{"report_id":"45d4458e-dbed-42fa-8c97-6d9a0078111f","version":6,"status":"done","tags":[],"date":"2026-02-18T17:50:00Z","url":{"schema":"https","addr":"amlglobalcheck.com/checking.html","fqdn":"amlglobalcheck.com","domain":"amlglobalcheck.com","tld":"com"},"ip":{"addr":"104.21.69.94","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"amlglobalcheck.com/checking.html","fqdn":"amlglobalcheck.com","domain":"amlglobalcheck.com","tld":"com"},"title":"AML Bot","dom":{"size":112652,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (61117)","md5":"0e594cd27983f9ad4ab3f265e2862f10","sha1":"00e8399f5103a20e1b6b1f853f28c31f3fadc4bb","sha256":"d2bb2657fdcaecb9c49001045f437e1d5c5c841f796a7bae1723970908975ddc","sha512":"d752a755edb7654202147c17f64729ae9f36a7b82e4f4028263f3e3b3d89cfe49f6a757ae321b7c167763cad17c221d7d8a9f80b06459dd5199b5bcd3fbb371e","ssdeep":"3072:IAZtK6guMiZp6BAb4iAZtK6guMiZp6Bv+yyd:ISK6guMiZ0BriSK6guMiZ0BH0","tlshash":"78b37cf4419b1c6772b78a80a48c3f606cb4a5c7d71dd664f9ec2ca48fcb468de1d268","dom_hash":"domhashfda71450edd214fad2780d4f1b2d7e70","first_seen":"2026-02-18T17:50:10.054509Z","last_seen":"2026-02-18T17:50:10.054509Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"amlglobalcheck.com/checking.html","fqdn":"amlglobalcheck.com","domain":"amlglobalcheck.com","tld":"com"},"ip":{"addr":"104.21.69.94","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-25T17:50:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-18","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"amlglobalcheck.com/assets/index-DgfeWB38.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-18","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"amlglobalcheck.com/assets/index-Ddg3ms6q.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-18","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"amlglobalcheck.com/assets/code.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"tonapi.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"explorer-api.walletconnect.com","ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-12-19","domain_rank":466611,"first_seen":"2022-10-10T18:16:28Z","last_seen":"2026-02-12T00:08:04.368198Z","alert_count":0,"request_count":6,"received_data":15895,"sent_data":3943,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"axaxaxaxaxxaaxxxaxa.xyz","ip":{"addr":"104.21.22.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-30","domain_rank":0,"first_seen":"2025-11-04T02:58:33.85388Z","last_seen":"2026-02-11T15:17:48.972179Z","alert_count":0,"request_count":4,"received_data":3584,"sent_data":2154,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-15T22:17:53.373077Z","alert_count":0,"request_count":1,"received_data":5573,"sent_data":507,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-15T22:14:55.382377Z","alert_count":0,"request_count":1,"received_data":73799,"sent_data":541,"comment":"","tags":null,"fingerprints":null},{"fqdn":"amlglobalcheck.com","ip":{"addr":"104.21.69.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-27","domain_rank":0,"first_seen":"2026-02-18T17:49:58.6923Z","last_seen":"2026-02-18T17:49:59.879732Z","alert_count":3,"request_count":19,"received_data":8707220,"sent_data":8626,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"tonapi.io","ip":{"addr":"104.18.34.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-04-24","domain_rank":37995,"first_seen":"2022-04-26T16:09:28Z","last_seen":"2026-02-11T11:51:37.599009Z","alert_count":2,"request_count":2,"received_data":35412,"sent_data":1060,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"amlglobalcheck.com/assets/index-DN6lpdUA.js","fqdn":"amlglobalcheck.com","domain":"amlglobalcheck.com","tld":"com"},"ip":{"addr":"104.21.69.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"404ce700f7dca230fca605ab238369ab","sha1":"217d0d44e7f11ea68c4dc7249986527dd8ddd01b","sha256":"c9178cd2c627ec62986f9f384915f3053b413ceda3d8ad3664cb2d6a2067f07a","sha512":"5a83be4336514e0121433866a90a07e78048ae71fd1827a7caf58fe160dd4a4bac1c368206eda27affa1feb2bc27aff8ba6b2887c125e33de156e6df48316232","ssdeep":"6144:XWD3RLP/peccnWUOj4KF9X48hGPIckv9LSME:MPcuUOj4KF9XYPFo9eR","tlshash":"a664d7482ef71061432774b9578f9401f735d41b215dcd88bbac93a02f4ae38daf6ab9","size":326753,"data":"","first_seen":"2026-02-18T17:50:10.084607Z","last_seen":"2026-02-18T17:50:10.084607Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlglobalcheck.com/assets/index-DgfeWB38.js","fqdn":"amlglobalcheck.com","domain":"amlglobalcheck.com","tld":"com"},"ip":{"addr":"104.21.69.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8ba478a5619feefcb4fdfc0cac27124","sha1":"08e6b478fd5f39f6d60c196261d6b16c9d721a32","sha256":"29141800ca2f7911f4b4b4943d57f1d160e8cbe6428bd21a7b5c029a7e828110","sha512":"295d2fdd93ef37e52129691a63f21668221e50d4d9693e4ba830d2e0fee892b7e2fee88d7716dd059e00c2a06511bf9c84a2ddab7c3b203ef61f3fd9fbb252b5","ssdeep":"6144:c4GyK6CDAgSpASHWWIQxZtQo4BWWZs8zKVHLxOAlYzZIMTGYXVNWG:lGyuSpASHZIQxZtQo4BWWZs8zKVHLxOP","tlshash":"4034f79027d0659923074fbb7727b0f1e82f182a795d498be1687f7428d6723eaf5830","size":244830,"data":"","first_seen":"2026-02-18T17:50:10.079047Z","last_seen":"2026-02-18T17:50:10.079047Z","times_seen":1,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-18","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"amlglobalcheck.com/assets/index-DgfeWB38.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null}},{"url":{"schema":"https","addr":"amlglobalcheck.com/assets/index-Ddg3ms6q.js","fqdn":"amlglobalcheck.com","domain":"amlglobalcheck.com","tld":"com"},"ip":{"addr":"104.21.69.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef0879dc884e54ac526893d8e4b862d4","sha1":"e7a5a545d2a0a495804d786e28239d0f11098c88","sha256":"a97a6248e9d9a17ea4f1bcad5e3404d3d6d94979bdf28e1197382a2ab6599d5e","sha512":"34df7ffdc83233b2db788814c598e1fd4234c47a98132c153c30a7d79751583e46ccfd596b9ea93a062c74e2c2ed1e5ea7ac3fa037a390eaee1eefb63479dbcb","ssdeep":"49152:+q/mFub7aO9OHrMsTCzNtyV3BxHpJiCBGvrStm8VW2K4MUvT+1RS5YDqOA50:6ub7a/wsOUsz","tlshash":"3e664b4063c0e89c439bdf76fb3bb1e9e45a0a9e7898494ae145fc3069c5617e9fc930","size":6630304,"data":"","first_seen":"2026-02-18T17:50:10.092874Z","last_seen":"2026-02-18T17:50:10.092874Z","times_seen":1,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-18","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"amlglobalcheck.com/assets/index-Ddg3ms6q.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null}},{"url":{"schema":"https","addr":"amlglobalcheck.com/checking.html","fqdn":"amlglobalcheck.com","domain":"amlglobalcheck.com","tld":"com"},"ip":{"addr":"104.21.69.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9abd8d90e749e4489549a23a06ea8f85","sha1":"da2cf5c69c357320b470a1b1f3722db6263f3606","sha256":"6a29b7b3b791583d42223cc7ac5a6c05f14535c49c5359b20090fc12d2633a19","sha512":"32a8b91bd6c0459b490975e66b58ce90f6938dfb6db39ab83289f69d531c61ffcbee441c9523e047ee34634435cf9663a21ae0154e5e344a873652fd6c30cd19","ssdeep":"","tlshash":"b6e02e10388290b3428b5eaac68303a0b130f197aa08614978ed86881f9bc1128e08e8","size":344,"data":"","first_seen":"2025-05-06T17:55:51.392616Z","last_seen":"2026-05-07T15:43:24.741989Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlglobalcheck.com/assets/code.js","fqdn":"amlglobalcheck.com","domain":"amlglobalcheck.com","tld":"com"},"ip":{"addr":"104.21.69.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ea306b8038077f37515b5b0d883de14","sha1":"6114fbaa8a602b36d8686c1c607540f87c8828f6","sha256":"cc263f9bdffd3aa2743a6f69c0bfda4dab3bbc4fb36b96f17b04d942670b6611","sha512":"70b23f78d94285b25ec465c7fbfbf43f04a35881e464e79a01ada1da1676a237a5bb787db633f4b0f5624639b6077aec3865eba331c901a666a8d3bd9416ff33","ssdeep":"","tlshash":"fc41aa193790719443f27bb50d3f70d6eaaeea5978a9440da1009ef13f50479ea22f78","size":1890,"data":"","first_seen":"2026-02-18T17:50:10.074235Z","last_seen":"2026-02-18T17:50:10.074235Z","times_seen":1,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-18","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"amlglobalcheck.com/assets/code.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amlglobalcheck.com/checking.html","date":"2026-02-18T17:49:38.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlglobalcheck.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 18 Feb 2026 17:49:38 GMT\r\ndate: Wed, 18 Feb 2026 17:49:38 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4887,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3fd96ba77783845730c343cf00ac7a93","sha1":"bc4f7f4f71aeae387232155c55c4f031c5f3f769","sha256":"27b95b2fcbc857ba25f7e5a707c5c4c06c5cf93415519b7669c19f4045edca37","sha512":"20b137cf9c61842c7bad62dd6c36125833022552379ad97324dbee2c2e9cb0303b17a9aee813ea2bcdbb68541c8c6edbfecfcfb2858cf27c2cff480d756d80cd","ssdeep":"96:aYg4aMzqYg4aybFZHYg4agkYg4aUJ3vYg4aERYg4aYGJc+uTYg4aR6NDO4a3qO4L:vywfydyGy63gy/yFVyR73xpmj3U8fHN","tlshash":"37a1ed91006f9104ea431dd627cf7e32ad8e51956082e27d6ffd2dca6cdbd23122874c","first_seen":"2025-09-10T21:50:06.177565Z","last_seen":"2026-08-03T10:49:55.368116Z","times_seen":20418,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":119,"dns":1,"connect":7,"send":0,"wait":19,"receive":0,"ssl":107},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amlglobalcheck.com/checking.html","date":"2026-02-18T17:49:38.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://amlglobalcheck.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 06:19:30 GMT\r\nexpires: Sat, 13 Feb 2027 06:19:30 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nage: 473408\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72964,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72964, version 1.0","md5":"91247c94dcda6ff52b445d71d6bbfb81","sha1":"ad2f62363ed047b430b91f32afa31df51fcd7c5e","sha256":"6a3c3e024b31eeacbf1f19c3c7be78612d91c623186f64035a50038241dad4f9","sha512":"a12dcac84e9f9ae02df3aabe29d76994281cd1005edca471194605cfcd6a0456eec872fd28c63c72ae124804d0b47d8377048caae49c40b0a18b5d6be4d6213f","ssdeep":"768:zbw+rLBkMxbCkupj4Y69/Yr71+j9pWiKahMM6+AWEqXB0oGuNGku+QCcIKE205C7:zbw+iwuS/iZWeaO1zP1/9Esvf8fXnm1","tlshash":"8f6302244e3c50c2a54d33aa286940f6f6e79c75b2b79ba4a69c589cd410f329cdfdc4","first_seen":"2025-05-29T18:51:13.223047Z","last_seen":"2026-08-03T11:44:18.626518Z","times_seen":31289,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":76,"dns":1,"connect":21,"send":0,"wait":27,"receive":37,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlglobalcheck.com/assets/tron-trx-logo-Vnk26SPU.png","fqdn":"amlglobalcheck.com","domain":"amlglobalcheck.com","tld":"com"},"ip":{"addr":"104.21.69.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlglobalcheck.com/checking.html","date":"2026-02-18T17:49:37.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlglobalcheck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 14:57:19 GMT","end":"Sat, 25 Apr 2026 15:55:04 GMT"},"fingerprint":{"sha1":"A8:7E:3F:73:FD:8A:05:27:CB:D4:C9:E9:7A:6A:77:5A:A0:2E:5C:D0","sha256":"17:07:43:22:AA:3B:9E:4E:A2:06:1E:40:3A:18:1B:CD:76:D7:00:1E:68:B9:84:30:87:92:B9:A8:64:16:1A:79"}}},"request":{"raw":"GET /assets/tron-trx-logo-Vnk26SPU.png HTTP/1.1\r\nHost: amlglobalcheck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlglobalcheck.com/checking.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 17:49:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 103975\r\nlast-modified: Fri, 16 Jan 2026 09:32:21 GMT\r\npriority: u=4,i=?0\r\netag: \"696a05a5-19627\"\r\nexpires: Thu, 19 Feb 2026 17:49:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sYkb%2FcqkK0azPTPm8vYdlISKjKHuAVdSixzSCooHnsa8QMyV9C0VqUr%2FDHUpTnyOMzEkIPRW%2BtXMj46%2F2AlvWRBFGvCTmySiH76mg5iLchR8SQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cff5cb5cc512382-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":103975,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"de3064d6f2b2153aacb6a854038c3a79","sha1":"841f3d1f868a3d71a01649b4307b9a1c1259e399","sha256":"79b386dbf889eb7356ab585421267aebc58e152268253865be5596ba2a2ce36b","sha512":"5c8c4b45222de6310002170dc4a51c033d9153409362fe8ca6841c26f30d467b52542703fc2f078289983a115257086fd1f96c062a7b72fb0449bd4f8607f88e","ssdeep":"3072:cTN3VFvbRgzj0eMqMGc+zfbTYkyA4FI+Tjqr0Zz:6pVFvNM0ea+sTIeqcz","tlshash":"8ea3028e4407eec2cd75d478d41d0f3a762a19f86b893bf79335d1b22db17a19a2800d","first_seen":"2023-05-31T01:01:47Z","last_seen":"2026-08-02T03:55:04.165415Z","times_seen":564,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlglobalcheck.com/src/w-modal.js","fqdn":"amlglobalcheck.com","domain":"amlglobalcheck.com","tld":"com"},"ip":{"addr":"104.21.69.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlglobalcheck.com/checking.html","date":"2026-02-18T17:49:37.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlglobalcheck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 14:57:19 GMT","end":"Sat, 25 Apr 2026 15:55:04 GMT"},"fingerprint":{"sha1":"A8:7E:3F:73:FD:8A:05:27:CB:D4:C9:E9:7A:6A:77:5A:A0:2E:5C:D0","sha256":"17:07:43:22:AA:3B:9E:4E:A2:06:1E:40:3A:18:1B:CD:76:D7:00:1E:68:B9:84:30:87:92:B9:A8:64:16:1A:79"}}},"request":{"raw":"GET /src/w-modal.js HTTP/1.1\r\nHost: amlglobalcheck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlglobalcheck.com/checking.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 17:49:37 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4jatlUGSlruMYGtJBJSZ9evsHkCWhC0c00QXDYyGOO4jxUT6tuPET%2BPCgT3xsPEBYj%2BZHjjVM1r2%2FoVs%2FzYMpiAGK1w00ZFgwkXf3xDTv8qbhQ%3D%3D\"}]}\r\ncf-ray: 9cff5cb5cc552382-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":280,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"1f2c3c3066f39725aaed1c8e65e0dd38","sha1":"e050b87f4aae2ecf687f3ea3e8517b9c004e791d","sha256":"eff0f6a1e8808c05ec242ddf10cb8c6d3f8bc8fd261d4228d80263fd7ea12e5e","sha512":"88c23d1530ba3383a2137386012c93ab455ca1c2f89c60c4d2db8248c68fc2b91d91df1fbcf709c447b8899479c4d28d9e3964439fb44db9bfecef684ed5d314","ssdeep":"","tlshash":"d9d02bef5043a38b482215a079c215c2268d12f6a43e86e83dc6d48b529867ecddba8d","first_seen":"2026-02-18T17:50:01.217095Z","last_seen":"2026-02-18T17:50:10.062325Z","times_seen":2,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlglobalcheck.com/src/w-loader.js","fqdn":"amlglobalcheck.com","domain":"amlglobalcheck.com","tld":"com"},"ip":{"addr":"104.21.69.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlglobalcheck.com/checking.html","date":"2026-02-18T17:49:37.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlglobalcheck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 14:57:19 GMT","end":"Sat, 25 Apr 2026 15:55:04 GMT"},"fingerprint":{"sha1":"A8:7E:3F:73:FD:8A:05:27:CB:D4:C9:E9:7A:6A:77:5A:A0:2E:5C:D0","sha256":"17:07:43:22:AA:3B:9E:4E:A2:06:1E:40:3A:18:1B:CD:76:D7:00:1E:68:B9:84:30:87:92:B9:A8:64:16:1A:79"}}},"request":{"raw":"GET /src/w-loader.js HTTP/1.1\r\nHost: amlglobalcheck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlglobalcheck.com/checking.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 17:49:37 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xQU%2FUa%2BOPDHosbOMRYv4J%2FnSANPon9OHV%2F0CILt5S5C8j0AyvhiNXlgeLu3mAdjJ1hep6%2BtKB4bCiLv2vIsZE24XMNSOKmnQjGAM1fCxR%2B6%2B9Q%3D%3D\"}]}\r\ncf-ray: 9cff5cb5cc562382-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":280,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"1f2c3c3066f39725aaed1c8e65e0dd38","sha1":"e050b87f4aae2ecf687f3ea3e8517b9c004e791d","sha256":"eff0f6a1e8808c05ec242ddf10cb8c6d3f8bc8fd261d4228d80263fd7ea12e5e","sha512":"88c23d1530ba3383a2137386012c93ab455ca1c2f89c60c4d2db8248c68fc2b91d91df1fbcf709c447b8899479c4d28d9e3964439fb44db9bfecef684ed5d314","ssdeep":"","tlshash":"d9d02bef5043a38b482215a079c215c2268d12f6a43e86e83dc6d48b529867ecddba8d","first_seen":"2026-02-18T17:50:01.217095Z","last_seen":"2026-02-18T17:50:10.062325Z","times_seen":2,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":394,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tonapi.io/v2/blockchain/accounts/UQCY3tYl7cbAHYruuv2Rh0YlnxjQ0dsFkK9PO_LISlZTIf1o/transactions","fqdn":"tonapi.io","domain":"tonapi.io","tld":"io"},"ip":{"addr":"104.18.34.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://amlglobalcheck.com/checking.html","date":"2026-02-18T17:49:38.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tonapi.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 05:36:27 GMT","end":"Sun, 05 Apr 2026 06:36:24 GMT"},"fingerprint":{"sha1":"BF:94:AB:BF:4C:57:A6:86:A3:17:02:50:10:66:50:F3:04:3A:28:22","sha256":"8F:41:B3:1E:9C:E8:F6:2A:3E:5C:CE:E1:B2:A8:FA:33:06:11:B5:1A:62:54:A3:2B:41:D1:5E:4D:57:8C:6D:2E"}}},"request":{"raw":"GET /v2/blockchain/accounts/UQCY3tYl7cbAHYruuv2Rh0YlnxjQ0dsFkK9PO_LISlZTIf1o/transactions HTTP/1.1\r\nHost: tonapi.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amlglobalcheck.com/\r\nOrigin: https://amlglobalcheck.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 17:49:38 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncf-ray: 9cff5cbb7bb94c11-OSL\r\naccess-control-allow-origin: https://amlglobalcheck.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,X-Tonapi-Client\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17121,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c63691e67327b38ec496c54c52b1111c","sha1":"989210188d64a5ccc0c9f53d023a86a35e760281","sha256":"dee0c0879b367fb6afe1f79925ee13844db024b2d496c2c424e9c8c45db1853e","sha512":"0ff6fd2710b96cbf8a5217194c415f999bde85f10ca31dfc32f43a0d1d2a3b6fd065f8c6e88c09e2350f6d0119c7cb9df287b1ccbd5b3f884957cbe23b37fcd7","ssdeep":"192:eRv93R9P9mSOZqp7kP4R9oR5u21ePCvCGRD/7B6yRchs2iVApl4OY8N2xr/c94Vd:49vp7kPork7BuGAruF/c90kK9L","tlshash":"9c72fa20a798b5f7dbbf9501159f3e5721bc30bbd8c37c959bddc2901fa31aaa812105","first_seen":"2025-11-04T02:58:42.357951Z","last_seen":"2026-02-18T17:50:10.064396Z","times_seen":11,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":62,"dns":7,"connect":1,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"tonapi.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getAllListings?projectId=0f73abda9e52befa3057387fbfbab07a\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0\u0026recommendedIds=4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0%2C20459438007b75f4f4acb98bf29aa3b800550309646d375da5fd4aac6c2a2c66%2C0b415a746fb9ee99cce155c2ceca0c6f6061b1dbca2d722b3ba16381d0562150%2C8a0ee50d1f22f6651afcae7eb4253e52a3310b90af5daef78a8c4929a9bb99d4%2Cfbea6f68df4e6ce163c144df86da89f24cb244f19b53903e26aea9ab7de6393c","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://amlglobalcheck.com/checking.html","date":"2026-02-18T17:49:38.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getAllListings?projectId=0f73abda9e52befa3057387fbfbab07a\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0\u0026recommendedIds=4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0%2C20459438007b75f4f4acb98bf29aa3b800550309646d375da5fd4aac6c2a2c66%2C0b415a746fb9ee99cce155c2ceca0c6f6061b1dbca2d722b3ba16381d0562150%2C8a0ee50d1f22f6651afcae7eb4253e52a3310b90af5daef78a8c4929a9bb99d4%2Cfbea6f68df4e6ce163c144df86da89f24cb244f19b53903e26aea9ab7de6393c HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amlglobalcheck.com/\r\nOrigin: https://amlglobalcheck.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 17:49:38 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cff5cbbed5a4435-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4691,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9feb0f3b8ab4d14f774278d43db5b34d","sha1":"abf38dee1009cadb8d4f561b77ff5df5ff65b96e","sha256":"e3adb82135d23427cd75815f887f55d0d41af4a4f5f8a41041a94d09e3471696","sha512":"0190a5350e3ed28be25ca3e28d7e9e50ae9393e363f1062a366b3d1d9e97838b824a4cc644d19fd00754264be3ae78308a79df53e6101e3a9f30db26d5c89fe2","ssdeep":"96:nNSNbh/YiOA959Jw52te72WFMVMrhIa1WUIjls7/dVbqb+OhMEBcE9hX9hc1wWZv:8OAfvTDbU67rc5fn","tlshash":"36a145bb4f908f6e1f2007c5701d3a9c665f240bd7c46ce2f1808f6d80e9af66662562","first_seen":"2026-02-03T09:22:06.551258Z","last_seen":"2026-06-29T01:11:54.608908Z","times_seen":13,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":52,"dns":7,"connect":8,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/2e181ba3-bf6f-4599-5349-f7409bc62100?projectId=0f73abda9e52befa3057387fbfbab07a\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlglobalcheck.com/checking.html","date":"2026-02-18T17:49:38.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/2e181ba3-bf6f-4599-5349-f7409bc62100?projectId=0f73abda9e52befa3057387fbfbab07a\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://amlglobalcheck.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlglobalcheck.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 17:49:39 GMT\r\ncontent-type: image/webp\r\ncontent-length: 520\r\ncf-ray: 9cff5cbddaaa4435-ARN\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfx8sZ_gQjxblo6S9ktOMr7R0BfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=1519+3 c=1+2 v=2025.2.4 l=520 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"22c97b9c571498a31f52c5b262ba0a8f","sha1":"b28e5ef85b5bfed3fe034611dc208590c6af7d7b","sha256":"aba7699c972ec5e808625798c34ecb0e8017768cfdc5852bd13e94b7664c253c","sha512":"8ffec6e75b574d13b5a3a70ffd27763bf26f024ebb7ed5738015abdf7176f7aebe37442bb8e82177969c72b622e2bbc4e5a9593a85fa59689d0e02ed301d5ed4","ssdeep":"","tlshash":"a1f0059de63d010eda77072c6b53951318d62a65b027924c345d4c02528dfecbbecbd3","first_seen":"2025-12-31T16:29:42.661268Z","last_seen":"2026-07-25T20:24:02.794731Z","times_seen":37,"resource_available":false,"data":null}},"time_used":579,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":579,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlglobalcheck.com/assets/bnb-CTh8yboY.png","fqdn":"amlglobalcheck.com","domain":"amlglobalcheck.com","tld":"com"},"ip":{"addr":"104.21.69.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlglobalcheck.com/checking.html","date":"2026-02-18T17:49:37.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlglobalcheck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 14:57:19 GMT","end":"Sat, 25 Apr 2026 15:55:04 GMT"},"fingerprint":{"sha1":"A8:7E:3F:73:FD:8A:05:27:CB:D4:C9:E9:7A:6A:77:5A:A0:2E:5C:D0","sha256":"17:07:43:22:AA:3B:9E:4E:A2:06:1E:40:3A:18:1B:CD:76:D7:00:1E:68:B9:84:30:87:92:B9:A8:64:16:1A:79"}}},"request":{"raw":"GET /assets/bnb-CTh8yboY.png HTTP/1.1\r\nHost: amlglobalcheck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlglobalcheck.com/checking.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 17:49:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 19135\r\nlast-modified: Fri, 16 Jan 2026 09:32:21 GMT\r\npriority: u=4,i=?0\r\netag: \"696a05a5-4abf\"\r\nexpires: Thu, 19 Feb 2026 17:49:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JvfT5hmcpPC%2BvX27qIrWxUKbuAJC18%2FOE%2FECuNdO5XD6y%2FFEktsnTA9iOshAkenkYROwcsqFm5BHrFeikGuAxGFKjrb7xA%2FNYQsz5aQ5I5vH5w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cff5cb5cc532382-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19135,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit colormap, non-interlaced","md5":"0be5f877e936cb4eecb18c6e8764ee48","sha1":"ba6dfbe8a2524a21851b06772dc28366a4c8ed67","sha256":"b7358530517f1bf5681dca3e7fcd635dbd642844ab87639d43469262b87adecc","sha512":"4fb5eb1f427d1cf2c70977551c84d43be124473ffe15e6dc43361d175231271cbe02fdea07b08a124fb434d852c326f52abdcb6675ecb78f9ced01a3a61865d4","ssdeep":"384:WjufzeCOtHq+rAXb4WQScoVNOB2Q5dn9VwSFocxwqhRbO:Wjufzqs+rXSnVNOB2Wdn9VZRHy","tlshash":"b1828ec9fb2c1ab52cef81cfbdc44e954846a5dc64149ea9cba0f8b331854a40e1df5b","first_seen":"2025-01-07T12:50:12.763552Z","last_seen":"2026-06-28T23:02:15.949017Z","times_seen":26,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlglobalcheck.com/assets/index-BYBUIhTg.css","fqdn":"amlglobalcheck.com","domain":"amlglobalcheck.com","tld":"com"},"ip":{"addr":"104.21.69.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amlglobalcheck.com/checking.html","date":"2026-02-18T17:49:37.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlglobalcheck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 14:57:19 GMT","end":"Sat, 25 Apr 2026 15:55:04 GMT"},"fingerprint":{"sha1":"A8:7E:3F:73:FD:8A:05:27:CB:D4:C9:E9:7A:6A:77:5A:A0:2E:5C:D0","sha256":"17:07:43:22:AA:3B:9E:4E:A2:06:1E:40:3A:18:1B:CD:76:D7:00:1E:68:B9:84:30:87:92:B9:A8:64:16:1A:79"}}},"request":{"raw":"GET /assets/index-BYBUIhTg.css HTTP/1.1\r\nHost: amlglobalcheck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlglobalcheck.com/checking.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 17:49:37 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 16 Jan 2026 09:32:21 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"696a05a5-9027\"\r\nexpires: Thu, 19 Feb 2026 17:49:37 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CSW6rMkAoQNHoAPTc0yQXu1LYIV1w4CaHqNc0c1i0YehgLHczfb%2FF%2BFizvCneNoWky1WjpK%2B0owmtc7pfp80XWhkfcusQIhHLAygl9ky7ZBZNQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cff5cb5cc4f2382-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36903,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (27789)","md5":"78a888829c0ff6c770b1a05cdbc57a03","sha1":"b15e5cef110ce02c9910a48c41f6ee29a968d6e0","sha256":"f967205adb57ad850f16626368ece9f089e8f14359d3992cc1eabe6ce0c409de","sha512":"86ac101c224578478bdc6f41482cc672533e21cb45284dd92e21b4234fee95a6f524f76012ded8bc98d2525f24ded711c2ad20de9dbfeca6bfc5edf8d6b705a6","ssdeep":"768:jF0FfscMJihoCcZCOud8G8tKS65wqsZQ1G+dM2cl6iCRotsV84sxIKcv4g01UeEF:jaNMJihoCcZCOud8G8tKS65wqsZCG+dT","tlshash":"cbf246997a4cd100bf835b5722df2b1c95347589d4300946be2e32ca1ed1ce6b9b3fa9","first_seen":"2025-12-31T16:29:42.580771Z","last_seen":"2026-02-18T17:50:10.068831Z","times_seen":4,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlglobalcheck.com/src/modules.js","fqdn":"amlglobalcheck.com","domain":"amlglobalcheck.com","tld":"com"},"ip":{"addr":"104.21.69.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlglobalcheck.com/checking.html","date":"2026-02-18T17:49:37.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlglobalcheck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 14:57:19 GMT","end":"Sat, 25 Apr 2026 15:55:04 GMT"},"fingerprint":{"sha1":"A8:7E:3F:73:FD:8A:05:27:CB:D4:C9:E9:7A:6A:77:5A:A0:2E:5C:D0","sha256":"17:07:43:22:AA:3B:9E:4E:A2:06:1E:40:3A:18:1B:CD:76:D7:00:1E:68:B9:84:30:87:92:B9:A8:64:16:1A:79"}}},"request":{"raw":"GET /src/modules.js HTTP/1.1\r\nHost: amlglobalcheck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlglobalcheck.com/checking.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 17:49:37 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ug58lA%2F5SPZPCL%2FWN59KBVqIX5AdUj6srFDcGIYWUiFerO8ga3NsAjmsc0XvBGZLXol6lv%2BRovRFRmOK4Y32N9pJ1kOzowu7HrTGzhUF9k%2BayA%3D%3D\"}]}\r\ncf-ray: 9cff5cb85cec2382-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":280,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"1f2c3c3066f39725aaed1c8e65e0dd38","sha1":"e050b87f4aae2ecf687f3ea3e8517b9c004e791d","sha256":"eff0f6a1e8808c05ec242ddf10cb8c6d3f8bc8fd261d4228d80263fd7ea12e5e","sha512":"88c23d1530ba3383a2137386012c93ab455ca1c2f89c60c4d2db8248c68fc2b91d91df1fbcf709c447b8899479c4d28d9e3964439fb44db9bfecef684ed5d314","ssdeep":"","tlshash":"d9d02bef5043a38b482215a079c215c2268d12f6a43e86e83dc6d48b529867ecddba8d","first_seen":"2026-02-18T17:50:01.217095Z","last_seen":"2026-02-18T17:50:10.062325Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlglobalcheck.com/favicon.ico","fqdn":"amlglobalcheck.com","domain":"amlglobalcheck.com","tld":"com"},"ip":{"addr":"104.21.69.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlglobalcheck.com/checking.html","date":"2026-02-18T17:49:39.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlglobalcheck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 14:57:19 GMT","end":"Sat, 25 Apr 2026 15:55:04 GMT"},"fingerprint":{"sha1":"A8:7E:3F:73:FD:8A:05:27:CB:D4:C9:E9:7A:6A:77:5A:A0:2E:5C:D0","sha256":"17:07:43:22:AA:3B:9E:4E:A2:06:1E:40:3A:18:1B:CD:76:D7:00:1E:68:B9:84:30:87:92:B9:A8:64:16:1A:79"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: amlglobalcheck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlglobalcheck.com/checking.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 17:49:39 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\nage: 2\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BaE7%2B0Pwbu%2BCSxUHMsjwjPqg1o88EHZ58LtGyr49yrgscNqe7mpHptlZyFPC70cO7KxsUA08b7USiyfD0%2BCirFLX9c4P1I6Lg2uvSNxZ01yzOg%3D%3D\"}]}\r\ncf-ray: 9cff5cc26e5c2382-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":280,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"1f2c3c3066f39725aaed1c8e65e0dd38","sha1":"e050b87f4aae2ecf687f3ea3e8517b9c004e791d","sha256":"eff0f6a1e8808c05ec242ddf10cb8c6d3f8bc8fd261d4228d80263fd7ea12e5e","sha512":"88c23d1530ba3383a2137386012c93ab455ca1c2f89c60c4d2db8248c68fc2b91d91df1fbcf709c447b8899479c4d28d9e3964439fb44db9bfecef684ed5d314","ssdeep":"","tlshash":"d9d02bef5043a38b482215a079c215c2268d12f6a43e86e83dc6d48b529867ecddba8d","first_seen":"2026-02-18T17:50:01.217095Z","last_seen":"2026-02-18T17:50:10.062325Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlglobalcheck.com/src/modules.js","fqdn":"amlglobalcheck.com","domain":"amlglobalcheck.com","tld":"com"},"ip":{"addr":"104.21.69.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlglobalcheck.com/checking.html","date":"2026-02-18T17:49:37.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlglobalcheck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 14:57:19 GMT","end":"Sat, 25 Apr 2026 15:55:04 GMT"},"fingerprint":{"sha1":"A8:7E:3F:73:FD:8A:05:27:CB:D4:C9:E9:7A:6A:77:5A:A0:2E:5C:D0","sha256":"17:07:43:22:AA:3B:9E:4E:A2:06:1E:40:3A:18:1B:CD:76:D7:00:1E:68:B9:84:30:87:92:B9:A8:64:16:1A:79"}}},"request":{"raw":"GET /src/modules.js HTTP/1.1\r\nHost: amlglobalcheck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlglobalcheck.com/checking.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 17:49:37 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XRmHQopGFYEvI%2F1lOjP3nmUeEnyWwp2gNWJK5DdA%2FZyZG%2BbJ0ZNE1pnztgag1%2FRP10bbxUTquO5Gc9IszDPytE%2F4IFuhs4aJK1bTdQ5kwleBfg%3D%3D\"}]}\r\ncf-ray: 9cff5cb5dc572382-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":280,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"1f2c3c3066f39725aaed1c8e65e0dd38","sha1":"e050b87f4aae2ecf687f3ea3e8517b9c004e791d","sha256":"eff0f6a1e8808c05ec242ddf10cb8c6d3f8bc8fd261d4228d80263fd7ea12e5e","sha512":"88c23d1530ba3383a2137386012c93ab455ca1c2f89c60c4d2db8248c68fc2b91d91df1fbcf709c447b8899479c4d28d9e3964439fb44db9bfecef684ed5d314","ssdeep":"","tlshash":"d9d02bef5043a38b482215a079c215c2268d12f6a43e86e83dc6d48b529867ecddba8d","first_seen":"2026-02-18T17:50:01.217095Z","last_seen":"2026-02-18T17:50:10.062325Z","times_seen":2,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":387,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tonapi.io/v2/blockchain/accounts/UQCY3tYl7cbAHYruuv2Rh0YlnxjQ0dsFkK9PO_LISlZTIf1o/transactions","fqdn":"tonapi.io","domain":"tonapi.io","tld":"io"},"ip":{"addr":"104.18.34.88","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://amlglobalcheck.com/checking.html","date":"2026-02-18T17:49:38.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tonapi.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 05 Jan 2026 05:36:27 GMT","end":"Sun, 05 Apr 2026 06:36:24 GMT"},"fingerprint":{"sha1":"BF:94:AB:BF:4C:57:A6:86:A3:17:02:50:10:66:50:F3:04:3A:28:22","sha256":"8F:41:B3:1E:9C:E8:F6:2A:3E:5C:CE:E1:B2:A8:FA:33:06:11:B5:1A:62:54:A3:2B:41:D1:5E:4D:57:8C:6D:2E"}}},"request":{"raw":"GET /v2/blockchain/accounts/UQCY3tYl7cbAHYruuv2Rh0YlnxjQ0dsFkK9PO_LISlZTIf1o/transactions HTTP/1.1\r\nHost: tonapi.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amlglobalcheck.com/\r\nOrigin: https://amlglobalcheck.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 17:49:38 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncf-ray: 9cff5cbb8bd44c11-OSL\r\naccess-control-allow-origin: https://amlglobalcheck.com\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,X-Tonapi-Client\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17121,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c63691e67327b38ec496c54c52b1111c","sha1":"989210188d64a5ccc0c9f53d023a86a35e760281","sha256":"dee0c0879b367fb6afe1f79925ee13844db024b2d496c2c424e9c8c45db1853e","sha512":"0ff6fd2710b96cbf8a5217194c415f999bde85f10ca31dfc32f43a0d1d2a3b6fd065f8c6e88c09e2350f6d0119c7cb9df287b1ccbd5b3f884957cbe23b37fcd7","ssdeep":"192:eRv93R9P9mSOZqp7kP4R9oR5u21ePCvCGRD/7B6yRchs2iVApl4OY8N2xr/c94Vd:49vp7kPork7BuGAruF/c90kK9L","tlshash":"9c72fa20a798b5f7dbbf9501159f3e5721bc30bbd8c37c959bddc2901fa31aaa812105","first_seen":"2025-11-04T02:58:42.357951Z","last_seen":"2026-02-18T17:50:10.064396Z","times_seen":11,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":65,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-02-18","alert":"Sinkholed","trigger":"tonapi.io","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/3386dde1-8b24-48c8-4b81-16979e342000?projectId=0f73abda9e52befa3057387fbfbab07a\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlglobalcheck.com/checking.html","date":"2026-02-18T17:49:38.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/3386dde1-8b24-48c8-4b81-16979e342000?projectId=0f73abda9e52befa3057387fbfbab07a\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://amlglobalcheck.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlglobalcheck.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 17:49:39 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1688\r\ncf-ray: 9cff5cbdda934435-ARN\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfEA-Bw7H9k1gZltgcL-Suew9FfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=690+4 c=0+4 v=2024.10.6 l=1688 f=false\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1688,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2bffc4df749e3b8f1d0890df22f4bc77","sha1":"ec3033a449dcff239808409c5d96d388a661ea37","sha256":"c7cc404018e711a83cdb04a08a5c5a12f54d1612b3d3cef12a0b7721fccd4465","sha512":"0ef53d6b15c58647ec9f81e562dbda560cd9f6287abf9d07b5e791db37b97879aa57c86637f7213ff127d4d10e4b8528ffc5368e085d8179d18524a4d506a649","ssdeep":"","tlshash":"cb311a52b99510c943825527eff4cd41971398270f3c61734161247349694b22df02d4","first_seen":"2025-01-28T05:59:32.01912Z","last_seen":"2026-06-06T21:30:11.571202Z","times_seen":1649,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":329,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/3d7eb880-7654-431f-ed84-a25712b45200?projectId=0f73abda9e52befa3057387fbfbab07a\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlglobalcheck.com/checking.html","date":"2026-02-18T17:49:38.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/3d7eb880-7654-431f-ed84-a25712b45200?projectId=0f73abda9e52befa3057387fbfbab07a\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://amlglobalcheck.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlglobalcheck.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 17:49:39 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2176\r\ncf-ray: 9cff5cbdda9e4435-ARN\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfepCHWB1qkSi-cNd1o8wsvD9BfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=16+2 c=0+1 v=2025.8.5 l=2176 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2176,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7b91b6e5024dfdf6e8a4d61f0f74dd13","sha1":"1614f764ed7b516c7768fae0966abab152ac7d1b","sha256":"00e34844a07301274fc65fdbb65891aa95436b94c4c860d9edfcb96331c5487f","sha512":"c3948fdb40f0f4154fce632acb88cf9cf57ce39d2858e4934d8820c4d5729da238c569448b5bcb6d1780e37f005cb9f5ed60093005cfa451a92270c4c0034566","ssdeep":"","tlshash":"48413ab2c3378c72ce2cb5e3e9b2d5168b449a5a91859afc22413d33a4b145cc4b89e4","first_seen":"2025-01-28T05:59:32.007883Z","last_seen":"2026-08-03T10:36:45.018817Z","times_seen":3262,"resource_available":false,"data":null}},"time_used":675,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":669,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlglobalcheck.com/checking.html","fqdn":"amlglobalcheck.com","domain":"amlglobalcheck.com","tld":"com"},"ip":{"addr":"104.21.69.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-18T17:49:37.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlglobalcheck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 14:57:19 GMT","end":"Sat, 25 Apr 2026 15:55:04 GMT"},"fingerprint":{"sha1":"A8:7E:3F:73:FD:8A:05:27:CB:D4:C9:E9:7A:6A:77:5A:A0:2E:5C:D0","sha256":"17:07:43:22:AA:3B:9E:4E:A2:06:1E:40:3A:18:1B:CD:76:D7:00:1E:68:B9:84:30:87:92:B9:A8:64:16:1A:79"}}},"request":{"raw":"GET /checking.html HTTP/1.1\r\nHost: amlglobalcheck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 17:49:37 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 16 Jan 2026 09:32:21 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uYB0w9hGOXlJcq4j2cickjMWhPzo9RNoe%2Fs8%2FfqwmwgLRin%2FrKxr%2FmApzlMm%2FA7ZJpIhp4lMJ2UPms1Ky5qO%2BvCaYccpoOFZVox%2Fp9WGaNFgnw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9cff5cb47c382f72-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}],"data":{"size":25463,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2746)","md5":"16fb5df30a851ecf610e037fa5006854","sha1":"b6559042d3e3c07d87807f0d2aeb7c29f6198fae","sha256":"c592595b61b473b4203fbcf3c2f8c107cfb949ee6a430c4adecbb12d18686472","sha512":"fedf44b79a0c7f6513c6a9b22f1d10082df6454ed18708a309e09898906f28cb8afac0997344faa3ba891f4457e0e9e1ac69c2149bee349b4bf190592db86b53","ssdeep":"192:lql870Z70yrxkLgk2Mj5snRccaZwhIIGeqP9XYwxqlXj79pLMiNoeuaGA5njAM:UQ0V0r5bNhxShIIG3FqFptoeaM","tlshash":"e5b2738c68e550a7707382cdb5a27f6929f0f307db0a4491b2ec59848fc7db8f8562b4","first_seen":"2026-02-18T17:50:10.071675Z","last_seen":"2026-02-18T17:50:10.071675Z","times_seen":1,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":33,"dns":1,"connect":8,"send":0,"wait":49,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlglobalcheck.com/static/css2","fqdn":"amlglobalcheck.com","domain":"amlglobalcheck.com","tld":"com"},"ip":{"addr":"104.21.69.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amlglobalcheck.com/checking.html","date":"2026-02-18T17:49:37.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlglobalcheck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 14:57:19 GMT","end":"Sat, 25 Apr 2026 15:55:04 GMT"},"fingerprint":{"sha1":"A8:7E:3F:73:FD:8A:05:27:CB:D4:C9:E9:7A:6A:77:5A:A0:2E:5C:D0","sha256":"17:07:43:22:AA:3B:9E:4E:A2:06:1E:40:3A:18:1B:CD:76:D7:00:1E:68:B9:84:30:87:92:B9:A8:64:16:1A:79"}}},"request":{"raw":"GET /static/css2 HTTP/1.1\r\nHost: amlglobalcheck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlglobalcheck.com/checking.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 17:49:37 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VTbBiTpa5oGIKpCvx9REBDfAlXtL0seZeR3ejCx7FOpMYZeuX5Xg4MM5Ye3X21yoRJv0M%2BZ%2F3D%2FujHuYZppAI6JOlL4J3UZ8xH%2BRYAVYvfrVfA%3D%3D\"}]}\r\ncf-ray: 9cff5cb5bc4a2382-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":280,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"1f2c3c3066f39725aaed1c8e65e0dd38","sha1":"e050b87f4aae2ecf687f3ea3e8517b9c004e791d","sha256":"eff0f6a1e8808c05ec242ddf10cb8c6d3f8bc8fd261d4228d80263fd7ea12e5e","sha512":"88c23d1530ba3383a2137386012c93ab455ca1c2f89c60c4d2db8248c68fc2b91d91df1fbcf709c447b8899479c4d28d9e3964439fb44db9bfecef684ed5d314","ssdeep":"","tlshash":"d9d02bef5043a38b482215a079c215c2268d12f6a43e86e83dc6d48b529867ecddba8d","first_seen":"2026-02-18T17:50:01.217095Z","last_seen":"2026-02-18T17:50:10.062325Z","times_seen":2,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlglobalcheck.com/assets/code.js","fqdn":"amlglobalcheck.com","domain":"amlglobalcheck.com","tld":"com"},"ip":{"addr":"104.21.69.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlglobalcheck.com/checking.html","date":"2026-02-18T17:49:37.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlglobalcheck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 14:57:19 GMT","end":"Sat, 25 Apr 2026 15:55:04 GMT"},"fingerprint":{"sha1":"A8:7E:3F:73:FD:8A:05:27:CB:D4:C9:E9:7A:6A:77:5A:A0:2E:5C:D0","sha256":"17:07:43:22:AA:3B:9E:4E:A2:06:1E:40:3A:18:1B:CD:76:D7:00:1E:68:B9:84:30:87:92:B9:A8:64:16:1A:79"}}},"request":{"raw":"GET /assets/code.js HTTP/1.1\r\nHost: amlglobalcheck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlglobalcheck.com/checking.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 17:49:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 16 Jan 2026 09:32:21 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"696a05a5-762\"\r\nexpires: Thu, 19 Feb 2026 17:49:37 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mj3%2BAyUlrBr96wiCZQJEl6DR9XWRLWseJp1HgYS5XWaN4Oid6GufM9nyQnBkYQBiAKQXN3fqNp8ZebFSSYgAp%2F3wmX3qGtt0MJj%2FcLxxtOuRnQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cff5cb5bc4c2382-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1890,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1890), with no line terminators","md5":"6ea306b8038077f37515b5b0d883de14","sha1":"6114fbaa8a602b36d8686c1c607540f87c8828f6","sha256":"cc263f9bdffd3aa2743a6f69c0bfda4dab3bbc4fb36b96f17b04d942670b6611","sha512":"70b23f78d94285b25ec465c7fbfbf43f04a35881e464e79a01ada1da1676a237a5bb787db633f4b0f5624639b6077aec3865eba331c901a666a8d3bd9416ff33","ssdeep":"","tlshash":"fc41aa193790719443f27bb50d3f70d6eaaeea5978a9440da1009ef13f50479ea22f78","first_seen":"2026-02-18T17:50:10.074235Z","last_seen":"2026-02-18T17:50:10.074235Z","times_seen":1,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-18","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"amlglobalcheck.com/assets/code.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null}},{"url":{"schema":"https","addr":"amlglobalcheck.com/assets/index-Ddg3ms6q.js","fqdn":"amlglobalcheck.com","domain":"amlglobalcheck.com","tld":"com"},"ip":{"addr":"104.21.69.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlglobalcheck.com/checking.html","date":"2026-02-18T17:49:37.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlglobalcheck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 14:57:19 GMT","end":"Sat, 25 Apr 2026 15:55:04 GMT"},"fingerprint":{"sha1":"A8:7E:3F:73:FD:8A:05:27:CB:D4:C9:E9:7A:6A:77:5A:A0:2E:5C:D0","sha256":"17:07:43:22:AA:3B:9E:4E:A2:06:1E:40:3A:18:1B:CD:76:D7:00:1E:68:B9:84:30:87:92:B9:A8:64:16:1A:79"}}},"request":{"raw":"GET /assets/index-Ddg3ms6q.js HTTP/1.1\r\nHost: amlglobalcheck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlglobalcheck.com/checking.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 17:49:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 16 Jan 2026 09:32:21 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"696a05a5-652ba0\"\r\nexpires: Thu, 19 Feb 2026 17:49:37 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9sKWAkPXMuPhkecXlo6hfsLSaUzDSPtJYexSr86XJ9F4V1xAkdhwWNfB%2F8V5%2Ff7VZEe18V8gR%2FnrVxBlVGDz8PehSwAoI24rMx73x%2FmYL9eggw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cff5cb5cc4d2382-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6630304,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (64684)","md5":"3cd92914fbc2d0ee9bb4c22dff52617b","sha1":"c2f6f4aad87bd4222e8481af22f09446b482b0dc","sha256":"0fdf9b625578929ab88b6eefeff6516c9849c7fa526ee3b2bb1c1e1ab864bb1e","sha512":"6a00870d62dbde63456fb0906b68c61f9cfada47e2d006c664c1f87e1caa53b4a81bb6b7ec3a3f36ff91c9f1b98cc8afceb6765e297a5800fd42159568d58e4c","ssdeep":"24576:+gPzDCUNxwa0Fub7is9LFKBmPPg2dDsUgg0RRmp:+q/mFub7aO9j","tlshash":"2d25c85023d0684953af8fb6732bb4d6f85f18af7888484fe605bd6029d9617eef4930","first_seen":"2026-02-18T17:50:10.076707Z","last_seen":"2026-02-18T17:50:10.076707Z","times_seen":1,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":305,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-18","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"amlglobalcheck.com/assets/index-Ddg3ms6q.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null}},{"url":{"schema":"https","addr":"amlglobalcheck.com/assets/index-DgfeWB38.js","fqdn":"amlglobalcheck.com","domain":"amlglobalcheck.com","tld":"com"},"ip":{"addr":"104.21.69.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlglobalcheck.com/checking.html","date":"2026-02-18T17:49:37.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlglobalcheck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 14:57:19 GMT","end":"Sat, 25 Apr 2026 15:55:04 GMT"},"fingerprint":{"sha1":"A8:7E:3F:73:FD:8A:05:27:CB:D4:C9:E9:7A:6A:77:5A:A0:2E:5C:D0","sha256":"17:07:43:22:AA:3B:9E:4E:A2:06:1E:40:3A:18:1B:CD:76:D7:00:1E:68:B9:84:30:87:92:B9:A8:64:16:1A:79"}}},"request":{"raw":"GET /assets/index-DgfeWB38.js HTTP/1.1\r\nHost: amlglobalcheck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlglobalcheck.com/checking.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 17:49:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 16 Jan 2026 09:32:21 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"696a05a5-3bc5e\"\r\nexpires: Thu, 19 Feb 2026 17:49:37 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PYmaJgVWWGdpXc4Vcl3w7gC1wBKDe89DJ8zbqyN0EJCIwyyDpJX33xZMWbHygqr92wBBKmuMp4lCG78qtEt1N1uy4HFgaYkWLnd7FlgzWUwR9Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cff5cb5cc4e2382-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":244830,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (22553)","md5":"a8ba478a5619feefcb4fdfc0cac27124","sha1":"08e6b478fd5f39f6d60c196261d6b16c9d721a32","sha256":"29141800ca2f7911f4b4b4943d57f1d160e8cbe6428bd21a7b5c029a7e828110","sha512":"295d2fdd93ef37e52129691a63f21668221e50d4d9693e4ba830d2e0fee892b7e2fee88d7716dd059e00c2a06511bf9c84a2ddab7c3b203ef61f3fd9fbb252b5","ssdeep":"6144:c4GyK6CDAgSpASHWWIQxZtQo4BWWZs8zKVHLxOAlYzZIMTGYXVNWG:lGyuSpASHZIQxZtQo4BWWZs8zKVHLxOP","tlshash":"4034f79027d0659923074fbb7727b0f1e82f182a795d498be1687f7428d6723eaf5830","first_seen":"2026-02-18T17:50:10.079047Z","last_seen":"2026-02-18T17:50:10.079047Z","times_seen":1,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-18","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"amlglobalcheck.com/assets/index-DgfeWB38.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null}},{"url":{"schema":"https","addr":"amlglobalcheck.com/assets/logo-BeLdo7OZ.svg","fqdn":"amlglobalcheck.com","domain":"amlglobalcheck.com","tld":"com"},"ip":{"addr":"104.21.69.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlglobalcheck.com/checking.html","date":"2026-02-18T17:49:37.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlglobalcheck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 14:57:19 GMT","end":"Sat, 25 Apr 2026 15:55:04 GMT"},"fingerprint":{"sha1":"A8:7E:3F:73:FD:8A:05:27:CB:D4:C9:E9:7A:6A:77:5A:A0:2E:5C:D0","sha256":"17:07:43:22:AA:3B:9E:4E:A2:06:1E:40:3A:18:1B:CD:76:D7:00:1E:68:B9:84:30:87:92:B9:A8:64:16:1A:79"}}},"request":{"raw":"GET /assets/logo-BeLdo7OZ.svg HTTP/1.1\r\nHost: amlglobalcheck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlglobalcheck.com/checking.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 17:49:37 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 16 Jan 2026 09:32:21 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"696a05a5-136b\"\r\nexpires: Thu, 19 Feb 2026 17:49:37 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cNaQW1VbzuZcVrY8a%2BZA2oDzIwMhaXotWHPg6BRToUn5DBiAqRcUOTghklZRZTYktv8mH7l69Lt%2B02Aq4KWwqbJ%2BO7FifsTjCvzKfz1UdicTxg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cff5cb5cc502382-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4971,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"42a32584a6fbd6e31f108c767620dcab","sha1":"f1de7101d7d5ae59b6b9a6cfd8a4ab43fdc04236","sha256":"05cde1c8287707eb186256dc77365fb4edff20aee2c4c3fe154b4b6d319e1a30","sha512":"f0707b4c9bb384131bddda01405ea32d2f6377d0bb725ca53b4df63c2d08acca8699150c1624b9af7422569fc17aeb153ffc671606147cc81e6f7afe09972c50","ssdeep":"96:ETl8KWvFmAiX6npebwjQdNnIS/HtCyI9s1cUBOQWzGWsKi6EaN1HQJ8bN3kLA:ETl8KWssebwEHnISP5z1tOJzGWsKi6Eo","tlshash":"aca154eee7d961dcd002dba1eb900469731f61bb2a22cb588f6c5f64b12248dd84fcc1","first_seen":"2025-04-08T20:33:55.225291Z","last_seen":"2026-08-01T06:14:06.809033Z","times_seen":127,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlglobalcheck.com/assets/spinner-BgL3qQ0G.gif","fqdn":"amlglobalcheck.com","domain":"amlglobalcheck.com","tld":"com"},"ip":{"addr":"104.21.69.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlglobalcheck.com/checking.html","date":"2026-02-18T17:49:37.591Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlglobalcheck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 14:57:19 GMT","end":"Sat, 25 Apr 2026 15:55:04 GMT"},"fingerprint":{"sha1":"A8:7E:3F:73:FD:8A:05:27:CB:D4:C9:E9:7A:6A:77:5A:A0:2E:5C:D0","sha256":"17:07:43:22:AA:3B:9E:4E:A2:06:1E:40:3A:18:1B:CD:76:D7:00:1E:68:B9:84:30:87:92:B9:A8:64:16:1A:79"}}},"request":{"raw":"GET /assets/spinner-BgL3qQ0G.gif HTTP/1.1\r\nHost: amlglobalcheck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlglobalcheck.com/checking.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 17:49:37 GMT\r\ncontent-type: image/gif\r\ncontent-length: 1137212\r\nlast-modified: Fri, 16 Jan 2026 09:32:21 GMT\r\npriority: u=4,i=?0\r\netag: \"696a05a5-115a3c\"\r\nexpires: Thu, 19 Feb 2026 17:49:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZxwdUbwiHEgwfzR6R6Ng1zTodvg%2BAxX8AxurzEI8KJ99ti2XBEW9oKM9%2FQAAYdU5EqwKrdOCMiRp1R1kdJ4OGL5h5ELEmXEPX60Kic2HkgCgIA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cff5cb5cc542382-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1137212,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 4320 x 1500","md5":"9dd5060e407f75a233c058489564f7fb","sha1":"56b002e9ee8c9902c49c628a3056fe7a6943ccc4","sha256":"a913411f74e7d93a2dc3aeb8cc6da688269ff5dcaf1cd9b7c0bbe921a4ecdbb1","sha512":"0aea81bf9b1e640737f8c1543a14af6cdef832958efe17b75798bf283b6ca0c648286f277585360da1c964da1b7263ab0bf0a086275ce7263e4bea70ffdda22c","ssdeep":"24576:DUb6cJ4B8kHWQUU+ubkfMdWse3rTW6eUBARN:1c3AWNugftZ3rTl9E","tlshash":"4925238083655d00ad24a73d123c2ee6299eae6f44eda6b13b077f84317977d7dc0a92","first_seen":"2025-07-31T12:11:34.02715Z","last_seen":"2026-06-28T23:02:15.950835Z","times_seen":25,"resource_available":false,"data":null}},"time_used":462,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":283,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlglobalcheck.com/src/eth-code.js","fqdn":"amlglobalcheck.com","domain":"amlglobalcheck.com","tld":"com"},"ip":{"addr":"104.21.69.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlglobalcheck.com/checking.html","date":"2026-02-18T17:49:37.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlglobalcheck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 14:57:19 GMT","end":"Sat, 25 Apr 2026 15:55:04 GMT"},"fingerprint":{"sha1":"A8:7E:3F:73:FD:8A:05:27:CB:D4:C9:E9:7A:6A:77:5A:A0:2E:5C:D0","sha256":"17:07:43:22:AA:3B:9E:4E:A2:06:1E:40:3A:18:1B:CD:76:D7:00:1E:68:B9:84:30:87:92:B9:A8:64:16:1A:79"}}},"request":{"raw":"GET /src/eth-code.js HTTP/1.1\r\nHost: amlglobalcheck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlglobalcheck.com/checking.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 17:49:37 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wc8KH%2BUyL84AwjtSQ5ij1Ox%2Fg6EBHJTL%2FI9BKM%2FhshMlAkk5R13M%2F%2FSa6CaZKJVXE%2F%2Bf3zBZt3%2BeArOGAtNSw%2B4xFw8WzFrBS5n%2F0547DLjgyQ%3D%3D\"}]}\r\ncf-ray: 9cff5cb5dc582382-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":280,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"1f2c3c3066f39725aaed1c8e65e0dd38","sha1":"e050b87f4aae2ecf687f3ea3e8517b9c004e791d","sha256":"eff0f6a1e8808c05ec242ddf10cb8c6d3f8bc8fd261d4228d80263fd7ea12e5e","sha512":"88c23d1530ba3383a2137386012c93ab455ca1c2f89c60c4d2db8248c68fc2b91d91df1fbcf709c447b8899479c4d28d9e3964439fb44db9bfecef684ed5d314","ssdeep":"","tlshash":"d9d02bef5043a38b482215a079c215c2268d12f6a43e86e83dc6d48b529867ecddba8d","first_seen":"2026-02-18T17:50:01.217095Z","last_seen":"2026-02-18T17:50:10.062325Z","times_seen":2,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":385,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlglobalcheck.com/assets/index-DN6lpdUA.js","fqdn":"amlglobalcheck.com","domain":"amlglobalcheck.com","tld":"com"},"ip":{"addr":"104.21.69.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlglobalcheck.com/checking.html","date":"2026-02-18T17:49:37.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlglobalcheck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 14:57:19 GMT","end":"Sat, 25 Apr 2026 15:55:04 GMT"},"fingerprint":{"sha1":"A8:7E:3F:73:FD:8A:05:27:CB:D4:C9:E9:7A:6A:77:5A:A0:2E:5C:D0","sha256":"17:07:43:22:AA:3B:9E:4E:A2:06:1E:40:3A:18:1B:CD:76:D7:00:1E:68:B9:84:30:87:92:B9:A8:64:16:1A:79"}}},"request":{"raw":"GET /assets/index-DN6lpdUA.js HTTP/1.1\r\nHost: amlglobalcheck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlglobalcheck.com/checking.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 17:49:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 16 Jan 2026 09:32:21 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"696a05a5-4fc61\"\r\nexpires: Thu, 19 Feb 2026 17:49:37 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=16sUF2%2F706BKr8SyMwcBou9qGbZI8gUq7sJLyfbdCmWVMzDirMS%2B7hDLcQqfhGkvFPEAqxw59VIg1HgHmuXbIJjkLt%2BLWTPEziSh7oxzQfLgFg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cff5cb5bc4b2382-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":326753,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (668)","md5":"404ce700f7dca230fca605ab238369ab","sha1":"217d0d44e7f11ea68c4dc7249986527dd8ddd01b","sha256":"c9178cd2c627ec62986f9f384915f3053b413ceda3d8ad3664cb2d6a2067f07a","sha512":"5a83be4336514e0121433866a90a07e78048ae71fd1827a7caf58fe160dd4a4bac1c368206eda27affa1feb2bc27aff8ba6b2887c125e33de156e6df48316232","ssdeep":"6144:XWD3RLP/peccnWUOj4KF9X48hGPIckv9LSME:MPcuUOj4KF9XYPFo9eR","tlshash":"a664d7482ef71061432774b9578f9401f735d41b215dcd88bbac93a02f4ae38daf6ab9","first_seen":"2026-02-18T17:50:10.084607Z","last_seen":"2026-02-18T17:50:10.084607Z","times_seen":1,"resource_available":true,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":273,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/7c2cee4e-a5bd-4ebd-277d-f496c69fa000?projectId=0f73abda9e52befa3057387fbfbab07a\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlglobalcheck.com/checking.html","date":"2026-02-18T17:49:38.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/7c2cee4e-a5bd-4ebd-277d-f496c69fa000?projectId=0f73abda9e52befa3057387fbfbab07a\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://amlglobalcheck.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlglobalcheck.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 17:49:39 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1508\r\ncf-ray: 9cff5cbdda974435-ARN\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cf9e6rjyr-bBkWoPuSw_vsUwKifmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=843+2 c=0+1 v=2025.9.5 l=1508 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1508,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9e8857769972441243d690548cf3e485","sha1":"38328c4d250c38d98763e7b89cfeca1b3b7bb2c2","sha256":"7e7be8edd769cd0ee13580176c51f034867846e592e3434e4b0f30f2cc8b709b","sha512":"121207c756badb363bc86cc8c09ab16965dd26c89d151bc25bdaf3cc106621ab5eed1ef14618394595d80309e2b322e853b20a0f55baada496a60aade841a670","ssdeep":"","tlshash":"7231b59e09441c24511aaaff2ccaa4ab32b5249268afd635c30b5ae6a65454d383f1c8","first_seen":"2025-10-02T02:13:48.566179Z","last_seen":"2026-08-02T03:31:50.444922Z","times_seen":744,"resource_available":false,"data":null}},"time_used":426,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":423,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axaxaxaxaxxaaxxxaxa.xyz/api/crypto/settings/?chain=1","fqdn":"axaxaxaxaxxaaxxxaxa.xyz","domain":"axaxaxaxaxxaaxxxaxa.xyz","tld":"xyz"},"ip":{"addr":"104.21.22.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://amlglobalcheck.com/checking.html","date":"2026-02-18T17:49:38.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axaxaxaxaxxaaxxxaxa.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 10:24:25 GMT","end":"Sat, 28 Mar 2026 11:23:10 GMT"},"fingerprint":{"sha1":"02:DA:06:B4:21:C0:AD:24:DA:00:D3:24:60:42:41:62:EE:16:40:B4","sha256":"D5:09:1D:8D:95:6C:80:81:AE:76:AA:15:F1:A7:58:68:97:1D:78:8D:22:AE:7B:7E:DA:03:C0:9A:B7:EA:1B:E4"}}},"request":{"raw":"OPTIONS /api/crypto/settings/?chain=1 HTTP/1.1\r\nHost: axaxaxaxaxxaaxxxaxa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://amlglobalcheck.com/\r\nOrigin: https://amlglobalcheck.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 17:49:39 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: accept, authorization, content-type, user-agent, x-csrftoken, x-requested-with, ngrok-skip-browser-warning, referer, sec-ch-ua, sec-ch-ua-mobile, sec-ch-ua-platform, CF-Visitor, CF-IPCountry, X-Forwarded-Proto, CF-Connecting-IP, X-Forwarded-For, CF-RAY, Strict-Transport-Security\r\naccess-control-allow-methods: DELETE, GET, OPTIONS, PATCH, POST, PUT\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PCxYtYXRgGTdXDOkJXMqIPP%2FIVwI5al4yo8NsE5O4hW1R3wTXEMKIw8CXnI36chdoEJENGzuLDDrHzgtHDJAAdfSAdInaKqZBqKoLk5rf%2FdOLgpgQ1Il\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cff5cbe8ef7481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T12:04:45.732017Z","times_seen":17689659,"resource_available":true,"data":null}},"time_used":289,"timings":{"blocked":104,"dns":59,"connect":8,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/4e7d6f52-f663-4fc1-4b88-eebe7fc72800?projectId=0f73abda9e52befa3057387fbfbab07a\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlglobalcheck.com/checking.html","date":"2026-02-18T17:49:38.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Feb 2026 12:00:46 GMT","end":"Wed, 06 May 2026 13:00:31 GMT"},"fingerprint":{"sha1":"0B:75:F6:C4:1F:5C:D6:FA:A0:CD:3E:89:69:B2:43:70:98:34:EB:71","sha256":"A7:6F:DB:DB:DF:40:40:BC:E0:FA:21:6A:0A:3B:17:05:37:B7:17:6E:6E:BC:B2:89:3D:F4:E2:7C:EB:48:E6:5E"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/4e7d6f52-f663-4fc1-4b88-eebe7fc72800?projectId=0f73abda9e52befa3057387fbfbab07a\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://amlglobalcheck.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlglobalcheck.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 17:49:39 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1638\r\ncf-ray: 9cff5cbdda994435-ARN\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfwVowhypScApAcmoeznMTkZRzfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-bgj: imgq:86,h2pri\r\ncf-images: internal=ok/- q=0 n=15+2 c=0+1 v=2025.5.2 l=1638 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1638,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0ccfb2325173637f538577b4cad23f43","sha1":"70060aadb98e9a950fb797ae0105460d184d7236","sha256":"b655ab554ceb7219eb8702f830dc7edd8492194e06eddcf2ccbea5fe180d2518","sha512":"ada7b30dcb5f784d6feb476033ccb6b435aa8c250bcf596b27372354594d7ffeeeb0d2dc9e5f2c322a4da07925dfee2c97239a9dcd0fc227145f8414e5794242","ssdeep":"","tlshash":"1e310a85ed51fd0e6fc02af8a8039d3500b5d802f51f05e9eea53891d7646f2107be98","first_seen":"2025-01-28T05:59:32.012212Z","last_seen":"2026-08-03T10:36:44.853919Z","times_seen":1407,"resource_available":false,"data":null}},"time_used":727,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":727,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlglobalcheck.com/assets/erc-logo-CuEFbPJh.png","fqdn":"amlglobalcheck.com","domain":"amlglobalcheck.com","tld":"com"},"ip":{"addr":"104.21.69.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlglobalcheck.com/checking.html","date":"2026-02-18T17:49:37.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlglobalcheck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 14:57:19 GMT","end":"Sat, 25 Apr 2026 15:55:04 GMT"},"fingerprint":{"sha1":"A8:7E:3F:73:FD:8A:05:27:CB:D4:C9:E9:7A:6A:77:5A:A0:2E:5C:D0","sha256":"17:07:43:22:AA:3B:9E:4E:A2:06:1E:40:3A:18:1B:CD:76:D7:00:1E:68:B9:84:30:87:92:B9:A8:64:16:1A:79"}}},"request":{"raw":"GET /assets/erc-logo-CuEFbPJh.png HTTP/1.1\r\nHost: amlglobalcheck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlglobalcheck.com/checking.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 17:49:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 160579\r\nlast-modified: Fri, 16 Jan 2026 09:32:21 GMT\r\npriority: u=4,i=?0\r\netag: \"696a05a5-27343\"\r\nexpires: Thu, 19 Feb 2026 17:49:37 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uk4OP0EUZyipnYu9j4a2qnenYI%2B8mMSm0NBbmHZhVjUuMtt%2FLLq9EKYX4O6OxYdN8D6lQ91Chab5XtgEjbQwFyY2VzUV%2F3oKXwd4ZglILY4hRQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cff5cb5cc522382-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":160579,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3258 x 3258, 8-bit/color RGBA, non-interlaced","md5":"86b356aa4636232f3e200c65d2a8b6b4","sha1":"3f415cd75e8a755a032ae16a3406c41dcc2d667a","sha256":"7af0cf14f1d0a35e2446b1ad8db4fc424c6735c4ca2ded1410f8d3ad69456913","sha512":"a2e8a2b8039b0a0f3fbd8d4a89554b313f7cab24530426eafc2d9a1b63e5c126fb419b61826894a2cc5f42f2c298151cec05d0e73aae55f419da60ad02b45a38","ssdeep":"1536:oU+xMzsj5wW0nmkkIX0fJNWuimucyv/QqBqdXi532C6yeoGBtAtFpj9j8GgG8cSx:3+az2GRnb3p/532RFK7ph8GZ2qiXK+","tlshash":"59f34beb9f2bccf9856a317f7baf0c2296d1db656395928653c1c11f7f8d0200a05a8c","first_seen":"2023-05-21T17:02:57Z","last_seen":"2026-08-02T16:40:36.981503Z","times_seen":1518,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":236,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlglobalcheck.com/src/eth-code.js","fqdn":"amlglobalcheck.com","domain":"amlglobalcheck.com","tld":"com"},"ip":{"addr":"104.21.69.94","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlglobalcheck.com/checking.html","date":"2026-02-18T17:49:37.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlglobalcheck.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 25 Jan 2026 14:57:19 GMT","end":"Sat, 25 Apr 2026 15:55:04 GMT"},"fingerprint":{"sha1":"A8:7E:3F:73:FD:8A:05:27:CB:D4:C9:E9:7A:6A:77:5A:A0:2E:5C:D0","sha256":"17:07:43:22:AA:3B:9E:4E:A2:06:1E:40:3A:18:1B:CD:76:D7:00:1E:68:B9:84:30:87:92:B9:A8:64:16:1A:79"}}},"request":{"raw":"GET /src/eth-code.js HTTP/1.1\r\nHost: amlglobalcheck.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlglobalcheck.com/checking.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Wed, 18 Feb 2026 17:49:38 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4G%2FNUj%2Br%2B817MD9GDZa3f4bNDF4TRVIKBviHInPTd4byfRHdu02kcWMt7lEMil8vaTSOwOClPc%2Bpbsxa3s7MerfF8Kt18o%2FpCbfycbh3Q3FR9g%3D%3D\"}]}\r\ncf-ray: 9cff5cb8bcf12382-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":280,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"1f2c3c3066f39725aaed1c8e65e0dd38","sha1":"e050b87f4aae2ecf687f3ea3e8517b9c004e791d","sha256":"eff0f6a1e8808c05ec242ddf10cb8c6d3f8bc8fd261d4228d80263fd7ea12e5e","sha512":"88c23d1530ba3383a2137386012c93ab455ca1c2f89c60c4d2db8248c68fc2b91d91df1fbcf709c447b8899479c4d28d9e3964439fb44db9bfecef684ed5d314","ssdeep":"","tlshash":"d9d02bef5043a38b482215a079c215c2268d12f6a43e86e83dc6d48b529867ecddba8d","first_seen":"2026-02-18T17:50:01.217095Z","last_seen":"2026-02-18T17:50:10.062325Z","times_seen":2,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":36,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axaxaxaxaxxaaxxxaxa.xyz/api/users/domains/visits/?","fqdn":"axaxaxaxaxxaaxxxaxa.xyz","domain":"axaxaxaxaxxaaxxxaxa.xyz","tld":"xyz"},"ip":{"addr":"104.21.22.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://amlglobalcheck.com/checking.html","date":"2026-02-18T17:49:38.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axaxaxaxaxxaaxxxaxa.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 10:24:25 GMT","end":"Sat, 28 Mar 2026 11:23:10 GMT"},"fingerprint":{"sha1":"02:DA:06:B4:21:C0:AD:24:DA:00:D3:24:60:42:41:62:EE:16:40:B4","sha256":"D5:09:1D:8D:95:6C:80:81:AE:76:AA:15:F1:A7:58:68:97:1D:78:8D:22:AE:7B:7E:DA:03:C0:9A:B7:EA:1B:E4"}}},"request":{"raw":"OPTIONS /api/users/domains/visits/? HTTP/1.1\r\nHost: axaxaxaxaxxaaxxxaxa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://amlglobalcheck.com/\r\nOrigin: https://amlglobalcheck.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 17:49:39 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: accept, authorization, content-type, user-agent, x-csrftoken, x-requested-with, ngrok-skip-browser-warning, referer, sec-ch-ua, sec-ch-ua-mobile, sec-ch-ua-platform, CF-Visitor, CF-IPCountry, X-Forwarded-Proto, CF-Connecting-IP, X-Forwarded-For, CF-RAY, Strict-Transport-Security\r\naccess-control-allow-methods: DELETE, GET, OPTIONS, PATCH, POST, PUT\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cGtTGnz0oL9lvaoEcgtFRaDL1ctycsFdX5B4wGqpTjuTjLSgCqs6MUAhA7FqC3dbDqsNZZUdb5YAyg7Xgam%2FcUnsOic6xLgOckRuR4eDotQ4Kx%2BrtwpF\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cff5cbe7ee1481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T12:04:45.732017Z","times_seen":17689659,"resource_available":true,"data":null}},"time_used":299,"timings":{"blocked":107,"dns":60,"connect":8,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axaxaxaxaxxaaxxxaxa.xyz/api/crypto/settings/?chain=1","fqdn":"axaxaxaxaxxaaxxxaxa.xyz","domain":"axaxaxaxaxxaaxxxaxa.xyz","tld":"xyz"},"ip":{"addr":"104.21.22.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://amlglobalcheck.com/checking.html","date":"2026-02-18T17:49:39.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axaxaxaxaxxaaxxxaxa.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 10:24:25 GMT","end":"Sat, 28 Mar 2026 11:23:10 GMT"},"fingerprint":{"sha1":"02:DA:06:B4:21:C0:AD:24:DA:00:D3:24:60:42:41:62:EE:16:40:B4","sha256":"D5:09:1D:8D:95:6C:80:81:AE:76:AA:15:F1:A7:58:68:97:1D:78:8D:22:AE:7B:7E:DA:03:C0:9A:B7:EA:1B:E4"}}},"request":{"raw":"GET /api/crypto/settings/?chain=1 HTTP/1.1\r\nHost: axaxaxaxaxxaaxxxaxa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amlglobalcheck.com/\r\nContent-Type: application/json\r\nOrigin: https://amlglobalcheck.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 17:49:39 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept, origin\r\nallow: GET, HEAD, OPTIONS\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6D%2BEFvpuTB1U2I7l4UJhw3QilakBO1TA1zaQ9RpyazpEd%2BK%2FdI19%2B7Dj9XmgHqpixhTnC%2BBPbRjwne51GtXYkDmmw2Dk%2BCRF4Kq9p5PSDLv94mTEBXK9\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cff5cbef824481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3f72aad0aa11835997000d3306e0b394","sha1":"134ecca5682dd89fa4486fe54b998acd46e069bd","sha256":"45ca6021397d38f5c1a4501f2bb916dc323e68c15c854bdcc6ef72f1db36b4a4","sha512":"acab01e58c0f1f6bdc2bae3b1c1223053dbecccc2d05995480e4ecf8079efff7862d7a3106418101249b0186db427c0eab1ff59d3d8e3dae89235660f2b39c8d","ssdeep":"","tlshash":"719022020e8c3b088ac000008a88080828c0c0e0cc3c00accb0ce00002a00a02b3200a","first_seen":"2026-02-11T15:17:55.617588Z","last_seen":"2026-04-13T07:57:42.273484Z","times_seen":8,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"axaxaxaxaxxaaxxxaxa.xyz/api/users/domains/visits/?","fqdn":"axaxaxaxaxxaaxxxaxa.xyz","domain":"axaxaxaxaxxaaxxxaxa.xyz","tld":"xyz"},"ip":{"addr":"104.21.22.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://amlglobalcheck.com/checking.html","date":"2026-02-18T17:49:39.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"axaxaxaxaxxaaxxxaxa.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 28 Dec 2025 10:24:25 GMT","end":"Sat, 28 Mar 2026 11:23:10 GMT"},"fingerprint":{"sha1":"02:DA:06:B4:21:C0:AD:24:DA:00:D3:24:60:42:41:62:EE:16:40:B4","sha256":"D5:09:1D:8D:95:6C:80:81:AE:76:AA:15:F1:A7:58:68:97:1D:78:8D:22:AE:7B:7E:DA:03:C0:9A:B7:EA:1B:E4"}}},"request":{"raw":"POST /api/users/domains/visits/? HTTP/1.1\r\nHost: axaxaxaxaxxaaxxxaxa.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://amlglobalcheck.com/\r\nContent-Type: application/json\r\nContent-Length: 43\r\nOrigin: https://amlglobalcheck.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":43,"data":"{\"code\":\"W0ZbzsrsDYIfiGHnc0BRW-vdZkaU3A2l\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Feb 2026 17:49:39 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept, origin\r\nallow: GET, POST, HEAD, OPTIONS\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=56Q6umk1Vjl2EfODr0w8RJdC2KbKVoVyAxRyA4pVszmK86GvoQGmY7GbTYdLH92z%2FhcsnWkXaEzM3Mu4776mXH2qiXAY0K4rudkQe2CH%2BTKVYFjL%2BJ1Z\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cff5cbf288c481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9dfec0b7b34869a4bb6c5e030d9f6bc4","sha1":"76e1558c8d698fab1c9f350e2350b4d40c5951f1","sha256":"56587cffbb30e338497c9114f74803a530a713ebe374b69fcfa8551ad8dad1e9","sha512":"6857c3701190d054e551f288aca1e6c121392a4745448a01d62c80472e39cf2d3e9b52e2d19a2c8550f629a6b602fed77adb1ddf1aae03b9110a25dce3ac6ffd","ssdeep":"","tlshash":"9e600022000208208088008202202a228080203000002080000aa00880228000008002","first_seen":"2023-04-06T07:36:31Z","last_seen":"2026-07-27T20:40:53.63003Z","times_seen":573,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}