{"report_id":"414d6a41-9dcb-488a-8901-f0a25fe3b99b","version":6,"status":"done","tags":[],"date":"2025-09-21T03:43:32Z","url":{"schema":"https","addr":"aml-security.world/","fqdn":"aml-security.world","domain":"aml-security.world","tld":"world"},"ip":{"addr":"104.21.26.61","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"aml-security.world/","fqdn":"aml-security.world","domain":"aml-security.world","tld":"world"},"title":"Empower Your Finance Journey with AML Security Solutions"},"submit":{"url":{"schema":"https","addr":"aml-security.world/","fqdn":"aml-security.world","domain":"aml-security.world","tld":"world"},"ip":{"addr":"104.21.26.61","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-26T03:43:32Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"aml-security.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"aml-security.world","ip":{"addr":"104.21.26.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":5,"request_count":5,"received_data":3566445,"sent_data":2394,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":1678,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":155373,"sent_data":442,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"aml-security.world/","fqdn":"aml-security.world","domain":"aml-security.world","tld":"world"},"ip":{"addr":"172.67.135.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8e14de9d84a21090dd46c97b8879bc56","sha1":"973b9b5eb2412ba2d952f211b164980d4269d12f","sha256":"ecb551e01393b39076ab02613c97d795dbceb21cffc25bcdd622e3349362a0d9","sha512":"bfa5b1930c6ad694ac7a6b3650f873bb6d8fee08f8c888b739ee9f64d473d78158f3db68e6224483d2eefb119612553b08062e64e082b1dd10415a8ac56fd190","ssdeep":"3072:62oz6TmMjgIdGBOKP2AktBHOthZ4wMEHuHrsU6O81r+BDsvr6+MSH3HQCduPnYbN:S3JhZ4w5HuHrTx8YgufYbt9kK2i1","tlshash":"93a463e153ab9d1fc8be8903ad357d4d50b12f72048ab52bba27b5ccc66c1838b5c794","size":457195,"data":"","first_seen":"2025-06-09T11:07:43.685268Z","last_seen":"2026-02-06T02:00:20.343997Z","times_seen":429,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6cf353c3b8738cded0ecaf2100e7da1e","sha1":"9fbbee8565587f0a3a897a84045d7a216efa3a64","sha256":"985f1224c0eeec99d367a9db35e58e44b21e7eb9ce45831b15b4c108e41fd97f","sha512":"b9d13adaf4af1e21d923ac1ab3e69f8bdd755c9b984c4018c660470c7b7dd079f100c72f7b8215f64cdbe632990cc416e88542b4f170194610b5e685b4678da5","ssdeep":"1536:iKJqLfGmNQ2X8NFb4uvEOUjF3j7MtOBlxvHlik3+AkNk7yGCdmFiBnyOlV/TDQr/:nJebsNy1ikuGeBnR/TDQ9chHdN+ui","tlshash":"dbe3e789a221b67646e3169b93e4c211b3b50544b80ac4e470fd4c9f597ec9c13feefa","size":154597,"data":"","first_seen":"2025-06-28T19:00:56.686116Z","last_seen":"2026-08-06T12:43:35.673253Z","times_seen":26657,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aml-security.world/","fqdn":"aml-security.world","domain":"aml-security.world","tld":"world"},"ip":{"addr":"172.67.135.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f0b00bab35a428c884a29acf576d5d48","sha1":"d514f6440a492c0823a0d998dd397c24c0fc4604","sha256":"4f1868fb949eb3f26ef6d3a7fddd05827279050b0ba33d63aa363d08b8dd8322","sha512":"477bab975b3c53a62b448ee7f8407cebaba168b1b7b150bdec9c12c485f2d096ae4d68a1d0bb3a31edef942b46bb4906a4d9fe5ebbc93f6b4ea35daab7d6f87d","ssdeep":"","tlshash":"95114543356a107150b7e9091abe52007a6111435caf7c31789c5b08af3f32ee0fbbe8","size":939,"data":"","first_seen":"2025-09-21T03:43:55.609464Z","last_seen":"2025-09-21T03:43:55.609464Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aml-security.world/350dd2c2","fqdn":"aml-security.world","domain":"aml-security.world","tld":"world"},"ip":{"addr":"104.21.26.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3398fac05b24e8b4dbff54816767208","sha1":"4242480e7c0424d7066007d9b67d1bcbfb81cb72","sha256":"dcdb448fc9bffebd8d09adaf848c5de51454b1093c7ff406936432fdde23cd89","sha512":"ec368db9fb9b915ce5f5943b9f7de2fb3c6e42289097c59d174d76b5667af5e2bca343050f518c7fadfc4533f6829fbb92d05083f5890d11017b1c2b70f5929a","ssdeep":"3072:E2cf8Mwj+6FWXWKteYeLBROxhHwwsQdahrCC8o01jEBXsvr6+MSH3HQEduPH3ShW:QxRhHwwDdahrth06uufShPLA2u","tlshash":"85b4ebd34b92580de0bed852ad395cbc80b1a7613c867587bb53f8dee61c7a14f48788","size":499740,"data":"","first_seen":"2025-06-09T11:07:43.641536Z","last_seen":"2026-02-06T02:00:20.273995Z","times_seen":430,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"aml-security.world/350dd2c2","fqdn":"aml-security.world","domain":"aml-security.world","tld":"world"},"ip":{"addr":"104.21.26.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aml-security.world/","date":"2025-09-21T03:43:08.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aml-security.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 Aug 2025 00:07:16 GMT","end":"Mon, 24 Nov 2025 22:53:26 GMT"},"fingerprint":{"sha1":"57:59:B4:29:C2:08:2F:3C:93:66:83:25:CF:4D:BD:0E:81:60:F8:17","sha256":"EF:A0:4E:9C:A2:05:8A:A8:94:58:A2:21:52:A7:F3:E4:03:12:FD:2D:5C:91:23:D9:DF:A2:B3:2E:4B:A6:FA:4B"}}},"request":{"raw":"GET /350dd2c2 HTTP/1.1\r\nHost: aml-security.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aml-security.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Sep 2025 03:43:08 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MhlQUCs7uQHqZKrYDFGbLatBgSm10RrVKDl8IVInzsMCsms4tsZtER%2BRdTBKPND9%2BWqqDS%2FiyXO2vX1S%2BqfvuXacOoT3WoVsbdXF9Fr1Clo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, no-store, private, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 98268e7bbeb3b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":499740,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65519)","md5":"b3398fac05b24e8b4dbff54816767208","sha1":"4242480e7c0424d7066007d9b67d1bcbfb81cb72","sha256":"dcdb448fc9bffebd8d09adaf848c5de51454b1093c7ff406936432fdde23cd89","sha512":"ec368db9fb9b915ce5f5943b9f7de2fb3c6e42289097c59d174d76b5667af5e2bca343050f518c7fadfc4533f6829fbb92d05083f5890d11017b1c2b70f5929a","ssdeep":"3072:E2cf8Mwj+6FWXWKteYeLBROxhHwwsQdahrCC8o01jEBXsvr6+MSH3HQEduPH3ShW:QxRhHwwDdahrth06uufShPLA2u","tlshash":"85b4ebd34b92580de0bed852ad395cbc80b1a7613c867587bb53f8dee61c7a14f48788","first_seen":"2025-06-09T11:07:43.641536Z","last_seen":"2026-02-06T02:00:20.273995Z","times_seen":430,"resource_available":true,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":379,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"aml-security.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aml-security.world/favicon.ico","fqdn":"aml-security.world","domain":"aml-security.world","tld":"world"},"ip":{"addr":"104.21.26.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aml-security.world/","date":"2025-09-21T03:43:08.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aml-security.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 Aug 2025 00:07:16 GMT","end":"Mon, 24 Nov 2025 22:53:26 GMT"},"fingerprint":{"sha1":"57:59:B4:29:C2:08:2F:3C:93:66:83:25:CF:4D:BD:0E:81:60:F8:17","sha256":"EF:A0:4E:9C:A2:05:8A:A8:94:58:A2:21:52:A7:F3:E4:03:12:FD:2D:5C:91:23:D9:DF:A2:B3:2E:4B:A6:FA:4B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: aml-security.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aml-security.world/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Sep 2025 03:43:08 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tEd0VNb%2BZS5gUx5w6d43yQpF6YztNIZ8n82keOUCdOj27%2BTm8NZI9jWssK%2BV57qQ1s8KlNd%2BPkLnLndKJUmnsd1nm9uRwLRqoIdK7ZflUSc%3D\"}]}\r\ncontent-encoding: br\r\ncache-control: no-cache, no-store, private, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: BYPASS\r\ncf-ray: 98268e7e9eb7b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3914,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"14cde521a169f05462e59095a2cc8666","sha1":"03aa5ceee32b0066aae33709cf30272b13495d66","sha256":"d1ae4c26e480e60e7f1a35c247d923fd290a77708f52dbcd4cee6c0516974ce2","sha512":"c352d97fa91bb04634560fd4e0cce0bbde1971c2a1f3b6bec1f6b25b734d556f7f4b2134c887dad165c83d2e05caeff9569e494727feae5653bbc4b3a5080fae","ssdeep":"","tlshash":"a281b675b8e028115253946087cfbb183678d55322058ca9b68c27c78fc6f9cd5df6dd","first_seen":"2025-09-21T03:43:55.599203Z","last_seen":"2025-09-21T03:43:55.599203Z","times_seen":1,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"aml-security.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aml-security.world/350dd2c2","fqdn":"aml-security.world","domain":"aml-security.world","tld":"world"},"ip":{"addr":"104.21.26.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aml-security.world/","date":"2025-09-21T03:43:10.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aml-security.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 Aug 2025 00:07:16 GMT","end":"Mon, 24 Nov 2025 22:53:26 GMT"},"fingerprint":{"sha1":"57:59:B4:29:C2:08:2F:3C:93:66:83:25:CF:4D:BD:0E:81:60:F8:17","sha256":"EF:A0:4E:9C:A2:05:8A:A8:94:58:A2:21:52:A7:F3:E4:03:12:FD:2D:5C:91:23:D9:DF:A2:B3:2E:4B:A6:FA:4B"}}},"request":{"raw":"POST /350dd2c2 HTTP/1.1\r\nHost: aml-security.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aml-security.world/\r\nContent-Type: application/json\r\nContent-Length: 7949\r\nOrigin: https://aml-security.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 21 Sep 2025 03:43:10 GMT\r\ncontent-length: 46\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, no-store, private, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zMFf8rOZKzb4gzDWCy5mFY1ut2ojHAUG6i69scI3RJXFCt67h1yqC1vbPDVMdyOlMf78bT%2F%2FQEK7NNzfYRbCjEgqrPNEBzNClLKxSx1LenM%3D\"}]}\r\ncf-ray: 98268e8a0ec8b51b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46,"size_decoded":0,"mime_type":"text/plain","magic":"JSON text data","md5":"6a3fb77b75a09a6a9be445f64efc5a1c","sha1":"e3a3e8422b34df9ae395de61d646bc2178f09b49","sha256":"d294c2e10fc014b0203cb38f581516f2c69c82894189a34d57c0a4e241bb0085","sha512":"a8d790df67b06da3056800c3031589bb2e8399827e20b34a1b3c4d583b85b7d762c42653566a455b03b8b211ef8b0b0fe8c6eb8daa6773f02fce70c3f896696f","ssdeep":"","tlshash":"5290028a2020052a5405620229b0b0a85145c1140c11682a204844844d460014628155","first_seen":"2025-09-21T03:43:55.603121Z","last_seen":"2025-09-21T03:43:55.603121Z","times_seen":1,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"aml-security.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aml-security.world/","fqdn":"aml-security.world","domain":"aml-security.world","tld":"world"},"ip":{"addr":"172.67.135.144","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-21T03:43:10.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aml-security.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 Aug 2025 00:07:16 GMT","end":"Mon, 24 Nov 2025 22:53:26 GMT"},"fingerprint":{"sha1":"57:59:B4:29:C2:08:2F:3C:93:66:83:25:CF:4D:BD:0E:81:60:F8:17","sha256":"EF:A0:4E:9C:A2:05:8A:A8:94:58:A2:21:52:A7:F3:E4:03:12:FD:2D:5C:91:23:D9:DF:A2:B3:2E:4B:A6:FA:4B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: aml-security.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _abck=ed654039-e120-4358-95ca-48f7acd60b72\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 03:43:10 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, no-store, private, must-revalidate\r\npragma: no-cache\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qofuYl7%2FzucltyDct2Py%2F2EuFp1jpb0n9LgUkqP0sgg7eVOM4TOgIZ39FIrd%2BSvrcQ8VOZAFAuhXiLGhazWYn1MzcvWN6LOtXbL2YOJqOlY%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 98268e8ba9f156c6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3055667,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (23855)","md5":"003179decb205a3143216b2925db15e8","sha1":"c6f2135f0fec4c84954aec0fe596d0971d174b00","sha256":"7dac9e3b36a7d2e376443c919f33eb72678ef5f92a49946fd578090fb3dd5ac4","sha512":"f56cbcb09f7b78533857adadd2d84744120e55d635016bf152261a63ba7d6fc4750d97ac902f63fc210ac8fa8f77dbb39ffe0196c269046c99b5dc2ff5decba1","ssdeep":"24576:/tYFgFMBnaRsyt9TN3kJhkSL7HJwcdO6AkiHqZJJQ1cg3RUbZyMrtrm0BfcKFt/G:g5qsuOJeSL7HJwcdO6A5HqZJJQ1cg32Q","tlshash":"a22528134a1b61116d2d3e6b539a3d087010f2938e43d784fafd68e8dfafa6a154c36d","first_seen":"2025-09-21T03:43:55.605179Z","last_seen":"2025-09-21T03:43:55.605179Z","times_seen":1,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":22,"dns":2,"connect":1,"send":0,"wait":183,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"aml-security.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aml-security.world/","date":"2025-09-21T03:43:11.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/swiper@11/swiper-bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aml-security.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 11.2.10\r\nx-jsd-version-type: version\r\netag: W/\"25be5-n7vuhWVYfwo6iXqEBF16IW76OmQ\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 21 Sep 2025 03:43:11 GMT\r\nage: 17294\r\nx-served-by: cache-fra-eddf8230082-FRA, cache-hel1410023-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 44022\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":154597,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65281)","md5":"6cf353c3b8738cded0ecaf2100e7da1e","sha1":"9fbbee8565587f0a3a897a84045d7a216efa3a64","sha256":"985f1224c0eeec99d367a9db35e58e44b21e7eb9ce45831b15b4c108e41fd97f","sha512":"b9d13adaf4af1e21d923ac1ab3e69f8bdd755c9b984c4018c660470c7b7dd079f100c72f7b8215f64cdbe632990cc416e88542b4f170194610b5e685b4678da5","ssdeep":"1536:iKJqLfGmNQ2X8NFb4uvEOUjF3j7MtOBlxvHlik3+AkNk7yGCdmFiBnyOlV/TDQr/:nJebsNy1ikuGeBnR/TDQ9chHdN+ui","tlshash":"dbe3e789a221b67646e3169b93e4c211b3b50544b80ac4e470fd4c9f597ec9c13feefa","first_seen":"2025-06-28T19:00:56.686116Z","last_seen":"2026-08-06T12:43:35.673253Z","times_seen":26657,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":35,"dns":1,"connect":13,"send":0,"wait":13,"receive":29,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aml-security.world/","fqdn":"aml-security.world","domain":"aml-security.world","tld":"world"},"ip":{"addr":"104.21.26.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-21T03:43:07.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aml-security.world","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 27 Aug 2025 00:07:16 GMT","end":"Mon, 24 Nov 2025 22:53:26 GMT"},"fingerprint":{"sha1":"57:59:B4:29:C2:08:2F:3C:93:66:83:25:CF:4D:BD:0E:81:60:F8:17","sha256":"EF:A0:4E:9C:A2:05:8A:A8:94:58:A2:21:52:A7:F3:E4:03:12:FD:2D:5C:91:23:D9:DF:A2:B3:2E:4B:A6:FA:4B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: aml-security.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 21 Sep 2025 03:43:07 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, no-store, private, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xnmFGX7bbksw0zrHQJV8NG1%2FlxRf6dmcGDud8SaBetz7lXTe%2FnFJxfijH2%2FgekfzsVLrgxxRQw2nNXHRis%2F2Mz4XNlOI0N%2Fiu5zqAKVTGkn1Ww%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 98268e79bd078deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3914,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"14cde521a169f05462e59095a2cc8666","sha1":"03aa5ceee32b0066aae33709cf30272b13495d66","sha256":"d1ae4c26e480e60e7f1a35c247d923fd290a77708f52dbcd4cee6c0516974ce2","sha512":"c352d97fa91bb04634560fd4e0cce0bbde1971c2a1f3b6bec1f6b25b734d556f7f4b2134c887dad165c83d2e05caeff9569e494727feae5653bbc4b3a5080fae","ssdeep":"","tlshash":"a281b675b8e028115253946087cfbb183678d55322058ca9b68c27c78fc6f9cd5df6dd","first_seen":"2025-09-21T03:43:55.599203Z","last_seen":"2025-09-21T03:43:55.599203Z","times_seen":1,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":25,"dns":4,"connect":3,"send":0,"wait":165,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-09-21","alert":"Sinkholed","trigger":"aml-security.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}