sha1":"3cebc5d2e3672f3de53010bfe2db486634e70ca3","sha256":"fc56b4108c9ad46a4a22386e44f8f1fab029396644eaa022671e10e39f4a463f","sha512":"012eafa933d01158cc570c370f40235215899b432f633c479299c98db454e5f7c9edf75c00731d97ff5bf3c2944dd655b13bf71bd9206cfed47a19f1b0479b5f","ssdeep":"1536:5Z5vZFdGAQ8LBgNhuTWDxv6z+20BBms6KWy0/AGTA:75vxLWS+xv6zH0BBmH3U","tlshash":"7843020a13499fcfbb1631544a5f2d80639a3d3ab84d9a785f9a6376b731e034d13d0d","first_seen":"2025-06-01T13:01:52.406806Z","last_seen":"2026-07-07T12:36:49.687681Z","times_seen":73,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":64,"dns":0,"connect":24,"send":0,"wait":23,"receive":51,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/slide2.png","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/slide2.png HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:16 GMT\r\nContent-Type: image/png\r\nContent-Length: 4300\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Wed, 18 Jun 2025 12:15:03 GMT\r\nETag: W/\"10cc-19782f6d158\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4300,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 100, 8-bit/color RGBA, non-interlaced","md5":"0802e74f434a3a521bfb626ba70d6f63","sha1":"a775f060e993fad9337c21d445405ce303f24c86","sha256":"78c765062655f1b4bab88312fb09c4fc958d38d7561dbf0d0314abf66894f8e1","sha512":"8931288f13b77c249cf0811315051fce3e51b037d02bdf78fa1568d2319533efc4c96a95d61f2621076be2c0d2d081510f9a3f031a93adfde3df673c7f3ee617","ssdeep":"96:zS4SwaFFFFFFFFFwOXBB7WdTSubQzt66OYQJ4F5xiW3S85aLNS2:zS4V+xBKIeQzZQqFPsL","tlshash":"b2915c37db53015b76993d3acb8ab4791dad3b93dc3318d42ce95acc8a5c0e52aa0321","first_seen":"2025-06-01T13:01:52.436411Z","last_seen":"2026-07-07T12:36:49.665979Z","times_seen":74,"resource_available":false,"data":null}},"time_used":480,"timings":{"blocked":456,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/arrow-right-b.png","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/arrow-right-b.png HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 260\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Wed, 18 Jun 2025 12:14:51 GMT\r\nETag: W/\"104-19782f6a278\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":260,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 17 x 9, 8-bit/color RGBA, non-interlaced","md5":"bdfb0f13d0e593968b2673df39def568","sha1":"051a8de8ff550b2e1aebd64e3a877e71b71974c9","sha256":"2b4226d4e8295b0b50f3c897d63a0a70a617f01edbcf8a848aec8d31de2768ba","sha512":"07c4efb0e7de372c677d2ab148aaebb86001a45a3c09d841f1d7247fc44ca59049484b547eae15a26ee6e54c358f735d28a07632c884a8acb23ac7657dab3c78","ssdeep":"","tlshash":"d7d02bde3a65a1addd2507b345e6a2143d3f70291042950d7800919a9d1cc48e285fa3","first_seen":"2025-06-01T13:01:52.410936Z","last_seen":"2026-07-07T12:36:49.723299Z","times_seen":73,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":54,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/main.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:16.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/main.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:16 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nContent-Security-Policy: default-src 'none'\r\nX-Content-Type-Options: nosniff\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T09:56:18.908735Z","times_seen":17577185,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/INATBA.png","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/INATBA.png HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 2301\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Wed, 18 Jun 2025 12:14:56 GMT\r\nETag: W/\"8fd-19782f6b600\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2301,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 33 x 33, 8-bit/color RGBA, non-interlaced","md5":"14193b2b45b89bd5e114982bcfc4ebb0","sha1":"d4a32c4d21307c39a8606dbc1ab2fc3f61e9593c","sha256":"6631d2e8c567a7a95f7a84c73a27de51bbb6c9517765a9e5dd34c4d205a9472f","sha512":"456997455e23c4a8165db2a5b6381aadea3939502bd779124f2e2bb21d63b89bda8dd3320bbc7361747f6405af6217f058ddf37700af017d46622c2f31a9994c","ssdeep":"","tlshash":"4f414bc49e3dae3daac8535802e521e0cacd0c82b4847126ea351bbe66d06c6f80a901","first_seen":"2025-06-01T13:01:52.43208Z","last_seen":"2026-07-07T12:36:49.704941Z","times_seen":72,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":207,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/slide1.png","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/slide1.png HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 6625\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Wed, 18 Jun 2025 12:15:01 GMT\r\nETag: W/\"19e1-19782f6c988\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6625,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 100, 8-bit/color RGBA, non-interlaced","md5":"6c95d3ec9cd8e271b2478fe45922f26b","sha1":"d1ac1d941c66cdf41625c158aed080feb666f2c8","sha256":"908cdcf51c5c8ee033bef41d259ac6c0abb3d07fdd2c6fa99af4f4da6f68b5d9","sha512":"036015d2a7dad12cc8ab5b554f5c3ca19aacc0818c753c455e19ba5b2b5ac5059df151f6f57542fe6fdcd6c9b8ad14fcea17fe24adb57cb4d87924c07195f152","ssdeep":"96:zStYIa1atapHBP732vmwK8/1mqbnM5sqtxtQKCaLf3FtNa3mXQSC8P9NrmJ8KTvK:zStY+tapHFANKsjbIDrConNWSCK7rCTy","tlshash":"16d18fa76c78188dc4dda7bac0b8be581e52cb1580621b96bfd692f70e830b01df5835","first_seen":"2025-06-01T13:01:52.39012Z","last_seen":"2026-07-07T12:36:49.672719Z","times_seen":74,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":206,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/arrow-right-w.png","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/arrow-right-w.png HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 187\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Wed, 18 Jun 2025 12:14:51 GMT\r\nETag: W/\"bb-19782f6a278\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":187,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 17 x 9, 8-bit/color RGBA, non-interlaced","md5":"0707a64d1119dd2252923d16c1195be0","sha1":"2b40dc4d5e70410b376096f19d62c0100090b71a","sha256":"329096dcd4314eb90aba8f34b33a65b18e6752878d9a0f8b171eb63bf2464ed8","sha512":"cc63185d22b22427d76dc4560d5a0ce19e99c72b58070c97c27b2f45399ae95abc1f7bc7710bdb0622fc93630aa62ce0f28650a5ddc79f084c59a6d7d273ee0d","ssdeep":"","tlshash":"d5c0c0df5799adfec31c0dfd12ab5230e03b0c492b518045e810543e1637545a78c71e","first_seen":"2025-06-01T13:01:52.376989Z","last_seen":"2026-07-07T12:36:49.715019Z","times_seen":72,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/huobi.png","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/huobi.png HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 1002\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Wed, 18 Jun 2025 12:14:56 GMT\r\nETag: W/\"3ea-19782f6b600\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1002,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 88 x 29, 8-bit/color RGBA, non-interlaced","md5":"b8f143eb5efce356e4ea3366945b9494","sha1":"03b6cd5f7d482b45490f3a2ad2b610a000b3bd90","sha256":"89d8d864487aa7751969ae761722946c73d21f2fd5deb2c5dafc3d68981159c1","sha512":"760e43d7f9fb7cb06c08a21c3587df8bf04c5071a771554260987717001ad2ece9160ee187c8689087f648cb76919a6aa5388ba25aea8ed922d750c7f0e334c4","ssdeep":"","tlshash":"1c11c8f1703065a495d888ed4b3d003068fb7a6c38518844abd53c59d029145b1f9e17","first_seen":"2025-06-01T13:01:52.42575Z","last_seen":"2026-07-07T12:36:49.662614Z","times_seen":74,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@100;200;300;400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:16.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 20:02:59 GMT","end":"Tue, 09 Sep 2025 20:02:58 GMT"},"fingerprint":{"sha1":"B7:F0:7E:3A:46:13:9F:42:76:6A:5D:6E:85:25:78:85:99:EE:67:71","sha256":"43:9E:56:16:47:D3:25:E5:95:EB:CD:3C:4D:92:FC:98:3D:CA:1E:CA:3B:66:A5:B2:D7:AA:58:34:70:FC:A7:4C"}}},"request":{"raw":"GET /css2?family=Inter:wght@100;200;300;400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 07 Jul 2025 04:36:16 GMT\r\ndate: Mon, 07 Jul 2025 04:36:16 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22743,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"fe62abea396254861b824401a0b291cb","sha1":"a99f4793c0f626eaa3edcbaba7b721c42eeed708","sha256":"8f9b8671039dbae1267a13257ba881403b5110048faf7ea581c8ee835249e8ed","sha512":"c6ecc18329e01ef006b4c64a39802535f2a499e13b7c8add2843a1d16153310f092264a34b2746caada0433a4e922c980ba6935072ac55e10ea09579e5971896","ssdeep":"192:WpxmpJpGpq3tpzplYpFxnqHq3G0lRmxAZgq3lblifxNktq346lDYxOLuq3/pl8x3:WLmXoKtZIlRee0bGo4VuCM/WMC","tlshash":"aaa28a92402b9500ab971cc233cf7f3aaece10856485d1b96ff90cd59ceeda6436872d","first_seen":"2025-05-29T17:34:05.438291Z","last_seen":"2025-09-10T16:49:55.169506Z","times_seen":1586,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":105,"dns":8,"connect":27,"send":0,"wait":47,"receive":0,"ssl":107},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/slide7.png","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/slide7.png HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:16 GMT\r\nContent-Type: image/png\r\nContent-Length: 5132\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Wed, 18 Jun 2025 12:15:04 GMT\r\nETag: W/\"140c-19782f6d540\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5132,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 100, 8-bit/color RGBA, non-interlaced","md5":"69e7abaac1a6955c81251c41c16c114e","sha1":"ca60c5e6ffb3287a6abab9e419245842c9e3a24d","sha256":"41acd2ca1bd77f21d2bbd1071f3df406f101f3b11002951a1e27d7a6df3e4773","sha512":"c1861bf70aa6a40e5380df3562a8f636e57dcc9a9c6b1e8e558f87feefbfa90ab936262410a9866cdc3d2c6a1ad55f0dd097ee2c4900014aa2965134b1943586","ssdeep":"96:zSspL9i7R5qmgHK12pt16fAJibKH+j/fDM4diQLZkC3MfWV+j:zSs677qtosTobuHyDM4g+ZkMuWgj","tlshash":"41b16de687455b8078ac46b0ef624c84beb21e104d81786d7cdf67f18c2eb0ea943c79","first_seen":"2025-06-01T13:01:52.386586Z","last_seen":"2026-07-07T12:36:49.706582Z","times_seen":74,"resource_available":false,"data":null}},"time_used":449,"timings":{"blocked":420,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/slide11.png","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/slide11.png HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:16 GMT\r\nContent-Type: image/png\r\nContent-Length: 6959\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Wed, 18 Jun 2025 12:15:02 GMT\r\nETag: W/\"1b2f-19782f6cd70\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6959,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 100, 8-bit/color RGBA, non-interlaced","md5":"6833041996e2d09491450a18bea7f847","sha1":"22827836fa52264703d9e0a8853ede372e508db3","sha256":"00bcfae08441ac946c039a1e9cc462c4f81ed4aa992ca40d63c01ac551400e96","sha512":"421fdf0c06873eba2156e45f1137ce84d33d82b1eb96cd4f91f123f8e2f4a2ca74812353b26d40f00bea4314a227f456a2322e4dc60233f92f5e1c61a507619e","ssdeep":"96:zSR+yGTg4LvZ/No5M1A01vOPLpTvCFZIyDaalTOJRI82ESYwqcxG78ZGwyLwIznH:zSYogh/D1J2PdTvAIyvYRSENKAUGfbj","tlshash":"96e19d15096c1c88d3f8d953669a0992b4efb06dee832e8c0b5499b5372b0df88de4d7","first_seen":"2025-06-01T13:01:52.401457Z","last_seen":"2026-07-07T12:36:49.690604Z","times_seen":74,"resource_available":false,"data":null}},"time_used":468,"timings":{"blocked":444,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/jquery-3.7.1.min.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/jquery-3.7.1.min.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:15 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nContent-Security-Policy: default-src 'none'\r\nX-Content-Type-Options: nosniff\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T09:56:18.908735Z","times_seen":17577185,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/slide4.png","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/slide4.png HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:16 GMT\r\nContent-Type: image/png\r\nContent-Length: 9148\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Wed, 18 Jun 2025 12:15:03 GMT\r\nETag: W/\"23bc-19782f6d158\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9148,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 100, 8-bit/color RGBA, non-interlaced","md5":"d89b5f1ccded5985095b82249ea18c90","sha1":"e591f720f3e456544e69a6c7c760c88cb33875ba","sha256":"00646d20ef57bd7dddd046946b9733f5d7dae1f73def79a2691b9bb47abe7329","sha512":"579caac269e871812667e4e73eb113d7ed4658130362e3b65e5ec86b3257650fc2182fd5643da1d79fc1344aa1bdaccc88f8fb17f39b9016bc2dba01965bde24","ssdeep":"192:zS4qR+GD7hqPhZdt8u+2M912EGFUy0WydxfYopa2sc77wSnhT4cev8nM:mTf7hqPvj8u+2s1KUy0WynffbX5/nM","tlshash":"9b12a068826b4d5e573d86b637055743e043eb3dc3a700e6b82fb2b0e1dd80bc128a60","first_seen":"2025-06-01T13:01:52.376016Z","last_seen":"2026-07-07T12:36:49.669565Z","times_seen":74,"resource_available":false,"data":null}},"time_used":459,"timings":{"blocked":422,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/CDA.png","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/CDA.png HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 1346\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Wed, 18 Jun 2025 12:14:54 GMT\r\nETag: W/\"542-19782f6ae30\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1346,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 33 x 33, 8-bit/color RGBA, non-interlaced","md5":"97cb21b561bf5b0a810da7ad718f7c06","sha1":"ead1067a15ca8383c9e2f5105b9d9bfd9b57d033","sha256":"76f498f7cf6bcbb6fc7bde525d04e5bea37caf39c785df1cbf4027d5ebbd073c","sha512":"ffa2b15a9504a99ac4a0bf6448583f7788d9f7100104d32852938d3ca47ca10865d6e37ef82aa0bf1d25cd04c4a22409c2ef337b97910d79696707248a60fedd","ssdeep":"","tlshash":"4a2108ef765baf1ff8980f1e828541007eb83f4ac516a10d5ac3d831440aa7d448cf86","first_seen":"2025-06-01T13:01:52.400655Z","last_seen":"2026-07-07T12:36:49.721574Z","times_seen":72,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":200,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/bene1.png","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/bene1.png HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 35110\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Wed, 18 Jun 2025 12:14:52 GMT\r\nETag: W/\"8926-19782f6a660\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35110,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 277 x 277, 8-bit/color RGBA, non-interlaced","md5":"8301fbc396ed3e0cf88f1c620d70455c","sha1":"21fc668df0a248b130f2323b6ef65cf34c711ddb","sha256":"2cdca3cb0bc0853666b0e32bb0ee3ac37965a2811dac301d301c50f7b2b39592","sha512":"d8618ab3fa734b738f2612b567072d7fc1b20b6355e72222dfda618c65cd91af0bbb798ed0c29f0029a6d02bd0d7a09f1091c6655a969f492cb9b87006183a20","ssdeep":"768:UsJsY3GSZL81+Wvcpc5pyGaAPr33nqInmKazXPS8:UsCY3GUm/kc5sq73n5mKazq8","tlshash":"33f2e1fb57601307527508eb666f9c8fe1f9d800526b3cb868d58dc82c99a5c9ef121b","first_seen":"2025-06-01T13:01:52.41948Z","last_seen":"2026-07-07T12:36:49.686195Z","times_seen":70,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":67,"dns":0,"connect":0,"send":0,"wait":26,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/22-CzpWkn_R.webp","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:16.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/22-CzpWkn_R.webp HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:16 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nContent-Security-Policy: default-src 'none'\r\nX-Content-Type-Options: nosniff\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":231,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"b9bb78dae16909c04988e583ff289da9","sha1":"058eafa9df2250b73525d9a4979a02c5ee33bd46","sha256":"f7c177e1700eec316126a7a693fcc9b19a1e204ecd3335351b723e4cb1932a39","sha512":"a35560b122cc4b36ba475efbf182bfea9336112a646f21be7d340a0990ceb047f453ed7219b4c105104d23bed279bb7ca69bee38fb166141afd8b1ce8e9ba1fe","ssdeep":"","tlshash":"fcd0974f10002c01a33283c1268031993c933a0862c20a7c5387c027ecd0b1bcacb09c","first_seen":"2025-07-07T04:36:43.835921Z","last_seen":"2025-07-07T04:36:43.835921Z","times_seen":1,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/11-CEJH9EXk.webp","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/11-CEJH9EXk.webp HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:15 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nContent-Security-Policy: default-src 'none'\r\nX-Content-Type-Options: nosniff\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":231,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"1c98ad54910bb1a7d071da0fcccc117b","sha1":"93dfdfa287112cff5bfa90fd6e90ae39c798b04d","sha256":"bcccc0a322664e4b704b86c629a5b05d012eb75386b67da1000c572abb582a96","sha512":"f4e2de72cb633294b10100195ff2795de3fe7066761688c1f30de96395c281da028b779868d22b05a5c83f0ded6132cb9e418e9e1bb24dd22942454739ca034e","ssdeep":"","tlshash":"c1d0974f11003801a67283c02680b18938673a0862c20e3427cbc027ecd0a1bcacb89c","first_seen":"2025-07-07T04:36:43.85117Z","last_seen":"2025-07-07T04:36:43.85117Z","times_seen":1,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":66,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/44-DcUgPKtf.webp","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/44-DcUgPKtf.webp HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:15 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nContent-Security-Policy: default-src 'none'\r\nX-Content-Type-Options: nosniff\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":231,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"29122e8bc7a493b4e1cb8431128c1d3c","sha1":"3460f45c1cff085582ac1aa1f58a2cf424c95750","sha256":"6af4f550bc851d74abb9ff588e7463401e7e3b4be191c9750002d780549a1fab","sha512":"565d66f296e252b4f795fd02294d0d1ff83a6616ec4777774b2a6ffbaada55856f84578893295429f640161d0ed518d1e35d5381f63b90500c203c17283c9217","ssdeep":"","tlshash":"93d0a78f15002951aa7292802ad0759d3c5b3a596bd249745787d017ecd5a2bcecb4ac","first_seen":"2025-07-07T04:36:43.810658Z","last_seen":"2025-07-07T04:36:43.810658Z","times_seen":1,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":89,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"free-check-aml.com/favicon.png","fqdn":"free-check-aml.com","domain":"free-check-aml.com","tld":"com"},"ip":{"addr":"172.67.139.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:17.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"free-check-aml.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 May 2025 15:51:36 GMT","end":"Tue, 26 Aug 2025 16:50:06 GMT"},"fingerprint":{"sha1":"A1:01:DE:4E:6A:B8:9F:93:B7:98:6A:D5:48:7E:81:56:68:6A:E7:40","sha256":"2D:EC:17:72:16:54:79:C9:98:BC:3B:48:B9:F7:4C:24:58:7D:96:D1:59:33:C0:D4:60:47:1A:01:EC:58:F9:AA"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: free-check-aml.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 521 No Reason Phrase\r\ndate: Mon, 07 Jul 2025 04:36:22 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 7006\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: 95b4a3d858d7b500-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"521","status_text":"No Reason Phrase","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T09:56:18.908735Z","times_seen":17577185,"resource_available":true,"data":null}},"time_used":5451,"timings":{"blocked":0,"dns":10,"connect":1,"send":0,"wait":5419,"receive":1,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/33-1yWRRjf1.webp","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:16.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/33-1yWRRjf1.webp HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:16 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nContent-Security-Policy: default-src 'none'\r\nX-Content-Type-Options: nosniff\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":231,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"fb6b2b4a978798d3a4f758ae8803ea2b","sha1":"0d037e3243ca3452e8d0b8b19fdb76897846167d","sha256":"c1c10aa51ee3c1be91c328a1484524ab0be35001974d042692acdfafdd19fb18","sha512":"48e2228755c9cb4a95d502f0044674b74df9ae3f0aadcac5959f6f4092e7234cbc8346c525903ef31a0e73c987646caa919763367dd184b6b60784adb810961b","ssdeep":"","tlshash":"31d0978f10003900a23282802a80318938633a1962d249741397d013ecd0a1bcacf09c","first_seen":"2025-07-07T04:36:43.823959Z","last_seen":"2025-07-07T04:36:43.823959Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/ohsnap.css","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/ohsnap.css HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:15 GMT\r\nContent-Type: text/css; charset=utf-8\r\nContent-Length: 798\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Wed, 18 Jun 2025 12:14:59 GMT\r\nETag: W/\"31e-19782f6c1b8\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":798,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"0dfba9f462d0685a12b72d79e34a0283","sha1":"fc0a106a3566e20355732bda845ddee7967a700e","sha256":"64890d1382e265c3510ee0c51badb8623ea45e4fa808829d229d50ded7da09e2","sha512":"1e87532720f22c8ec6c4269483b648fd90e9bee1dd5f8bf55a28c86678f993917741e376c819fa69b92d6208336d78e8f4ce6bcc4ea334c8dc7b0cc6b60e7285","ssdeep":"","tlshash":"2c01c946fa6b08063a01919d8b667a533b3a0027cb0ec7183aa0b65bffd10b0a0e1a40","first_seen":"2025-06-01T13:01:52.398101Z","last_seen":"2026-06-29T00:48:36.901367Z","times_seen":49,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":1,"connect":23,"send":0,"wait":28,"receive":4,"ssl":47},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/rate.png","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/rate.png HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 1367\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Wed, 18 Jun 2025 12:15:00 GMT\r\nETag: W/\"557-19782f6c5a0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1367,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 232 x 41, 8-bit/color RGBA, non-interlaced","md5":"f3d911e76880a5fc8bd508341ef315ef","sha1":"7191657b54fe43b511a8b89cdbd7e7806f9d1c05","sha256":"854092d9142763d9eb8b4bd2f2bab9211590aeccbf11b7de27d95210373ca02e","sha512":"1c1708a24d2e40eddb6e685a6281c8a4996a0b5ce26fec95ae5e4cbea7665df1dd97716190d89980df0012bfb93d144d2eda3c2b2bdd7afdb9634b3f96ad889a","ssdeep":"","tlshash":"5f2108c45dc5a5b3811cce87bbe572519a1d3406e3a7c17dbbc51718261c10bc687119","first_seen":"2025-06-01T13:01:52.433808Z","last_seen":"2026-07-07T12:36:49.730557Z","times_seen":72,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":200,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Montserrat:wght@100;200;300;400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:16.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 20:02:59 GMT","end":"Tue, 09 Sep 2025 20:02:58 GMT"},"fingerprint":{"sha1":"B7:F0:7E:3A:46:13:9F:42:76:6A:5D:6E:85:25:78:85:99:EE:67:71","sha256":"43:9E:56:16:47:D3:25:E5:95:EB:CD:3C:4D:92:FC:98:3D:CA:1E:CA:3B:66:A5:B2:D7:AA:58:34:70:FC:A7:4C"}}},"request":{"raw":"GET /css2?family=Montserrat:wght@100;200;300;400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 07 Jul 2025 04:36:16 GMT\r\ndate: Mon, 07 Jul 2025 04:36:16 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17343,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"17d6f2f9ba26808d3af0145023e2abf3","sha1":"3dbb3170b687562b3adb105dfd75ce27cb48d057","sha256":"0a2fba58c7468437252380e85196b7c3e7b81c49fa5a8318553079bae7d694ac","sha512":"bce9761b9eefd0e06a31ae5565fec835a39b9ccde1c0786190ce46da3221ec38dd0799b535fdd2adf4903b2c6dfc465e1f708e26a881ed67e5350f9828a2106b","ssdeep":"192:NpudpSopTppPpb9u2ShUpYb+uVSy7pfbXuoSTapmbwuvSMJpFbpuSS1Qpcb6uBSC:N8dUoRf6XpQpRpqxDZ8Jt5G7","tlshash":"2a72ce91105ba500eb472cc923cf7f269d4e21627494c53a6ffe2ca4adeac325325b3d","first_seen":"2025-05-30T19:43:12.339483Z","last_seen":"2025-09-04T18:05:23.623799Z","times_seen":460,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":98,"dns":1,"connect":14,"send":0,"wait":50,"receive":0,"ssl":119},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/services-icon3.png","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/services-icon3.png HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 3334\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Wed, 18 Jun 2025 12:15:01 GMT\r\nETag: W/\"d06-19782f6c988\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3334,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 62 x 60, 8-bit/color RGBA, non-interlaced","md5":"cbae04b86c7f6a06f5331aa2eca22851","sha1":"083ff93ec13bce58d8df18e194e1d4342425651f","sha256":"9b58c846e8e719b14eff18a59a763ff2aff939971cc91d9d0b8234169244309f","sha512":"c3d95372b6cf4c587f2161e01b11ad41f466d5d5b036195e8e382600085ac74399e780ecc80c2751ce6446f3fd597dc5fc8f31af2b0e2a478bfb879285223290","ssdeep":"","tlshash":"c4616ce59840118548f882d80e730ba235b79c6d32bdfb74abcfd1aa1e5c228d617266","first_seen":"2025-06-01T13:01:52.405909Z","last_seen":"2026-07-07T12:36:49.723759Z","times_seen":73,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":53,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/ohsnap.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/ohsnap.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:15 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nContent-Security-Policy: default-src 'none'\r\nX-Content-Type-Options: nosniff\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T09:56:18.908735Z","times_seen":17577185,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":2,"connect":23,"send":0,"wait":26,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/burger-menu.png","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/burger-menu.png HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 181\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Wed, 18 Jun 2025 12:14:54 GMT\r\nETag: W/\"b5-19782f6ae30\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":181,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 15, 8-bit/color RGBA, non-interlaced","md5":"0a8ab6524d52e897a8038c831cff2e2f","sha1":"2cef072df1f6c0b952a97c72089d444a9ee1f2d7","sha256":"182284a82ab91c11fba9b3aa982f85450d3cce477e77c414f180fd120e7c5dca","sha512":"6722883607369c2ff37e9060ee249b69e36c4f219fad44e64402ed839c007cd6e8988b031ca6006fa2fa3d311ad21ddc8eaa2ef574781c6561efdf64416cafcc","ssdeep":"","tlshash":"93c0c0e205009c75992f89fa108f13f4ac331fda0441100849cae0393c0dcc0c1943c2","first_seen":"2025-06-01T13:01:52.416085Z","last_seen":"2026-07-07T12:36:49.727004Z","times_seen":76,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":190,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/11-CEJH9EXk.webp","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:16.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/11-CEJH9EXk.webp HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:16 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nContent-Security-Policy: default-src 'none'\r\nX-Content-Type-Options: nosniff\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":231,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"1c98ad54910bb1a7d071da0fcccc117b","sha1":"93dfdfa287112cff5bfa90fd6e90ae39c798b04d","sha256":"bcccc0a322664e4b704b86c629a5b05d012eb75386b67da1000c572abb582a96","sha512":"f4e2de72cb633294b10100195ff2795de3fe7066761688c1f30de96395c281da028b779868d22b05a5c83f0ded6132cb9e418e9e1bb24dd22942454739ca034e","ssdeep":"","tlshash":"c1d0974f11003801a67283c02680b18938673a0862c20e3427cbc027ecd0a1bcacb89c","first_seen":"2025-07-07T04:36:43.85117Z","last_seen":"2025-07-07T04:36:43.85117Z","times_seen":1,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/ATII.png","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/ATII.png HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:16 GMT\r\nContent-Type: image/png\r\nContent-Length: 2407\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Wed, 18 Jun 2025 12:14:52 GMT\r\nETag: W/\"967-19782f6a660\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2407,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 33 x 33, 8-bit/color RGBA, non-interlaced","md5":"a7a9b783d08a19f326618b173f7863aa","sha1":"0af54edb11c7b22cec7cd541e30afdece2e07b30","sha256":"9bdb5795f1e50b472d72f2d995096c955f3ce55e6e9357077fbbd968bc31b528","sha512":"f444f091742eab86806d3f3b279f3dac442014c622368df21771dcfb3b7f60866b3e30fe26897f2a101f0e7b21f332c293e2f7d3dbfeb050fcb210e5b62c15f5","ssdeep":"","tlshash":"d3412ad46781904e85c8fa3d0a61b7fbe31649e2aca412427ed5cfc087444f142d59d4","first_seen":"2025-06-01T13:01:52.375171Z","last_seen":"2026-07-07T12:36:49.70574Z","times_seen":72,"resource_available":false,"data":null}},"time_used":466,"timings":{"blocked":429,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/bene2.png","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/bene2.png HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 13449\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Wed, 18 Jun 2025 12:14:53 GMT\r\nETag: W/\"3489-19782f6aa48\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13449,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"5b20293786c426da26f33d03397d2877","sha1":"dc840b4ce271704507c8a5f8922dd56e6e5b4b3e","sha256":"1a86a9ab3ebc91211b6edad8c3ca497bd1cf25f73aa7d7d591d3b8f456812f2f","sha512":"a753e6be7d3d52a8b6b5883bedc548c836167924d9cd1a71a87bafb5b96dfcd9d92e24b580c3b051dca69c68d2bf81674bb7554ad55b550c5ea2c3e9927b0aea","ssdeep":"384:iCpcGPYmb1dD1h4VGcIMkB03Yk6Dqz9+4m7XDJyIE:hCp01t1WbIez91m7XDJyIE","tlshash":"c452c01e46c47aa78d2bb7109abbf1783dad1f28cd998d27d3105502484f06dcace4f8","first_seen":"2025-06-01T13:01:52.377825Z","last_seen":"2026-07-07T12:36:49.692446Z","times_seen":70,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":66,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/hx6rHJ1/Frame-72-2.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.7","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:16.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Thu, 19 Jun 2025 07:18:01 GMT","end":"Wed, 17 Sep 2025 07:18:00 GMT"},"fingerprint":{"sha1":"54:9B:89:F2:DD:E2:46:5A:E1:68:2B:B3:06:E5:D6:77:0E:E6:62:A5","sha256":"2E:66:18:C6:F9:73:F0:F9:32:D3:D7:77:88:0C:73:C5:B2:E3:87:3E:A1:6B:91:80:7F:D6:7F:D1:07:84:1C:ED"}}},"request":{"raw":"GET /hx6rHJ1/Frame-72-2.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 07 Jul 2025 04:36:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 31839\r\nlast-modified: Thu, 15 Feb 2024 20:57:18 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31839,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 394 x 324, 8-bit/color RGBA, non-interlaced","md5":"1a0e982997d9c0f0eae07293ef8709c3","sha1":"08bc0f77d313454ebcf2e5bebd42892285058914","sha256":"e9978fc92b5d7631964d753acefce73eb085dd7d0be15c8bdddc49f1f358169d","sha512":"9f8cb973475ca94cf2d2833d3b14f403d029701d86897ee8ee9c10ccffec36b7b49ab56db10bffc0569441760ca1273cc5e78d435ac580d19c2e94340b7e5c27","ssdeep":"768:VUNyba6j/Ou9Iah4vgoYppLMBTIlz5yg75bZl5Q:2NyeMV9h6gPppL0Ilz5yOZl5Q","tlshash":"e3e2d0dafa4fd2c9e01605248a3f4edd0fc50588c9876125e9ab06f9dcafd1ceb57086","first_seen":"2025-06-01T13:01:52.387624Z","last_seen":"2026-07-07T12:36:49.71143Z","times_seen":71,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":67,"dns":1,"connect":26,"send":0,"wait":69,"receive":12,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/slide9.png","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/slide9.png HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:16 GMT\r\nContent-Type: image/png\r\nContent-Length: 8406\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Wed, 18 Jun 2025 12:15:04 GMT\r\nETag: W/\"20d6-19782f6d540\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8406,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 100, 8-bit/color RGBA, non-interlaced","md5":"7926e740f7ebac0ab7abd9f4d09af5e9","sha1":"fc53bfe7aa91f3bfc3e5ca25b2b2bff63841ee41","sha256":"64db5dc0b8d39186ab90dedf50e3c5971d7a4cc53015c0742046feb2b0f73d0f","sha512":"f8baacb4382891ef901a9428953725ad61cdc7a01ca3261d7e839da1071ba8bb157016dcb3005063ea1c3157fc5bc270a32d0aa46c52df5ded5eabb762471a27","ssdeep":"192:zSfq5TLNhkxKTuVkR49skUbGBa9/mOVmDtvZR170Ghi:mfUuxKMivbGBMmd170Ghi","tlshash":"10028e7cc760746fdccf253a688a52f211b3c7abba50ee255f1b019a21f62185241ee2","first_seen":"2025-06-01T13:01:52.41506Z","last_seen":"2026-07-07T12:36:49.6621Z","times_seen":74,"resource_available":false,"data":null}},"time_used":493,"timings":{"blocked":455,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/slide14.png","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/slide14.png HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 5827\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Wed, 18 Jun 2025 12:15:03 GMT\r\nETag: W/\"16c3-19782f6d158\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5827,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 100, 8-bit/color RGBA, non-interlaced","md5":"da12b2c4e30f0e22720dcf919ff9166c","sha1":"92e6d5a70342929a4228156f85ecb5dba228f7eb","sha256":"e79169df2ee12e4a49d50f188f404b5b92dd968d730518ab22bbccb73f34e557","sha512":"3fffbe0cd839a965889630bdcbe002f7d03324af8e7dfb15e40b82e9b083c5cb8a77f1074d088b8a023bd6c1c24b4fdf69bd6c25e1466cc6660e280c1a8756f3","ssdeep":"96:zS++0uONYMJu1dADcJgu6o5VQoVgE7kImz9DL31vtCI4JCvLmt8j0vs+TNgyosiz:zS++0uDMJm4IguhjJi9D7BtC9JCvP0vO","tlshash":"aac18ee9c061086d4d094b291d3e6524b45c5f8fc5b9f34eea51883fed0dac6e52cab0","first_seen":"2025-06-01T13:01:52.409134Z","last_seen":"2026-07-07T12:36:49.670486Z","times_seen":74,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":44,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/arrow-right.png","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/arrow-right.png HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 202\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Wed, 18 Jun 2025 12:14:51 GMT\r\nETag: W/\"ca-19782f6a278\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":202,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 19 x 10, 8-bit/color RGBA, non-interlaced","md5":"231bf83cbede808189d68502fdabc5f1","sha1":"d28953386094736182e749d9cc48e3a3536a7e9e","sha256":"7231bebd7cf77f64ac9dd01db76f3735ab5f77906456d824da42408782d818e7","sha512":"01030ef4728d04eb790ed8624904241a2b05492ebcb81528b28eaed60352e3f654b9734bed28f93fb0c6015b5ece41c252347d4e5350431b0c5197be039e42ac","ssdeep":"","tlshash":"edd022cda619dc3bc7ae093b239a1861a9bb04260115a2c83d96b838702ac8891483a1","first_seen":"2025-06-01T13:01:52.434672Z","last_seen":"2026-07-07T12:36:49.710312Z","times_seen":72,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/bene3.png","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/bene3.png HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 11029\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Wed, 18 Jun 2025 12:14:53 GMT\r\nETag: W/\"2b15-19782f6aa48\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11029,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"4db9b994b387b4a3fcdbb48d50e47d45","sha1":"4a80e01ce39f793599c9338b0b5b513a67212968","sha256":"8bdf2416ad5bdc66cf5aeb9ba9bf4f608c5572716be67fb35dbaaa45d5612743","sha512":"82a46648891abdd26daae7a73d3cfae931c01ab1b1a7cb97c05354ef00fef81de9c8f132942eb19a83f19cda77011fd5b5e5b6b7232985ebbe2082174e02a879","ssdeep":"192:3SnV8JhUHOSobrZS5XhFPqqpYVB7zzmbzQSpuQO3fFtAN:ineyOSobrZKXPPqqMZCbzQSA3NtC","tlshash":"4732aedd25e9ed3a34e428ff83686418ac20b0375c8d7c5a3a906e995c07404997f1fa","first_seen":"2025-06-01T13:01:52.367403Z","last_seen":"2026-07-07T12:36:49.693444Z","times_seen":70,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":66,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/services-icon5.png","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:15.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/services-icon5.png HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:15 GMT\r\nContent-Type: image/png\r\nContent-Length: 3738\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Wed, 18 Jun 2025 12:15:01 GMT\r\nETag: W/\"e9a-19782f6c988\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3738,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 62 x 60, 8-bit/color RGBA, non-interlaced","md5":"8ccbd3299d3e36f2427e948ad5e5fd07","sha1":"73f65e96c5b79c28979475c3d59c355e1d421cd7","sha256":"4f19cb57f2ed06e5a6d93ab039ea698bc7c8359706a9bae21b20b4e8e727cfb2","sha512":"28204b4238702bd82123c992ba3e24843d9642141d7b1135db19b1b02e75ce3679dc52caf4eb6ca32a5227c295a03eea8544c9fac62e3794f51da2ad57c78e25","ssdeep":"","tlshash":"51716de5a48928f454aa4c37d03dd757600582ad3f4e78ed6bd31e20f01c3d7916b46c","first_seen":"2025-06-01T13:01:52.42666Z","last_seen":"2026-07-07T12:36:49.691575Z","times_seen":72,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":60,"dns":0,"connect":0,"send":0,"wait":40,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlchecksusdt.com/AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/jquery-3.7.1.min.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F","fqdn":"amlchecksusdt.com","domain":"amlchecksusdt.com","tld":"com"},"ip":{"addr":"94.176.236.96","port":443,"asn":212531,"as":"UAB Interneto vizija","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"","requested_by":"https://amlchecksusdt.com/","date":"2025-07-07T04:36:16.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlchecksusdt.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Jun 2025 11:25:35 GMT","end":"Thu, 18 Sep 2025 11:25:34 GMT"},"fingerprint":{"sha1":"3A:9C:BE:8C:7C:63:10:F3:80:2B:DB:4C:9E:37:36:A3:A0:4F:69:4C","sha256":"7F:D3:5A:9E:0F:19:1E:F3:F9:0C:21:8D:D4:F7:A2:78:76:2D:14:02:B8:35:23:26:67:71:FF:58:B8:86:58:1A"}}},"request":{"raw":"GET /AML%20Check%20-%20The%20full-fledged%20crypto%20compliance%20solution_files/jquery-3.7.1.min.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F HTTP/1.1\r\nHost: amlchecksusdt.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlchecksusdt.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 07 Jul 2025 04:36:16 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nContent-Security-Policy: default-src 'none'\r\nX-Content-Type-Options: nosniff\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T09:56:18.908735Z","times_seen":17577185,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-07","alert":"Sinkholed","trigger":"amlchecksusdt.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}