{"report_id":"3e54dc63-77ce-4554-96c5-6c0c3fb95ebe","version":6,"status":"done","tags":["scam","fraud","crypto"],"date":"2025-10-08T23:09:36Z","url":{"schema":"https","addr":"www.amlcheckvault.com/","fqdn":"www.amlcheckvault.com","domain":"amlcheckvault.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":0,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"final":{"url":{"schema":"https","addr":"www.amlcheckvault.com/","fqdn":"www.amlcheckvault.com","domain":"amlcheckvault.com","tld":"com"},"title":"WhoAmI? Discover Whoer AML in the Web3 Jungle!"},"submit":{"url":{"schema":"https","addr":"www.amlcheckvault.com/","fqdn":"www.amlcheckvault.com","domain":"amlcheckvault.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":0,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-12T23:09:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null},{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-10-05T22:12:06.373682Z","alert_count":0,"request_count":1,"received_data":25422,"sent_data":552,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.amlcheckvault.com","ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":12,"request_count":12,"received_data":8453673,"sent_data":5443,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"investfreedoms.world","ip":{"addr":"172.67.205.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":4,"received_data":109265,"sent_data":2112,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"min-api.cryptocompare.com","ip":{"addr":"20.4.130.154","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"domain_registered":"2013-11-03","domain_rank":433733,"first_seen":"2017-01-31T12:53:23Z","last_seen":"2025-10-06T03:46:51.332822Z","alert_count":0,"request_count":1,"received_data":758,"sent_data":529,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"www.amlcheckvault.com/assets/web3-provider/web3-modal.js","fqdn":"www.amlcheckvault.com","domain":"amlcheckvault.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"eed7d4b80780bb8adee3cbc67d7f98ff","sha1":"20f450d0eaf88312c005763e9036aeed80a225a0","sha256":"5e0ebe3158a15aba5a5e00e9bb2327769203ed6c28b6fd7aca2155d7e05cadc4","sha512":"66c43c8d29392d3e8435d8273fa23c2653e3cf4a36d875f97195100121e59ba73c1b8c7430c41a01a765893f4f0b97b3c153ede123d688ba3f00fcbe7fd74d96","ssdeep":"384:yuWDxb0OzbJ3vF/ll0blqHuCUCaDr/S1ziayMkrN21GecFZPtDQseaTrHyhfdsG2:KV39Nl08O/CaDbS1/k97rShZFc/","tlshash":"acf286f02bec12b4853f434376592d74bb1114fa9ebabf4575fe1a828f96e0c412a4d2","size":37639,"data":"","first_seen":"2024-05-02T20:25:27Z","last_seen":"2026-08-03T21:00:55.072731Z","times_seen":208,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.amlcheckvault.com/assets/web3-provider/web3-router.js","fqdn":"www.amlcheckvault.com","domain":"amlcheckvault.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"85a56c216646e3aa7ae57bab1b834845","sha1":"2a2cd889995e1d2a2c469afca8e7605034afd2d6","sha256":"c259624218132a2cd36ad673de1ef15631307c4c491c3c63b5e930084b6308ef","sha512":"268f515873f0160d2a49020afdf40a9b2b4a9243df2fce5ba7cad114a8f6771d987573c65688889472c0bc6853a41cc61a42e09457fb5971b61703e540b1be80","ssdeep":"12288:7KY9J6iZolXNgr1uogYc86/O/B1rQnRIwhFhAWsfpD2LeQE8mq:7KY9poNyhdcxWBVQnAVfgLeg","tlshash":"e4d439d472a6f039439753a8547f0186f33d6854700c806cf7acf9eaa8a9599c67bf38","size":624671,"data":"","first_seen":"2023-06-30T00:51:10Z","last_seen":"2026-08-03T12:41:36.358004Z","times_seen":327,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.amlcheckvault.com/assets/web3-provider/web3-module.js","fqdn":"www.amlcheckvault.com","domain":"amlcheckvault.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d03c4ad3e137ce6485f6b3be0e8c687d","sha1":"9758374b03658c41f7bc2a177ab32dbca0e673a0","sha256":"571b68cfb2c3208ba5bd8420dafc5827de5815a9c72718e2324711fbd3b00f12","sha512":"62ae8ea5cc8e7cc7849334fb9bea591dda0006fc03664a62061434bafa1b5b8c1eabfa971884863b26def3938216bb092773d0828e22199fb70f0293433c9776","ssdeep":"6144:srR7xwaDNbrkU6twbWCNvmsMMi3kXScvbKKLNehw8K0ZpV0aX0/g3Evi2Iyj+DOo:s97xwkk/CWamsM1U1bKC0/VukePg","tlshash":"8f45f9c47691b095c3a25ad1446fd00ae33dfd647c8c4169bb57ecf32ca8a89512bf3a","size":1181323,"data":"","first_seen":"2023-04-05T17:45:39Z","last_seen":"2026-08-03T12:41:36.367111Z","times_seen":347,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.amlcheckvault.com/assets/web3-provider/ethers.js","fqdn":"www.amlcheckvault.com","domain":"amlcheckvault.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"71f8c498e792c6179d4e2840228f777a","sha1":"b651545587f6257345dc3de9ddaa444b10dedf3e","sha256":"a66293a6a2bb4dee061a68612be0be3c5c0ab7e4068ab8d98a4a357baf664c73","sha512":"14371563e83bbdce425c035bad34a0d4ae6a2f2ae20ac183602134d8b8b5b5711874d40fbcb3c7344fab4f63237a2f0dedf65b7b458b870dbb8f64ab191a5d32","ssdeep":"12288:TfamYTKkkAJs8P+H8Xb2F/nNuwEYtnob6qQr:TfjkhPaNnN9EYtwo","tlshash":"35f43b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","size":760171,"data":"","first_seen":"2023-03-13T00:48:53Z","last_seen":"2026-08-09T01:27:50.415442Z","times_seen":3776,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.amlcheckvault.com/assets/web3-provider/web3-data.js","fqdn":"www.amlcheckvault.com","domain":"amlcheckvault.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0db7e45ea5f8434056245f3672c3c241","sha1":"93bdf7441fc78be6fe1f67c48faedc72cd3a4e74","sha256":"0e5f7c28c6614ae5f1fba671c315cbf6d4ff809a305503ddc2eb3e1fe908e0d7","sha512":"120f57240748e8bef27b58124c02bd209213629e0e0de8a404f8c7f20f2656c1567c9e82c9b3d8162eaa7a5d97a7f300c797c6d8337b3b679518ac6fadbdb336","ssdeep":"24576:x+39dH71t7GgETJvUUSr2Xi58jbmpgA7q4ph184OYZ:q","tlshash":"db558ca547d05cf029ebc3a2f781ddf80706913255de1ccbd1e7ba8052a7fa5eb6240a","size":1371170,"data":"","first_seen":"2023-06-30T00:51:09Z","last_seen":"2026-08-03T12:41:36.368094Z","times_seen":320,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.amlcheckvault.com/assets/web3-provider/web3-seaport.js","fqdn":"www.amlcheckvault.com","domain":"amlcheckvault.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b2c6707f1e42c4b0459605b9e5a59e4c","sha1":"283fc30b15c201ab97da67af56ec7415cf7b7814","sha256":"5b2297d0b6a5e047db8893989f3927ded2c9f2a58646dd56add1b1a2e4b69d78","sha512":"575a379c5a92ad3bc0e693275697a679bfa517502f87f45feae110d50f8356ad6600e5f7bbf301425a5be0f45ca91612fb1b93108ec163bed3844f5de2257e49","ssdeep":"24576:VYxEUUAXPiSSwILi93wZcevwrr1LGxaxHxJ4yi8K28KGku:VYxEUUKlu","tlshash":"f5559540a3d16c9a179b8b7ab717b0f6e44f199a38c84c4fd180bc60569c727f9e5af0","size":1394145,"data":"","first_seen":"2024-02-12T02:15:30Z","last_seen":"2026-07-27T11:44:45.130811Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.amlcheckvault.com/assets/web3-provider.js","fqdn":"www.amlcheckvault.com","domain":"amlcheckvault.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"53431e0f703138eea518089661152c90","sha1":"f21ff2950d4348b731f9b73afde6df16298ff808","sha256":"981d311fc8bcc05afd7cbc435dc7de55805749efbdb3c8f2f7065857ca6121ff","sha512":"a0968db4c7ed472d54db56d534a21f23d81c00b4977d0808214657771e16bf4b3ff51f76afae7585045ae2beddc7dcc1891fc25199abe8a97e220df8335ec816","ssdeep":"3072:E4X4r7TVsPlJdq8fGvRDys7k7I80XA5AWm6tyXStC2//r68Esrw8Sj0xBFnfORt:E4onTcN0XA5AWm6tyXStDrRvORt","tlshash":"ee04d7102fa855ac638fae3ea707bbe1c0161d6e748485abe2047da4ddd5323e7f5234","size":184303,"data":"","first_seen":"2025-10-08T23:09:46.904155Z","last_seen":"2025-10-08T23:09:46.904155Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.amlcheckvault.com/","fqdn":"www.amlcheckvault.com","domain":"amlcheckvault.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"02e6d69e607f81ab259dc93f47beb9c4","sha1":"72c9aaebefde6dc0f30f42605a9245f0bdc69f13","sha256":"07ab6f3c29ea608f630cd01ff252c300276dd9a049ce1dbbdac83a5ccf67dbae","sha512":"58083b9cc3814eadb6b3f96dc40de2d493d9465a5d0f285bd2c81e0b3b8b5346d734942337ac758ed10a8b2710b198448a47331337d95ed564f84029c2abd34b","ssdeep":"","tlshash":"6ae0c22d5bf21477023fc4610a3fba4b369868330388959672a409794ef476ae1f90ea","size":301,"data":"","first_seen":"2025-09-11T23:48:43.827576Z","last_seen":"2025-10-08T23:09:46.920317Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.amlcheckvault.com/assets/web3-provider/web3-loader.js","fqdn":"www.amlcheckvault.com","domain":"amlcheckvault.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b64ec349c7eeb4324f4e7c20eb7fc98","sha1":"c09046d05daa28ef73e4bf3b58bd6518ce98a271","sha256":"801d62fc02f89e7c1b414392e066dcda139ea3154cb3a48da721ff9a9df49f1f","sha512":"e92c61f409b0a56e41654c1f867089473bed649bf3a8d7167fd1a179993295863f20d0a63b20c5e2c20ba6ee55dab82802c06591cd39d188489a479deefc8b23","ssdeep":"768:sCoOXPhfU4Ui8YG7uOFQgauwF4ifTSQoc8S:SOXXwYG7XQTd4irgS","tlshash":"5b13b8f957a0a8f089a787d5aa131e09fa159c77c7624315f2bc274dbfd2e0cc806e91","size":41716,"data":"","first_seen":"2023-10-17T15:07:19Z","last_seen":"2026-08-03T21:00:55.094799Z","times_seen":405,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.amlcheckvault.com/assets/web3-provider/web3-connect.js","fqdn":"www.amlcheckvault.com","domain":"amlcheckvault.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"47f795b848c217887b6b777101941080","sha1":"e35aedb35e68be3a777324fd92adf7396132b7b2","sha256":"39f201db3b9481261cc1660c3c2f9880fb09ef44c1e5fe5d9e2fd9deb818bd10","sha512":"ec7124aea23a2262ca514584d77395d39f27134ed5938b4dee942ef87170067e4195b2e9feb595b68deb412cd1916d539c658f06a36543fe54708ef7869ff93c","ssdeep":"6144:Nyk4F3cPmw7kM9YTIPAIhKVlbolFdQMPjqUY2OoGHFiRlQIiH+O3+2zrbwRbCNvr:0SY0zGliQIipDwRbamsjEmLR","tlshash":"e7f4f984b6a4b061439765a4003f540ff27aba2d780a44bcf654d8f6bcbc98d653bf39","size":747370,"data":"","first_seen":"2023-03-07T14:37:40Z","last_seen":"2026-08-08T06:13:35.481633Z","times_seen":654,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.amlcheckvault.com/assets/web3-provider/web3-alert.js","fqdn":"www.amlcheckvault.com","domain":"amlcheckvault.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6309738593ca0c1bd04700c4f01bc3c","sha1":"50d56a5bed5242c3ff2cae3e3fbef5522c26cfea","sha256":"22becfcf833e51cc71faf4b3a99c596e5ef3879543f7007065c8a9730692b6ad","sha512":"f8d5374e47b6bc6d63f22bf9fc836ab4c7dfc4d015a02c229bcc801fc00af1fe843b1652eeafbfc830774293542902197012c3bfe1cd8ba10ee8316132c218af","ssdeep":"1536:etDaj7HoTsRY7OzoSXMg9pIDBgb89rp4qomjqfSTAFZmvxlZUJZoKOwqYfEQc7AA:aF+balAF8kDoXjD7","tlshash":"1be385692ef210a20dab64bc278ba005b6615117b609cd94bdacd7104fdff3486f27ed","size":145398,"data":"","first_seen":"2023-05-09T18:10:24Z","last_seen":"2026-08-03T12:41:36.361684Z","times_seen":395,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.amlcheckvault.com/assets/web3-provider/ethereum-tx.js","fqdn":"www.amlcheckvault.com","domain":"amlcheckvault.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":false,"md5":"75df8d29cd9c96b0f29edf2b940da23b","sha1":"de4e9f213eb0b0c77ed78e54f35c093800499301","sha256":"5c9805c397f6744b6bf1aafdc22980094c41e659c636aa453981659fdf873eaf","sha512":"eb8600f68e6da8d03479718ac024d83cc377b6caffb82c7e3806e1cf7cd21d8056e7ffd1db65a5af1624a3c00b6e96571a8460da7dff79f861e7962030f05ef9","ssdeep":"3072:FRpgpHv8o3GVhs8YgHbGpLsev6nshcn1v41C7d8WrB33Tw+8nbdJ7b53Q:FkGVBfCNvmsg1vQcKdQ","tlshash":"26642a89f6607451436671a4012f640ff67afa2e5949006cf258e8fb3df89c9963bf38","size":324950,"data":"","first_seen":"2023-04-05T17:45:39Z","last_seen":"2026-08-03T12:41:36.357102Z","times_seen":377,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.amlcheckvault.com/assets/web3-provider/web3-modal.js","fqdn":"www.amlcheckvault.com","domain":"amlcheckvault.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.amlcheckvault.com/","date":"2025-10-08T23:09:12.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amlcheckvault.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 02:54:07 GMT","end":"Mon, 17 Nov 2025 02:54:06 GMT"},"fingerprint":{"sha1":"80:4D:21:10:1B:3F:FC:C8:31:35:E3:6D:F5:F1:4F:CD:36:FC:BE:FD","sha256":"62:9F:2E:6F:78:E8:75:F6:40:06:E9:D0:84:FB:83:7F:4E:78:32:CB:C5:C1:FD:B2:25:2D:3E:A5:7D:E9:06:32"}}},"request":{"raw":"GET /assets/web3-provider/web3-modal.js HTTP/1.1\r\nHost: www.amlcheckvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.amlcheckvault.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Oct 2025 23:09:12 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 23 Jul 2025 05:15:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10442\r\ndate: Wed, 08 Oct 2025 23:09:12 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":37639,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (2304), with CRLF line terminators","md5":"eed7d4b80780bb8adee3cbc67d7f98ff","sha1":"20f450d0eaf88312c005763e9036aeed80a225a0","sha256":"5e0ebe3158a15aba5a5e00e9bb2327769203ed6c28b6fd7aca2155d7e05cadc4","sha512":"66c43c8d29392d3e8435d8273fa23c2653e3cf4a36d875f97195100121e59ba73c1b8c7430c41a01a765893f4f0b97b3c153ede123d688ba3f00fcbe7fd74d96","ssdeep":"384:yuWDxb0OzbJ3vF/ll0blqHuCUCaDr/S1ziayMkrN21GecFZPtDQseaTrHyhfdsG2:KV39Nl08O/CaDbS1/k97rShZFc/","tlshash":"acf286f02bec12b4853f434376592d74bb1114fa9ebabf4575fe1a828f96e0c412a4d2","first_seen":"2024-05-02T20:25:27Z","last_seen":"2026-08-03T21:00:55.072731Z","times_seen":208,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"www.amlcheckvault.com/assets/web3-provider/web3-loader.js","fqdn":"www.amlcheckvault.com","domain":"amlcheckvault.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.amlcheckvault.com/","date":"2025-10-08T23:09:12.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amlcheckvault.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 02:54:07 GMT","end":"Mon, 17 Nov 2025 02:54:06 GMT"},"fingerprint":{"sha1":"80:4D:21:10:1B:3F:FC:C8:31:35:E3:6D:F5:F1:4F:CD:36:FC:BE:FD","sha256":"62:9F:2E:6F:78:E8:75:F6:40:06:E9:D0:84:FB:83:7F:4E:78:32:CB:C5:C1:FD:B2:25:2D:3E:A5:7D:E9:06:32"}}},"request":{"raw":"GET /assets/web3-provider/web3-loader.js HTTP/1.1\r\nHost: www.amlcheckvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.amlcheckvault.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Oct 2025 23:09:12 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 23 Jul 2025 05:15:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7163\r\ndate: Wed, 08 Oct 2025 23:09:12 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":41716,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2342), with CRLF line terminators","md5":"4b64ec349c7eeb4324f4e7c20eb7fc98","sha1":"c09046d05daa28ef73e4bf3b58bd6518ce98a271","sha256":"801d62fc02f89e7c1b414392e066dcda139ea3154cb3a48da721ff9a9df49f1f","sha512":"e92c61f409b0a56e41654c1f867089473bed649bf3a8d7167fd1a179993295863f20d0a63b20c5e2c20ba6ee55dab82802c06591cd39d188489a479deefc8b23","ssdeep":"768:sCoOXPhfU4Ui8YG7uOFQgauwF4ifTSQoc8S:SOXXwYG7XQTd4irgS","tlshash":"5b13b8f957a0a8f089a787d5aa131e09fa159c77c7624315f2bc274dbfd2e0cc806e91","first_seen":"2023-10-17T15:07:19Z","last_seen":"2026-08-03T21:00:55.094799Z","times_seen":405,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"www.amlcheckvault.com/assets/web3-provider/web3-data.js","fqdn":"www.amlcheckvault.com","domain":"amlcheckvault.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.amlcheckvault.com/","date":"2025-10-08T23:09:12.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amlcheckvault.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 02:54:07 GMT","end":"Mon, 17 Nov 2025 02:54:06 GMT"},"fingerprint":{"sha1":"80:4D:21:10:1B:3F:FC:C8:31:35:E3:6D:F5:F1:4F:CD:36:FC:BE:FD","sha256":"62:9F:2E:6F:78:E8:75:F6:40:06:E9:D0:84:FB:83:7F:4E:78:32:CB:C5:C1:FD:B2:25:2D:3E:A5:7D:E9:06:32"}}},"request":{"raw":"GET /assets/web3-provider/web3-data.js HTTP/1.1\r\nHost: www.amlcheckvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.amlcheckvault.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Oct 2025 23:09:12 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 23 Jul 2025 05:15:57 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 758106\r\ndate: Wed, 08 Oct 2025 23:09:12 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1371170,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (50156), with CRLF line terminators","md5":"593fe112236e6db2f6b5de107a784c84","sha1":"3f4f7741358e4db02a665fafb479415260797ef8","sha256":"ca6fccf55e9e90bbe35a4ece74355fc1485c2a6d00bf7af0a4f2b11bfacbc18d","sha512":"43077452a37a755f742821c95c42567be6fa9c8cb50a5926068bf8bef5885b0b2e886ee7b5921f7b8a315ccd5430f5c9eb608cc5aede934b5a84fffe8afb487c","ssdeep":"24576:x+39dH71t7GgETJvUUSr2Xi58jbmpgA7qa:K","tlshash":"b6258ca557d05cf029ebc3a2f780ddf80706913265ce1ccbd1e7ba8052a7fa5e76640a","first_seen":"2025-08-06T14:19:38.880602Z","last_seen":"2026-08-03T12:41:36.35519Z","times_seen":66,"resource_available":false,"data":null}},"time_used":650,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":515,"receive":135,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"www.amlcheckvault.com/assets/web3-provider/ethereum-tx.js","fqdn":"www.amlcheckvault.com","domain":"amlcheckvault.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.amlcheckvault.com/","date":"2025-10-08T23:09:12.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amlcheckvault.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 02:54:07 GMT","end":"Mon, 17 Nov 2025 02:54:06 GMT"},"fingerprint":{"sha1":"80:4D:21:10:1B:3F:FC:C8:31:35:E3:6D:F5:F1:4F:CD:36:FC:BE:FD","sha256":"62:9F:2E:6F:78:E8:75:F6:40:06:E9:D0:84:FB:83:7F:4E:78:32:CB:C5:C1:FD:B2:25:2D:3E:A5:7D:E9:06:32"}}},"request":{"raw":"GET /assets/web3-provider/ethereum-tx.js HTTP/1.1\r\nHost: www.amlcheckvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.amlcheckvault.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Oct 2025 23:09:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 23 Jul 2025 05:15:55 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 91756\r\ndate: Wed, 08 Oct 2025 23:09:13 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":324950,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (43042), with CRLF line terminators","md5":"75df8d29cd9c96b0f29edf2b940da23b","sha1":"de4e9f213eb0b0c77ed78e54f35c093800499301","sha256":"5c9805c397f6744b6bf1aafdc22980094c41e659c636aa453981659fdf873eaf","sha512":"eb8600f68e6da8d03479718ac024d83cc377b6caffb82c7e3806e1cf7cd21d8056e7ffd1db65a5af1624a3c00b6e96571a8460da7dff79f861e7962030f05ef9","ssdeep":"3072:FRpgpHv8o3GVhs8YgHbGpLsev6nshcn1v41C7d8WrB33Tw+8nbdJ7b53Q:FkGVBfCNvmsg1vQcKdQ","tlshash":"26642a89f6607451436671a4012f640ff67afa2e5949006cf258e8fb3df89c9963bf38","first_seen":"2023-04-05T17:45:39Z","last_seen":"2026-08-03T12:41:36.357102Z","times_seen":377,"resource_available":true,"data":null}},"time_used":1114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1089,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"investfreedoms.world/","fqdn":"investfreedoms.world","domain":"investfreedoms.world","tld":"world"},"ip":{"addr":"172.67.205.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.amlcheckvault.com/","date":"2025-10-08T23:09:14.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investfreedoms.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Sep 2025 13:30:48 GMT","end":"Thu, 18 Dec 2025 14:29:32 GMT"},"fingerprint":{"sha1":"BD:0F:41:22:3B:7F:BE:0E:96:24:56:32:77:26:05:32:88:F0:25:7D","sha256":"28:D9:DA:ED:10:BE:6C:81:BF:FA:5E:B6:8A:DE:57:18:9B:C8:BD:D9:28:64:B9:77:15:0F:BD:55:FA:88:80:B5"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: investfreedoms.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.amlcheckvault.com/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 513\r\nOrigin: https://www.amlcheckvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 23:09:15 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"afe8-tHMINuFpzHOLtUZbb0Q0JLPmKC4\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C3E42ocP7ngccfeDEq2GdSvl%2FNnQo8oLSJaJ4wZ4QTQ3Eif80kM3TpiJ5%2B6pIkaPajzuPrzQu23gBXbtIOg6blLsiLNwcjpKgiw99%2BAf2bGyMbt3\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98b94e08881d4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45032,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with very long lines (45032), with no line terminators","md5":"1247872d8ccc9fd96ecb06602359dd1a","sha1":"b4730836e169cc738bb5465b6f443424b3e6282e","sha256":"d9dd95bd34f6197d7e379b2535008934e52a3ee9198bc42cb76d4dbe1d720347","sha512":"45d2da9dccb0f347e4171fd6a53305b9514ab6587701e7d6c20bfa4844fffe4f787a139b16d8d2854fad2bbccae2115a58c8052348ed40d99ccd4a0e71060f31","ssdeep":"768:RHEZ8U2LwAzum7f3eMcBEcBrGBP7w3EnX8JlonsjXfjEHjVr:ei1cSchGR7wv/zjG","tlshash":"b713cce4bc8478d123a8a7bbf2655c3e172107f57d0f4e1948cf93a11b32659eea580e","first_seen":"2025-10-08T23:09:46.898224Z","last_seen":"2025-10-08T23:09:46.898224Z","times_seen":1,"resource_available":false,"data":null}},"time_used":503,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":503,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.amlcheckvault.com/assets/web3-provider/web3-router.js","fqdn":"www.amlcheckvault.com","domain":"amlcheckvault.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.amlcheckvault.com/","date":"2025-10-08T23:09:12.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amlcheckvault.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 02:54:07 GMT","end":"Mon, 17 Nov 2025 02:54:06 GMT"},"fingerprint":{"sha1":"80:4D:21:10:1B:3F:FC:C8:31:35:E3:6D:F5:F1:4F:CD:36:FC:BE:FD","sha256":"62:9F:2E:6F:78:E8:75:F6:40:06:E9:D0:84:FB:83:7F:4E:78:32:CB:C5:C1:FD:B2:25:2D:3E:A5:7D:E9:06:32"}}},"request":{"raw":"GET /assets/web3-provider/web3-router.js HTTP/1.1\r\nHost: www.amlcheckvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.amlcheckvault.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Oct 2025 23:09:12 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 23 Jul 2025 05:15:57 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 171030\r\ndate: Wed, 08 Oct 2025 23:09:12 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":624671,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (58483)","md5":"85a56c216646e3aa7ae57bab1b834845","sha1":"2a2cd889995e1d2a2c469afca8e7605034afd2d6","sha256":"c259624218132a2cd36ad673de1ef15631307c4c491c3c63b5e930084b6308ef","sha512":"268f515873f0160d2a49020afdf40a9b2b4a9243df2fce5ba7cad114a8f6771d987573c65688889472c0bc6853a41cc61a42e09457fb5971b61703e540b1be80","ssdeep":"12288:7KY9J6iZolXNgr1uogYc86/O/B1rQnRIwhFhAWsfpD2LeQE8mq:7KY9poNyhdcxWBVQnAVfgLeg","tlshash":"e4d439d472a6f039439753a8547f0186f33d6854700c806cf7acf9eaa8a9599c67bf38","first_seen":"2023-06-30T00:51:10Z","last_seen":"2026-08-03T12:41:36.358004Z","times_seen":327,"resource_available":true,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":250,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"www.amlcheckvault.com/assets/web3-provider/web3-module.js","fqdn":"www.amlcheckvault.com","domain":"amlcheckvault.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.amlcheckvault.com/","date":"2025-10-08T23:09:12.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amlcheckvault.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 02:54:07 GMT","end":"Mon, 17 Nov 2025 02:54:06 GMT"},"fingerprint":{"sha1":"80:4D:21:10:1B:3F:FC:C8:31:35:E3:6D:F5:F1:4F:CD:36:FC:BE:FD","sha256":"62:9F:2E:6F:78:E8:75:F6:40:06:E9:D0:84:FB:83:7F:4E:78:32:CB:C5:C1:FD:B2:25:2D:3E:A5:7D:E9:06:32"}}},"request":{"raw":"GET /assets/web3-provider/web3-module.js HTTP/1.1\r\nHost: www.amlcheckvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.amlcheckvault.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Oct 2025 23:09:12 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 23 Jul 2025 05:15:57 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 315624\r\ndate: Wed, 08 Oct 2025 23:09:12 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1181323,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65469), with CRLF line terminators","md5":"d31789ed77a363dfd9d485d5bf7b2f02","sha1":"940ce5fc29a7c6c46799fb972c3336e661b2da07","sha256":"89e44ed2f0e289c431dbfb62723d17cc1e03ca65f9c1ad574f9100ce170a91ea","sha512":"8aa847451bb6837a430cd7b8bab5bd7a74aa779e8f1afce466b393d7a10ce61af25bc93d55bae9564a53b5e5acb913ce346c0d1b7903b001a7d590d2b2d46dc8","ssdeep":"6144:srR7xwaDNbrkU6twbWCNvmsMMi3kXScvdIpKLNehw8K0ZpV0aX0/g3Evi2Iyj+q:s97xwkk/CWamsM1U18C0/Vut","tlshash":"8135e9c47291b165c2a25ed5402fd00ae33dfda87c4c5169bb17ecf72cb8a49512af3a","first_seen":"2025-10-08T23:09:46.900386Z","last_seen":"2025-10-08T23:09:46.900386Z","times_seen":1,"resource_available":false,"data":null}},"time_used":506,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":416,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"www.amlcheckvault.com/assets/web3-provider/web3-seaport.js","fqdn":"www.amlcheckvault.com","domain":"amlcheckvault.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.amlcheckvault.com/","date":"2025-10-08T23:09:12.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amlcheckvault.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 02:54:07 GMT","end":"Mon, 17 Nov 2025 02:54:06 GMT"},"fingerprint":{"sha1":"80:4D:21:10:1B:3F:FC:C8:31:35:E3:6D:F5:F1:4F:CD:36:FC:BE:FD","sha256":"62:9F:2E:6F:78:E8:75:F6:40:06:E9:D0:84:FB:83:7F:4E:78:32:CB:C5:C1:FD:B2:25:2D:3E:A5:7D:E9:06:32"}}},"request":{"raw":"GET /assets/web3-provider/web3-seaport.js HTTP/1.1\r\nHost: www.amlcheckvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.amlcheckvault.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Oct 2025 23:09:12 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 23 Jul 2025 05:15:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 343755\r\ndate: Wed, 08 Oct 2025 23:09:12 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1394145,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8409bd44cc9607a1785103eeca0bab1b","sha1":"7bc230c316a5464261b9d0d104efd0e96b869152","sha256":"69c0a23d91d9b2d73b8b466b70c69d4aac96a9a295d742bf0cf8559de356a38d","sha512":"34ad01e3b4d07eced34b8cbd7d6e7f1529d0f0e88a6d7b01dbe2c572bdae6ded9cf62046f00334af4e6a4e6a82e75f0db1962586932c753fcf79436ce544d07b","ssdeep":"24576:VYxEUUAXPiSSwILi93wZcevwrr1LGxaxHxJ4y6:VYxEUUKW","tlshash":"5625a540e2d1ac99179b8b76b717b0f6e44f19aa38c84c4fe040bc60569c727f9e5af4","first_seen":"2025-07-30T19:56:55.442463Z","last_seen":"2026-07-27T11:44:45.123493Z","times_seen":52,"resource_available":false,"data":null}},"time_used":550,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":504,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"www.amlcheckvault.com/assets/web3-provider/ethers.js","fqdn":"www.amlcheckvault.com","domain":"amlcheckvault.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.amlcheckvault.com/","date":"2025-10-08T23:09:12.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amlcheckvault.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 02:54:07 GMT","end":"Mon, 17 Nov 2025 02:54:06 GMT"},"fingerprint":{"sha1":"80:4D:21:10:1B:3F:FC:C8:31:35:E3:6D:F5:F1:4F:CD:36:FC:BE:FD","sha256":"62:9F:2E:6F:78:E8:75:F6:40:06:E9:D0:84:FB:83:7F:4E:78:32:CB:C5:C1:FD:B2:25:2D:3E:A5:7D:E9:06:32"}}},"request":{"raw":"GET /assets/web3-provider/ethers.js HTTP/1.1\r\nHost: www.amlcheckvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.amlcheckvault.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Oct 2025 23:09:12 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 23 Jul 2025 05:15:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 174013\r\ndate: Wed, 08 Oct 2025 23:09:12 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":760171,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"71f8c498e792c6179d4e2840228f777a","sha1":"b651545587f6257345dc3de9ddaa444b10dedf3e","sha256":"a66293a6a2bb4dee061a68612be0be3c5c0ab7e4068ab8d98a4a357baf664c73","sha512":"14371563e83bbdce425c035bad34a0d4ae6a2f2ae20ac183602134d8b8b5b5711874d40fbcb3c7344fab4f63237a2f0dedf65b7b458b870dbb8f64ab191a5d32","ssdeep":"12288:TfamYTKkkAJs8P+H8Xb2F/nNuwEYtnob6qQr:TfjkhPaNnN9EYtwo","tlshash":"35f43b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","first_seen":"2023-03-13T00:48:53Z","last_seen":"2026-08-09T01:27:50.415442Z","times_seen":3776,"resource_available":true,"data":null}},"time_used":653,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":555,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"www.amlcheckvault.com/assets/web3-provider.js","fqdn":"www.amlcheckvault.com","domain":"amlcheckvault.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.amlcheckvault.com/","date":"2025-10-08T23:09:12.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amlcheckvault.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 02:54:07 GMT","end":"Mon, 17 Nov 2025 02:54:06 GMT"},"fingerprint":{"sha1":"80:4D:21:10:1B:3F:FC:C8:31:35:E3:6D:F5:F1:4F:CD:36:FC:BE:FD","sha256":"62:9F:2E:6F:78:E8:75:F6:40:06:E9:D0:84:FB:83:7F:4E:78:32:CB:C5:C1:FD:B2:25:2D:3E:A5:7D:E9:06:32"}}},"request":{"raw":"GET /assets/web3-provider.js HTTP/1.1\r\nHost: www.amlcheckvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.amlcheckvault.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Oct 2025 23:09:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 26 Jul 2025 14:51:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 37940\r\ndate: Wed, 08 Oct 2025 23:09:13 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":184303,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64810), with no line terminators","md5":"53431e0f703138eea518089661152c90","sha1":"f21ff2950d4348b731f9b73afde6df16298ff808","sha256":"981d311fc8bcc05afd7cbc435dc7de55805749efbdb3c8f2f7065857ca6121ff","sha512":"a0968db4c7ed472d54db56d534a21f23d81c00b4977d0808214657771e16bf4b3ff51f76afae7585045ae2beddc7dcc1891fc25199abe8a97e220df8335ec816","ssdeep":"3072:E4X4r7TVsPlJdq8fGvRDys7k7I80XA5AWm6tyXStC2//r68Esrw8Sj0xBFnfORt:E4onTcN0XA5AWm6tyXStDrRvORt","tlshash":"ee04d7102fa855ac638fae3ea707bbe1c0161d6e748485abe2047da4ddd5323e7f5234","first_seen":"2025-10-08T23:09:46.904155Z","last_seen":"2025-10-08T23:09:46.904155Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1110,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"min-api.cryptocompare.com/data/pricemulti?fsyms=ETH,BNB,MATIC,AVAX,ARB,FTM,OP\u0026tsyms=USD","fqdn":"min-api.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"20.4.130.154","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.amlcheckvault.com/","date":"2025-10-08T23:09:14.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"min-api.cryptocompare.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 12 Aug 2025 17:27:58 GMT","end":"Mon, 10 Nov 2025 17:27:57 GMT"},"fingerprint":{"sha1":"79:9A:6A:DC:FD:52:89:9D:48:55:FC:A3:02:BC:33:26:62:E8:DF:D4","sha256":"95:E2:11:46:5E:D1:EF:2B:28:E3:99:C2:6B:8E:51:79:20:E4:4A:DB:FD:32:C6:AD:79:B7:A0:4C:8C:AB:7C:E8"}}},"request":{"raw":"GET /data/pricemulti?fsyms=ETH,BNB,MATIC,AVAX,ARB,FTM,OP\u0026tsyms=USD HTTP/1.1\r\nHost: min-api.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.amlcheckvault.com/\r\nOrigin: https://www.amlcheckvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 08 Oct 2025 23:09:14 GMT\r\nContent-Type: application/json; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Security-Policy: frame-ancestors 'none'\r\nAccess-Control-Allow-Origin: https://www.amlcheckvault.com\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type, Cookie, Set-Cookie, Authorization\r\nAccess-Control-Allow-Credentials: true\r\nCache-Control: public, max-age=10\r\nX-CryptoCompare-Cache-HIT: false\r\nX-CryptoCompare-Server-Id: cc-api-min-v2-23\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":149,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"33601dfa6a9b0836de0cec1bebd71dcf","sha1":"cdd2f5905908128d8c635d76a8b7c0d5834cec61","sha256":"68e81a8258c739e11059496a5f45b7a2d101c19c1b3fecaddc4c8a82cbb1e9bd","sha512":"cfdcb4a95ce6b093352ed08a1f1e7a7224b2aee2b10e798def1a85e1db38e68f03a8b46932a38412feeb1e645e838b2eddc04ff76e77e111fae269a92dd9e304","ssdeep":"","tlshash":"eec02b048eed919443053d233cc0f1f1d004372ac370c40080018cad49d40cd19ce00d","first_seen":"2025-10-08T23:09:46.905452Z","last_seen":"2025-10-08T23:09:46.905452Z","times_seen":1,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":86,"dns":20,"connect":18,"send":0,"wait":30,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.amlcheckvault.com/assets/web3-provider/web3-connect.js","fqdn":"www.amlcheckvault.com","domain":"amlcheckvault.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.amlcheckvault.com/","date":"2025-10-08T23:09:12.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amlcheckvault.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 02:54:07 GMT","end":"Mon, 17 Nov 2025 02:54:06 GMT"},"fingerprint":{"sha1":"80:4D:21:10:1B:3F:FC:C8:31:35:E3:6D:F5:F1:4F:CD:36:FC:BE:FD","sha256":"62:9F:2E:6F:78:E8:75:F6:40:06:E9:D0:84:FB:83:7F:4E:78:32:CB:C5:C1:FD:B2:25:2D:3E:A5:7D:E9:06:32"}}},"request":{"raw":"GET /assets/web3-provider/web3-connect.js HTTP/1.1\r\nHost: www.amlcheckvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.amlcheckvault.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Oct 2025 23:09:12 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 23 Jul 2025 05:15:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 197667\r\ndate: Wed, 08 Oct 2025 23:09:12 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":747370,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (50824)","md5":"47f795b848c217887b6b777101941080","sha1":"e35aedb35e68be3a777324fd92adf7396132b7b2","sha256":"39f201db3b9481261cc1660c3c2f9880fb09ef44c1e5fe5d9e2fd9deb818bd10","sha512":"ec7124aea23a2262ca514584d77395d39f27134ed5938b4dee942ef87170067e4195b2e9feb595b68deb412cd1916d539c658f06a36543fe54708ef7869ff93c","ssdeep":"6144:Nyk4F3cPmw7kM9YTIPAIhKVlbolFdQMPjqUY2OoGHFiRlQIiH+O3+2zrbwRbCNvr:0SY0zGliQIipDwRbamsjEmLR","tlshash":"e7f4f984b6a4b061439765a4003f540ff27aba2d780a44bcf654d8f6bcbc98d653bf39","first_seen":"2023-03-07T14:37:40Z","last_seen":"2026-08-08T06:13:35.481633Z","times_seen":654,"resource_available":true,"data":null}},"time_used":421,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":321,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"investfreedoms.world/","fqdn":"investfreedoms.world","domain":"investfreedoms.world","tld":"world"},"ip":{"addr":"172.67.205.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.amlcheckvault.com/","date":"2025-10-08T23:09:14.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investfreedoms.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Sep 2025 13:30:48 GMT","end":"Thu, 18 Dec 2025 14:29:32 GMT"},"fingerprint":{"sha1":"BD:0F:41:22:3B:7F:BE:0E:96:24:56:32:77:26:05:32:88:F0:25:7D","sha256":"28:D9:DA:ED:10:BE:6C:81:BF:FA:5E:B6:8A:DE:57:18:9B:C8:BD:D9:28:64:B9:77:15:0F:BD:55:FA:88:80:B5"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: investfreedoms.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.amlcheckvault.com/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 497\r\nOrigin: https://www.amlcheckvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 23:09:14 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"48-a7DeCrPA2v0zJ3XMq3JoA+goGEk\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ggNRVWzULjZijcRzuk3R67dmiWFiiMyNhrBLMpq9Ty%2B%2B31UIFEFoKXqDkHic3QEaj1EaDlAKTGA7oEtFaUr21kENu0OkucavOf503TQhBAwtuour\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98b94e055c7f4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":72,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"0b601915809e2d5c7054c898008f3a51","sha1":"6bb0de0ab3c0dafd332775ccab726803e8281849","sha256":"33b3de8d571c49a7fe75ea409bbe094cff1424edf80d0f406b3ef7adcb68a7a9","sha512":"e2adf651ab36dede15569dc4fb2ee2cba47780888e11788b5e8acf122f95e3f09d9cc8c01c55d95d0879d0795075a902db245780f3a274f2b83e67a45d96b011","ssdeep":"","tlshash":"0fa022c8b380f8c0b02cb2a0b08e082c320200a3008e230208bc028f002c00a8008382","first_seen":"2025-10-08T23:09:46.908561Z","last_seen":"2025-10-08T23:09:46.908561Z","times_seen":1,"resource_available":false,"data":null}},"time_used":980,"timings":{"blocked":252,"dns":53,"connect":1,"send":0,"wait":475,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.amlcheckvault.com/","fqdn":"www.amlcheckvault.com","domain":"amlcheckvault.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-08T23:09:11.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amlcheckvault.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 02:54:07 GMT","end":"Mon, 17 Nov 2025 02:54:06 GMT"},"fingerprint":{"sha1":"80:4D:21:10:1B:3F:FC:C8:31:35:E3:6D:F5:F1:4F:CD:36:FC:BE:FD","sha256":"62:9F:2E:6F:78:E8:75:F6:40:06:E9:D0:84:FB:83:7F:4E:78:32:CB:C5:C1:FD:B2:25:2D:3E:A5:7D:E9:06:32"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.amlcheckvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Wed, 23 Jul 2025 05:15:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 789499\r\ndate: Wed, 08 Oct 2025 23:09:12 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1636615,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (54992)","md5":"a76835b05260e3e7f43e18047be56685","sha1":"1f66ee8a20014dabb1ed54983adb993612e73c06","sha256":"97682f88624bf719b549861a271b9d9887541006f5d304e71a95f59483eb0dc4","sha512":"ee2c9c23209f1a76a96bf63caf8188c4b834b7e7df43c5e59a31ae87df17a5511aa827c96c0900a136bd401eb4f95c49adb4296f65b067be9b59466ead12e155","ssdeep":"12288:UrRRoAN41SnF6G0XuHqHICI4VctOHfV5YJRTdKvzXRCbrzXe7EHWCZsJs/c5lUkR:qvvN416GWHOHfV5Y/dCCbrTe7EV0Gg","tlshash":"0e259f779197bec63aa1aa4e14083df16c2488c747ddd520fd8c736e27eae442d7c868","first_seen":"2025-09-11T23:48:43.819269Z","last_seen":"2025-10-08T23:09:46.909732Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1273,"timings":{"blocked":384,"dns":223,"connect":79,"send":0,"wait":81,"receive":419,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"www.amlcheckvault.com/assets/web3-provider/web3-alert.js","fqdn":"www.amlcheckvault.com","domain":"amlcheckvault.com","tld":"com"},"ip":{"addr":"198.251.84.200","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.amlcheckvault.com/","date":"2025-10-08T23:09:12.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.amlcheckvault.com","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 02:54:07 GMT","end":"Mon, 17 Nov 2025 02:54:06 GMT"},"fingerprint":{"sha1":"80:4D:21:10:1B:3F:FC:C8:31:35:E3:6D:F5:F1:4F:CD:36:FC:BE:FD","sha256":"62:9F:2E:6F:78:E8:75:F6:40:06:E9:D0:84:FB:83:7F:4E:78:32:CB:C5:C1:FD:B2:25:2D:3E:A5:7D:E9:06:32"}}},"request":{"raw":"GET /assets/web3-provider/web3-alert.js HTTP/1.1\r\nHost: www.amlcheckvault.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.amlcheckvault.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 15 Oct 2025 23:09:12 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 23 Jul 2025 05:15:55 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29514\r\ndate: Wed, 08 Oct 2025 23:09:12 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":145398,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (949)","md5":"f6309738593ca0c1bd04700c4f01bc3c","sha1":"50d56a5bed5242c3ff2cae3e3fbef5522c26cfea","sha256":"22becfcf833e51cc71faf4b3a99c596e5ef3879543f7007065c8a9730692b6ad","sha512":"f8d5374e47b6bc6d63f22bf9fc836ab4c7dfc4d015a02c229bcc801fc00af1fe843b1652eeafbfc830774293542902197012c3bfe1cd8ba10ee8316132c218af","ssdeep":"1536:etDaj7HoTsRY7OzoSXMg9pIDBgb89rp4qomjqfSTAFZmvxlZUJZoKOwqYfEQc7AA:aF+balAF8kDoXjD7","tlshash":"1be385692ef210a20dab64bc278ba005b6615117b609cd94bdacd7104fdff3486f27ed","first_seen":"2023-05-09T18:10:24Z","last_seen":"2026-08-03T12:41:36.361684Z","times_seen":395,"resource_available":true,"data":null}},"time_used":506,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":449,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026family=Nunito:ital,wght@0,400;0,500;0,600;0,700;1,400;1,500;1,600;1,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.amlcheckvault.com/","date":"2025-10-08T23:09:14.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:42:00 GMT","end":"Mon, 15 Dec 2025 08:41:59 GMT"},"fingerprint":{"sha1":"E9:4F:AE:49:69:8C:15:95:B2:F7:9C:C0:6F:DA:FF:C6:06:1A:22:46","sha256":"89:56:CA:FF:85:BC:CA:ED:64:3B:13:28:77:62:7B:0C:FD:25:AB:78:F3:7E:B5:34:21:E4:79:F2:F9:D2:8C:E7"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026family=Nunito:ital,wght@0,400;0,500;0,600;0,700;1,400;1,500;1,600;1,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.amlcheckvault.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 08 Oct 2025 23:09:14 GMT\r\ndate: Wed, 08 Oct 2025 23:09:14 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24736,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c98488a0e7e032c7dd0338081f4ff8cd","sha1":"e6f277a559e5a1f4f671563b94f8108726967033","sha256":"b3fd86bf7ad0824ddd5f83d983b11464bdef5e2399638740642123195ed4a9fe","sha512":"1313d2b3133f9e610c98209fb3a4da9039e062783597d7fc6badcfc5ef22f3d924228eea9938820bbec7af6b4a7a6ba70f0a960587d3dbc7266855bf281c1f37","ssdeep":"384:vXuM0p2+bb2vbfoMS2kbqBVd2VbhG6c2SbUP5l7QFDPeo:P","tlshash":"79b2ca92001be500ab872cc227cf7e3aed8e61557455c579abfd4cc8acabd631364b1e","first_seen":"2025-09-19T04:34:09.043423Z","last_seen":"2026-08-01T08:27:41.616604Z","times_seen":146,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":85,"dns":1,"connect":15,"send":0,"wait":36,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investfreedoms.world/","fqdn":"investfreedoms.world","domain":"investfreedoms.world","tld":"world"},"ip":{"addr":"172.67.205.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.amlcheckvault.com/","date":"2025-10-08T23:09:15.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investfreedoms.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Sep 2025 13:30:48 GMT","end":"Thu, 18 Dec 2025 14:29:32 GMT"},"fingerprint":{"sha1":"BD:0F:41:22:3B:7F:BE:0E:96:24:56:32:77:26:05:32:88:F0:25:7D","sha256":"28:D9:DA:ED:10:BE:6C:81:BF:FA:5E:B6:8A:DE:57:18:9B:C8:BD:D9:28:64:B9:77:15:0F:BD:55:FA:88:80:B5"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: investfreedoms.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.amlcheckvault.com/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 617\r\nOrigin: https://www.amlcheckvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Oct 2025 23:09:16 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f060-iKJ7QfSEpHRiFr34TTGYnnRzKGQ\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kWAYHpIP0q9Nt0CVxTPnR%2Fh9HmQeosGmc107DeLEMEDHechevLqZmnDSDtaJ9rmnreZntFzShMj09F0nphzMKTkSmuhBMGi4rmDMvWEtk7w72jYs\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98b94e0ebef94e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61536,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with very long lines (61536), with no line terminators","md5":"6c7b9ed4afbb66c55c3bc838ccb1f0f8","sha1":"88a27b41f484a4746216bdf84d31989e74732864","sha256":"a14806dcd7c09bd4ec38741cfdef46425dde19e7ad94728c71366d8136df9aa9","sha512":"1d9c36aa2e8fe028c80b91fb3989211456a88b6c89fe30bfa28f7ad3656b90f8fd8f6cf1cbbaaef138a08baa6e6ae0d3bf7a9a1a9c906e209bf5f3b456d18dff","ssdeep":"384:BmeVt/noMe2XAN5wHfzQ2ek/QNZkSVpHy7JkZKGSj0kHKhFhkTyPikyTikyAMUgG:6DJVcuNAjOLVYsizZTb7YC","tlshash":"34535803fd997df5ab94f663c2468dad6b3201f7202b663d4ccb828205ab52edb17705","first_seen":"2025-05-05T18:42:21.848112Z","last_seen":"2025-10-08T23:09:46.913583Z","times_seen":3,"resource_available":false,"data":null}},"time_used":544,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":543,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"investfreedoms.world/","fqdn":"investfreedoms.world","domain":"investfreedoms.world","tld":"world"},"ip":{"addr":"172.67.205.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.amlcheckvault.com/","date":"2025-10-08T23:09:16.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"investfreedoms.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 19 Sep 2025 13:30:48 GMT","end":"Thu, 18 Dec 2025 14:29:32 GMT"},"fingerprint":{"sha1":"BD:0F:41:22:3B:7F:BE:0E:96:24:56:32:77:26:05:32:88:F0:25:7D","sha256":"28:D9:DA:ED:10:BE:6C:81:BF:FA:5E:B6:8A:DE:57:18:9B:C8:BD:D9:28:64:B9:77:15:0F:BD:55:FA:88:80:B5"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: investfreedoms.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/plain\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.amlcheckvault.com/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 689\r\nOrigin: https://www.amlcheckvault.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=enwNUcjR0mAr5%2FgcTT3Q1GpP5PU2OgHUcN7uy0k91ZIAF7zckG%2BcL6h0sj4eM0023D0HQLHfwrRcq9EaL6QpcGh79i%2B7KcinUhd9WMMMwk1%2BYDH3\"}]}\r\netag: W/\"28-VGiA7Wgc64xkvvFLKpPkp4CEkWE\"\r\ndate: Wed, 08 Oct 2025 23:09:18 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98b94e1408dd0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"ddad4d480f7a29f08d3f6e2a05ce833c","sha1":"546880ed681ceb8c64bef14b2a93e4a780849161","sha256":"52ce62ae7b7bbb5274592854257a345a28b030ebbec43babee678dfe12349bb9","sha512":"f7168d03fc41a5d666911e1206ac3b947504a4d5f05507f1efc120f84648abcc1874e4a6fb7fcd01817186b069170f28ba8f37a22390bc19f9613624dda4519b","ssdeep":"","tlshash":"9090045415c0f4d0300c3141f05d740174111503405d535700f313cf045500741747d5","first_seen":"2024-04-10T19:34:28Z","last_seen":"2025-10-08T23:09:46.914896Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1621,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1620,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}