{"report_id":"6386666d-c0bf-4308-962d-350e4ddd5dde","version":6,"status":"done","tags":[],"date":"2026-03-24T02:50:05Z","url":{"schema":"https","addr":"aml-confirm.com/","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"104.21.1.172","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"aml-confirm.com/","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"title":"AML Check","dom":{"size":29745,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (942)","md5":"a56dc4025d32872c6b2ea4b011e0adb3","sha1":"e81b4ebc53cae4938cef7fa9b5b180768c315021","sha256":"fa43a2e24d7984fe6f982f0862763a72473c7329093b1e561680839477f901f6","sha512":"a151679a08341587b70d18d0f866dbe46a7b7147997f4ab1f47639250a445455952cb68b043859c099b2f1eccab76631a58efef3da714107e36e0f8b5cdecd1f","ssdeep":"384:9X/7bt6UZmSMj0Yml5UVfZiCFwqHU63tm/UqStOyJ3ttO50pOPcO6M72/DPwqcV/:B/7btHmml5nqIVuZ+8PwqDa","tlshash":"18d29421918c3e3b51131bd3b42957ab709f8d79da234471b3ff8a6983e3d90e867492","dom_hash":"domhash8770fce0738f52e6eb93cc5260a31eee","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"aml-confirm.com/","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"104.21.1.172","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-28T02:50:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"aml-confirm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"aml-confirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"aml-confirm.com","ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-16","domain_rank":0,"first_seen":"2026-03-24T02:50:06.233563Z","last_seen":"2026-03-24T02:50:06.233563Z","alert_count":94,"request_count":47,"received_data":2297642,"sent_data":20824,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-22T22:16:16.728956Z","alert_count":0,"request_count":1,"received_data":49278,"sent_data":542,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"aml-confirm.com/assets/swiper-DpKYHp1-.js","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d3b9989a25a843d0fdcc594944d0104","sha1":"884ec9e922f5a0853c5364eb180dcf7b77aae983","sha256":"a9d9a2d36d91c12475e0b7d0168a80e350450924653493b30dcd6c19cc03eaef","sha512":"542eaa8fc73627b6a6a96a7981d65d8bff2ef76b06b35a1c79a79bcadf03a3635c7cf03115eeb96032b50de2d6d3bcc9bb0339b27690e1e5e8d4eb976b68e7e7","ssdeep":"1536:KSK03lcG8WP1Ztu7PCKRnyXABlxvHw97rRkz:HP07Pv","tlshash":"2b531889e124753a82e326da93a5c10173a54d54b849c8e871fc8c6b49be95c07feffc","size":63513,"data":"","first_seen":"2026-02-06T23:09:55.742441Z","last_seen":"2026-04-08T10:58:05.431982Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aml-confirm.com/assets/index-itS0ERym.js","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b1fd8c53af973c9ef2888d835156b0f7","sha1":"c6381915a99cb1ed5a2859053f079febbbfd2201","sha256":"7b6913faea60bba92406b606e8cd4ed005cdaeadfd4848e5bc8a28cf95b8d03f","sha512":"c4db19819707920f1b563971f956231a9a20e2bce3ab4529a56852519ee4a836493a34a339fb048c73e3ad0708d5fec1358c467ea0ad62eb71d1153b19a8f621","ssdeep":"1536:Dx+1P8UtMvqB0oC0aqp9OEXCsY8+MqkEWR2rGjQHxmw/rq:DADMvboRdCsh+MqkWnRmAq","tlshash":"89830899221066b546eb17ca52e8c65163b44444b40ed5f830fd4caf6a7ec9803bfffa","size":85541,"data":"","first_seen":"2026-02-06T23:09:55.745233Z","last_seen":"2026-03-28T06:24:32.023539Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aml-confirm.com/assets/modulepreload-polyfill-B5Qt9EMX.js","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"ecade416f429813a6fa1e1d969883c66","sha1":"7a2613dd8fe3b82021cf37b0845cb73de5a3ee38","sha256":"d2a32840421496e872ade591618d2fa5c33797605d1aec04301717e5a90757d0","sha512":"6b54ce8b3c94e8aa8f5fb503f48c0f0385b455f1475e178aecfebc45d366351b74d4bda0fa378e8b7198cfdf4de0778096d92ab538dc2d1c14edc7e8c3a3930b","ssdeep":"","tlshash":"4201c0e83496e106115a0eadf1b3c618fa94345238a6e4c0d05c2cd9a76bcc0a5a5d4d","size":711,"data":"","first_seen":"2023-05-24T13:14:00Z","last_seen":"2026-07-26T00:31:47.666558Z","times_seen":2040,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aml-confirm.com/assets/main-DxLw_CHK.js","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"84276ac871f81d10d03329dc8674f643","sha1":"cbaeb4e440b729f1d5ff98a749ffec75ce99f3b4","sha256":"640a95f985816b3fd842a89c91c3c2e8cc49d792b93eaf64db657104b63ccd02","sha512":"8ab45259e77556bdf0300508a6477af499085cf3bd3b6bd23c7201fec803abe75a9a07fcac1ae58dfe36083c59bea1c94891937d2935c7e1c5db0f88ba8c2fed","ssdeep":"192:2Y2gC8IkWneP0MfFbJPwDKDgSjXYQuK0HqbP/2mCX7TFdr:2Y2gC8VWeVPwmcVQz0H+UTjr","tlshash":"f3f1d86b238c333742971a52b75e93d2a3705098f57750a050ad842d53fbdb9c2b7af4","size":8185,"data":"","first_seen":"2026-02-06T23:09:55.759519Z","last_seen":"2026-03-28T06:24:32.014944Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aml-confirm.com/assets/utils-D71RtZIR.js","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"969f4cbff620f8c20a8f68f2d33e1d64","sha1":"e2da6ce119af68a3a102f8a814af112f0f23dbe6","sha256":"251bff81a06fa4c957373a22260fc7a6d338ec96c8e9aa9201b95c78528f62c0","sha512":"a13db6cf54c57bd14931d4635c7c3d1a94d7e46069c402259cca9d06ee651f041b42d9c154078516716a17023c9f3d7923e6d78774f32c5d8784efb88cc2db0a","ssdeep":"192:cr7vjLWfvAIQcx6q5hlia6vNaSuXceqqeee/erNBl09yt:cvbLWf4IQrMiJvNduXrqt5mrrS92","tlshash":"a7d1b7dd72d170765b9705ea80fa0506f22c04d8345e8490f15cdcba797572a43bbafd","size":6639,"data":"","first_seen":"2025-10-07T04:53:21.658478Z","last_seen":"2026-05-12T11:03:46.899875Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"aml-confirm.com/images/kuna.webp","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aml-confirm.com/","date":"2026-03-24T02:49:43.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aml-confirm.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 16:10:47 GMT","end":"Tue, 09 Jun 2026 16:10:46 GMT"},"fingerprint":{"sha1":"33:85:40:D1:0F:B2:13:2C:21:88:20:5E:A7:03:A0:96:CF:08:0D:BB","sha256":"39:EF:F2:F9:35:F0:6E:02:14:55:8F:E3:68:A2:34:A6:75:3A:E2:87:81:69:87:89:79:13:CC:F4:CD:36:2C:F2"}}},"request":{"raw":"GET /images/kuna.webp HTTP/1.1\r\nHost: aml-confirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aml-confirm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 02:49:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1118\r\nlast-modified: Sun, 22 Feb 2026 14:12:44 GMT\r\npriority: u=4,i=?0\r\netag: \"699b0edc-45e\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KM%2B0UILioyQwuntOqyONiZeEe1fbzbC7j8rb3fr2QYWFow%2FfGLuUcJLT68c83UEuQQSf4YZ6aEBmR8NO0HmPFSUBraegOMZ%2FSqZMk3CIbA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e125d3f2fa15ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1118,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e84da5c9e3f8d31c4612e25e490fbc6e","sha1":"3066aabd21889aa6b62d3c86837c6fcac484b39d","sha256":"00206d3180fd2c493bc673d174d153b537a1c185b75819b65796d67e39ca2ea4","sha512":"fb5cfaa88f4bef1e954e2b1423e21a9de410e49e403519d022ba396dd4acdaa798ec96fd489c4b3dae144c24cea91ac0a9634f3bdeb07f9e467c05b0f45f2d33","ssdeep":"","tlshash":"4421c6dbf5c0cb49ac0d00b1a4ce294bdfef5139b8808c115331c361129fad2dead498","first_seen":"2025-05-30T09:05:59.259667Z","last_seen":"2026-07-13T03:13:12.555325Z","times_seen":110,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"aml-confirm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"aml-confirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aml-confirm.com/assets/modulepreload-polyfill-B5Qt9EMX.js","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aml-confirm.com/","date":"2026-03-24T02:49:43.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aml-confirm.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 16:10:47 GMT","end":"Tue, 09 Jun 2026 16:10:46 GMT"},"fingerprint":{"sha1":"33:85:40:D1:0F:B2:13:2C:21:88:20:5E:A7:03:A0:96:CF:08:0D:BB","sha256":"39:EF:F2:F9:35:F0:6E:02:14:55:8F:E3:68:A2:34:A6:75:3A:E2:87:81:69:87:89:79:13:CC:F4:CD:36:2C:F2"}}},"request":{"raw":"GET /assets/modulepreload-polyfill-B5Qt9EMX.js HTTP/1.1\r\nHost: aml-confirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aml-confirm.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 02:49:43 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=09gS9u76coOzcel%2BgtGAy6BJ8oVY4Q0dH4ZCETWlEtjNd6hbjWzGYY%2BMDCukdWbpyRWhClkYdMPxWZ8sXoI%2BGwlw%2B9HdHT4nDpQSFJv0EA%3D%3D\"}]}\r\nlast-modified: Sun, 22 Feb 2026 14:11:36 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"699b0e98-2c7\"\r\ncf-ray: 9e125d418fcd5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":711,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (710)","md5":"ecade416f429813a6fa1e1d969883c66","sha1":"7a2613dd8fe3b82021cf37b0845cb73de5a3ee38","sha256":"d2a32840421496e872ade591618d2fa5c33797605d1aec04301717e5a90757d0","sha512":"6b54ce8b3c94e8aa8f5fb503f48c0f0385b455f1475e178aecfebc45d366351b74d4bda0fa378e8b7198cfdf4de0778096d92ab538dc2d1c14edc7e8c3a3930b","ssdeep":"","tlshash":"4201c0e83496e106115a0eadf1b3c618fa94345238a6e4c0d05c2cd9a76bcc0a5a5d4d","first_seen":"2023-05-24T13:14:00Z","last_seen":"2026-07-26T00:31:47.666558Z","times_seen":2040,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"aml-confirm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"aml-confirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aml-confirm.com/assets/swiper-DpKYHp1-.js","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aml-confirm.com/","date":"2026-03-24T02:49:43.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aml-confirm.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 16:10:47 GMT","end":"Tue, 09 Jun 2026 16:10:46 GMT"},"fingerprint":{"sha1":"33:85:40:D1:0F:B2:13:2C:21:88:20:5E:A7:03:A0:96:CF:08:0D:BB","sha256":"39:EF:F2:F9:35:F0:6E:02:14:55:8F:E3:68:A2:34:A6:75:3A:E2:87:81:69:87:89:79:13:CC:F4:CD:36:2C:F2"}}},"request":{"raw":"GET /assets/swiper-DpKYHp1-.js HTTP/1.1\r\nHost: aml-confirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aml-confirm.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 02:49:44 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sICMG7%2B85WJYpMKYVzZvfp%2BXW%2FXvUsvyhOTPlYkHfdh2lLTaGk2%2FVPBnflcdkCciA3ys2mDh5JuD1NJrdigAKreZhwRr0dLbKplq9Mhuzw%3D%3D\"}]}\r\nlast-modified: Sun, 22 Feb 2026 14:11:41 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699b0e9d-f819\"\r\ncf-ray: 9e125d41efd15ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63513,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (63512)","md5":"1d3b9989a25a843d0fdcc594944d0104","sha1":"884ec9e922f5a0853c5364eb180dcf7b77aae983","sha256":"a9d9a2d36d91c12475e0b7d0168a80e350450924653493b30dcd6c19cc03eaef","sha512":"542eaa8fc73627b6a6a96a7981d65d8bff2ef76b06b35a1c79a79bcadf03a3635c7cf03115eeb96032b50de2d6d3bcc9bb0339b27690e1e5e8d4eb976b68e7e7","ssdeep":"1536:KSK03lcG8WP1Ztu7PCKRnyXABlxvHw97rRkz:HP07Pv","tlshash":"2b531889e124753a82e326da93a5c10173a54d54b849c8e871fc8c6b49be95c07feffc","first_seen":"2026-02-06T23:09:55.742441Z","last_seen":"2026-04-08T10:58:05.431982Z","times_seen":12,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"aml-confirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"aml-confirm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aml-confirm.com/images/team7.webp","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aml-confirm.com/","date":"2026-03-24T02:49:43.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aml-confirm.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 16:10:47 GMT","end":"Tue, 09 Jun 2026 16:10:46 GMT"},"fingerprint":{"sha1":"33:85:40:D1:0F:B2:13:2C:21:88:20:5E:A7:03:A0:96:CF:08:0D:BB","sha256":"39:EF:F2:F9:35:F0:6E:02:14:55:8F:E3:68:A2:34:A6:75:3A:E2:87:81:69:87:89:79:13:CC:F4:CD:36:2C:F2"}}},"request":{"raw":"GET /images/team7.webp HTTP/1.1\r\nHost: aml-confirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aml-confirm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 02:49:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9688\r\nlast-modified: Sun, 22 Feb 2026 14:12:50 GMT\r\npriority: u=4,i=?0\r\netag: \"699b0ee2-25d8\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0enDHztIXkHdw9B1VEEoJiLEH0smkGREh3gCdDUYFePZCc1zokFsLQGQuCYqCz0tNOKjIH9gmn%2BhPBTQa0qCkRbutMRRdxYaHqb5gSb40w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e125d3f1f975ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9688,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x366, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"21990ddbef30acafada5ba840885cd4e","sha1":"25696e08962a0758185198ede1429c789ab3516d","sha256":"241f8c2374eedda4b5bcdc553f91e383fb54cf2d99e8e9e3ca95fb935964c262","sha512":"a118c8c34208bb2c182be1c5b26551a1d6144172f32f40d929c148d2a972a942f85a73571381d6c5671c93718b3571fc3d446749dfdc4ce8c27292c432e68998","ssdeep":"192:i10Tks2INi0TU+xhRRqeksiFAoOqA1vrM4x6qlqRV7r5X6:imRgchR7ksfjqA1vrMOARFrs","tlshash":"3d12b018d340648eef0ae7445261726681d55b7abf7b5c701a3c8bda308f8b61906e45","first_seen":"2025-04-08T20:33:55.241357Z","last_seen":"2026-07-07T12:36:49.698299Z","times_seen":446,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"aml-confirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"aml-confirm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aml-confirm.com/images/4.webp","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aml-confirm.com/","date":"2026-03-24T02:49:43.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aml-confirm.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 16:10:47 GMT","end":"Tue, 09 Jun 2026 16:10:46 GMT"},"fingerprint":{"sha1":"33:85:40:D1:0F:B2:13:2C:21:88:20:5E:A7:03:A0:96:CF:08:0D:BB","sha256":"39:EF:F2:F9:35:F0:6E:02:14:55:8F:E3:68:A2:34:A6:75:3A:E2:87:81:69:87:89:79:13:CC:F4:CD:36:2C:F2"}}},"request":{"raw":"GET /images/4.webp HTTP/1.1\r\nHost: aml-confirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aml-confirm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 02:49:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14606\r\nlast-modified: Sun, 22 Feb 2026 14:12:33 GMT\r\npriority: u=4,i=?0\r\netag: \"699b0ed1-390e\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=45uHxqBw7Lf62eP68XV8eH9pTll1cD9U10yTHTpIkHBtIzvMCvaXnzpdA0jlTCL3bVOrWQQuuV3sObfVxw8mVxzOxvfxVBUbuuC38mu0dw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e125d3f1f9a5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14606,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"31ffdd1ae65c64be1c3c2293e50c8159","sha1":"36707dba6c5d6b0e035f48d03b54618553924546","sha256":"307b3e4aaf19b9749cb571f14b9223c3b6b34d44fd4a5476529d77cfe9c0b87a","sha512":"4af92e4afcf8aef5b7da022a7d1fa8f5e50b55a1c2b5833ce1d1436a75f9e57409540d813fe334ae197dc85688d6fa06ac904df557b8301b2c1f6bc1c20231d0","ssdeep":"384:d0oDXY3IdXSOoOwrt7kqZnuD4svFqz2JRH:no3IRSOoOwrt7kiuZvFy2XH","tlshash":"ac62cfbecfa3154a7f9fe3640590e4a331ab3e06c871f640188eead781f4951c90eac4","first_seen":"2025-06-26T13:18:40.488081Z","last_seen":"2026-07-03T05:00:40.541586Z","times_seen":61,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"aml-confirm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"aml-confirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aml-confirm.com/images/exhub.webp","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aml-confirm.com/","date":"2026-03-24T02:49:43.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aml-confirm.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 16:10:47 GMT","end":"Tue, 09 Jun 2026 16:10:46 GMT"},"fingerprint":{"sha1":"33:85:40:D1:0F:B2:13:2C:21:88:20:5E:A7:03:A0:96:CF:08:0D:BB","sha256":"39:EF:F2:F9:35:F0:6E:02:14:55:8F:E3:68:A2:34:A6:75:3A:E2:87:81:69:87:89:79:13:CC:F4:CD:36:2C:F2"}}},"request":{"raw":"GET /images/exhub.webp HTTP/1.1\r\nHost: aml-confirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aml-confirm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 02:49:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1632\r\nlast-modified: Sun, 22 Feb 2026 14:12:38 GMT\r\npriority: u=4,i=?0\r\netag: \"699b0ed6-660\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QgiXra%2B8ikGRMe0wg7U%2Fw2TlFL2eWXaf3lITvn3qdjz6f6N6KPpzXqQXvqk2cgtQ4oa6kHlKMtqyBTOdOLiMwSfk%2FUTw7AE6g7W4K8qWgg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e125d3f1f9f5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1632,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"29fb2f9d4e2bfb0b3b2f007ab824d0c8","sha1":"b1374a7d228afed6bd69ae74d8d3ad49c56643c5","sha256":"72c282f935d8fd7fee0fcb1b54ccd0c85cb7bbfa10248f6ae31442d2c9dd81a7","sha512":"ce8b7aac83fb05911ad77933cea315c67ff038e2e186582ca2e6f8dfb16e497da92b3ac40ddbb74b89741f4beb65dd3a0e25e52951d0ef296aa3c725f00a8499","ssdeep":"","tlshash":"e03108faa06ad3f36f14a77c484f1d03f0af00a855d526b2843d45e1a8439bc40cac95","first_seen":"2025-06-28T19:47:13.757157Z","last_seen":"2026-06-29T00:47:57.677944Z","times_seen":53,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"aml-confirm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"aml-confirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aml-confirm.com/images/eclipcoin.webp","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aml-confirm.com/","date":"2026-03-24T02:49:43.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aml-confirm.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 16:10:47 GMT","end":"Tue, 09 Jun 2026 16:10:46 GMT"},"fingerprint":{"sha1":"33:85:40:D1:0F:B2:13:2C:21:88:20:5E:A7:03:A0:96:CF:08:0D:BB","sha256":"39:EF:F2:F9:35:F0:6E:02:14:55:8F:E3:68:A2:34:A6:75:3A:E2:87:81:69:87:89:79:13:CC:F4:CD:36:2C:F2"}}},"request":{"raw":"GET /images/eclipcoin.webp HTTP/1.1\r\nHost: aml-confirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aml-confirm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 02:49:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2866\r\nlast-modified: Sun, 22 Feb 2026 14:12:37 GMT\r\npriority: u=4,i=?0\r\netag: \"699b0ed5-b32\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Teb3BA5vdVKMyFa0%2FRdySd0yneWY4n1Xa%2FeBMXX3%2BF52TX%2FtWwNgZq0kngj0HQPZS%2FWuxdX0nlzJ7Bnb87arEU6j7KQagKTLHj57yeSUeg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e125d3f2fa95ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2866,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"34b477453807018a581a6ce5b7f3f58b","sha1":"fb4b89f0bfb71662c3833f8578a6c68d2e8bbcd8","sha256":"7b1a9e0062a9f81d814646e338dd2c88f62e108e06169069be96ef5bf55b6415","sha512":"4cdffb2beb6656404c4ff200579cbe7c577495fc6662a5cb591101f7a349177c6246392fa80cefda216562c35477182e2af9e0326c0aaba9a96c78fce790974c","ssdeep":"","tlshash":"9f516e1542ffd46ed1267410702737044f7199d556e48ffa6b750634e0148d1995df31","first_seen":"2025-06-28T19:36:09.201208Z","last_seen":"2026-06-29T00:47:57.680539Z","times_seen":62,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"aml-confirm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"aml-confirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aml-confirm.com/logo.svg","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aml-confirm.com/","date":"2026-03-24T02:49:44.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aml-confirm.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 16:10:47 GMT","end":"Tue, 09 Jun 2026 16:10:46 GMT"},"fingerprint":{"sha1":"33:85:40:D1:0F:B2:13:2C:21:88:20:5E:A7:03:A0:96:CF:08:0D:BB","sha256":"39:EF:F2:F9:35:F0:6E:02:14:55:8F:E3:68:A2:34:A6:75:3A:E2:87:81:69:87:89:79:13:CC:F4:CD:36:2C:F2"}}},"request":{"raw":"GET /logo.svg HTTP/1.1\r\nHost: aml-confirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aml-confirm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 02:49:44 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y5PG0UaUb26X%2FzAh4LMIyo0zGq7QW0wcf5Uf0mLh1YohSuUd0RcC4AOPqB5YVvQ3PkK7S2JflkE%2FGY61QTjlvKfuJMouIjqQx%2FoaRANn4A%3D%3D\"}]}\r\nlast-modified: Sun, 22 Feb 2026 14:11:15 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699b0e83-30d\"\r\ncf-ray: 9e125d429fe05ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":781,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ff9efe0ade0ed1e708c8552a493031f8","sha1":"e6fb2c79d35a1ca7b836ca1548316227b134259a","sha256":"38a8a92ab37680e042580a6ef7de38b9f0d18770ee1bfc3538ae0606484a50db","sha512":"93f57b068d4d066cc32a114fc12542e1c7065b8e1e56c9803fbe7af7a0839e4b6d70e131ec3e4c392e467c688051060fbad57a315974b814dbb7bc2dd8ca3e9f","ssdeep":"","tlshash":"d101b8fa93907298d819d368e33b9466711a39f1fea7877d01889c24b1031aef45d9e0","first_seen":"2026-03-09T14:41:09.844606Z","last_seen":"2026-03-28T06:24:32.020695Z","times_seen":8,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"aml-confirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"aml-confirm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aml-confirm.com/images/uniochange.webp","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aml-confirm.com/","date":"2026-03-24T02:49:43.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aml-confirm.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 16:10:47 GMT","end":"Tue, 09 Jun 2026 16:10:46 GMT"},"fingerprint":{"sha1":"33:85:40:D1:0F:B2:13:2C:21:88:20:5E:A7:03:A0:96:CF:08:0D:BB","sha256":"39:EF:F2:F9:35:F0:6E:02:14:55:8F:E3:68:A2:34:A6:75:3A:E2:87:81:69:87:89:79:13:CC:F4:CD:36:2C:F2"}}},"request":{"raw":"GET /images/uniochange.webp HTTP/1.1\r\nHost: aml-confirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aml-confirm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 02:49:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4226\r\nlast-modified: Sun, 22 Feb 2026 14:12:53 GMT\r\npriority: u=4,i=?0\r\netag: \"699b0ee5-1082\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kMCuYsxOriFzQmxsXXQy0GjMnFreNZLwLVX9pQ3rsmnOI0I2oMuJaRMdFEP2m2ho3N8Ml1Z5sZ%2BkVrr8W3zOu6AH3LZ9VxhFqCKyb0E%2FNg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e125d3f2fa55ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4226,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6c1d8ecc4eb00c7b2fc07c6e6bf80d62","sha1":"9f4768ee54c89fc835ab8ebb553f27d1687d6c09","sha256":"239a8beaafa035e38e4e3a96bd524269676557d5f2fa5c2b64e086a283e82308","sha512":"a4a3a752dbf6a1d97c0e711bf100988e80fa47bfc6288ccf523bf97b0527d4373267f4306cf0d04cf6cd10d430b609bd9e82153e28b244297108ffbc3761eb0a","ssdeep":"96:vytkHXw/Xbumhm5aioWQPDN7a4Ic44MUut0mXZ5FsmOA:mkA/w53JQPDVa4T44MUutBXZ5Fso","tlshash":"f8917f549f8835318c170d4928372225a0e4968edc380ddfee531c21676dcb1b9b1f3c","first_seen":"2025-04-08T20:33:55.219007Z","last_seen":"2026-07-18T17:51:01.771098Z","times_seen":403,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"aml-confirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"aml-confirm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aml-confirm.com/assets/main-DxLw_CHK.js","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aml-confirm.com/","date":"2026-03-24T02:49:43.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aml-confirm.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 16:10:47 GMT","end":"Tue, 09 Jun 2026 16:10:46 GMT"},"fingerprint":{"sha1":"33:85:40:D1:0F:B2:13:2C:21:88:20:5E:A7:03:A0:96:CF:08:0D:BB","sha256":"39:EF:F2:F9:35:F0:6E:02:14:55:8F:E3:68:A2:34:A6:75:3A:E2:87:81:69:87:89:79:13:CC:F4:CD:36:2C:F2"}}},"request":{"raw":"GET /assets/main-DxLw_CHK.js HTTP/1.1\r\nHost: aml-confirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aml-confirm.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 02:49:43 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zlVv0xVTOkvNejm%2F4FdPbepTG4CUE00xBoOWwFbiwa7Ny7C36JXKt5WEFKp58R0UD04gLfeI2YXrTMK1QI8e791%2FpUgDfjFesUfLdMhyeA%3D%3D\"}]}\r\nlast-modified: Sun, 22 Feb 2026 14:11:23 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699b0e8b-1ff9\"\r\ncf-ray: 9e125d3f0f8c5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8185,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6441)","md5":"84276ac871f81d10d03329dc8674f643","sha1":"cbaeb4e440b729f1d5ff98a749ffec75ce99f3b4","sha256":"640a95f985816b3fd842a89c91c3c2e8cc49d792b93eaf64db657104b63ccd02","sha512":"8ab45259e77556bdf0300508a6477af499085cf3bd3b6bd23c7201fec803abe75a9a07fcac1ae58dfe36083c59bea1c94891937d2935c7e1c5db0f88ba8c2fed","ssdeep":"192:2Y2gC8IkWneP0MfFbJPwDKDgSjXYQuK0HqbP/2mCX7TFdr:2Y2gC8VWeVPwmcVQz0H+UTjr","tlshash":"f3f1d86b238c333742971a52b75e93d2a3705098f57750a050ad842d53fbdb9c2b7af4","first_seen":"2026-02-06T23:09:55.759519Z","last_seen":"2026-03-28T06:24:32.014944Z","times_seen":11,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"aml-confirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"aml-confirm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aml-confirm.com/images/team9.webp","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aml-confirm.com/","date":"2026-03-24T02:49:43.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aml-confirm.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 16:10:47 GMT","end":"Tue, 09 Jun 2026 16:10:46 GMT"},"fingerprint":{"sha1":"33:85:40:D1:0F:B2:13:2C:21:88:20:5E:A7:03:A0:96:CF:08:0D:BB","sha256":"39:EF:F2:F9:35:F0:6E:02:14:55:8F:E3:68:A2:34:A6:75:3A:E2:87:81:69:87:89:79:13:CC:F4:CD:36:2C:F2"}}},"request":{"raw":"GET /images/team9.webp HTTP/1.1\r\nHost: aml-confirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aml-confirm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 02:49:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11080\r\nlast-modified: Sun, 22 Feb 2026 14:12:52 GMT\r\npriority: u=4,i=?0\r\netag: \"699b0ee4-2b48\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3i9UvHDVH0jmmDaP0zcUY5DQoFHbVF%2Bv3AVWlXYAT4klNBmF74zoiMfHN2WF0rbMO1P3tBODplfkGeeYFr%2FHopMjZHcTKTQtagqCyijR8Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e125d3f1f995ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11080,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x366, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"87d484adedd61343f676bf417fc61fd6","sha1":"96cf1ad110d99c2870f85c9f5c717fbb14f6c44f","sha256":"ec79aeb903b3fa0ad35e684b252ab35fc654bcdf93fa4b28cccac058b8b69ccf","sha512":"7a6d1e57e3434d8ae603cc9d8d1c3b80ab1666a281d62b16f1ea109d97d52b64aebba41d998be548f2d69c5c052f1e1d80abfa07bad36a595aea3da0ebfeb125","ssdeep":"192:qmmu84BOdcxxn8iFk6GI+HgvIm6mKj544gF2jVr19XzKlpwoTI4GlZY92Vm:qmmvX/iWEvp6Bj5NgFI39jKlp7TnGlZI","tlshash":"ff32c0f5858d67f49f809b468043ec6d04b7905bce86e1e6013b640a8a77c89ec2a31e","first_seen":"2025-04-08T20:33:55.23263Z","last_seen":"2026-07-07T12:36:49.699362Z","times_seen":446,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"aml-confirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"aml-confirm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aml-confirm.com/images/crystal.webp","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aml-confirm.com/","date":"2026-03-24T02:49:43.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aml-confirm.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 16:10:47 GMT","end":"Tue, 09 Jun 2026 16:10:46 GMT"},"fingerprint":{"sha1":"33:85:40:D1:0F:B2:13:2C:21:88:20:5E:A7:03:A0:96:CF:08:0D:BB","sha256":"39:EF:F2:F9:35:F0:6E:02:14:55:8F:E3:68:A2:34:A6:75:3A:E2:87:81:69:87:89:79:13:CC:F4:CD:36:2C:F2"}}},"request":{"raw":"GET /images/crystal.webp HTTP/1.1\r\nHost: aml-confirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aml-confirm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 02:49:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2204\r\nlast-modified: Sun, 22 Feb 2026 14:12:37 GMT\r\npriority: u=4,i=?0\r\netag: \"699b0ed5-89c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sPz0jFGnd7XFbt34vZfWQYOhqNkpuPGhebx4Xzx3yflNq1JZbp7OarsloiTC4AFAaCJuItPLLvdqfdE4OhPRXkjahKxP3n69oUqLNEiVvg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e125d3f2fa05ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2204,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"055f0bd8c5955c37fe06cd1e13465792","sha1":"2d6a5d77ce9d27f3e017dab40b83d776cea1fd61","sha256":"7f94d16d2a76b2dedf373d8611a8ab94c011e367d1f3bbd6703704e9f7f584ac","sha512":"bc51f6ad9b566868d7e0f67d15659e98e3e61c40cb35139ab1e6f4977aa20dacdce1f4c92fcd37732c4ad517d5466dd254407f71821c92e88adde0ee77b6bdee","ssdeep":"","tlshash":"b8412b704a45bc70a163d6393112f7246c85ca888795541a4fb09f9df13d4dc6cc3ce7","first_seen":"2025-06-28T19:36:09.245667Z","last_seen":"2026-06-28T23:08:29.221193Z","times_seen":61,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"aml-confirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"aml-confirm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aml-confirm.com/images/scrooge.webp","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aml-confirm.com/","date":"2026-03-24T02:49:43.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aml-confirm.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 16:10:47 GMT","end":"Tue, 09 Jun 2026 16:10:46 GMT"},"fingerprint":{"sha1":"33:85:40:D1:0F:B2:13:2C:21:88:20:5E:A7:03:A0:96:CF:08:0D:BB","sha256":"39:EF:F2:F9:35:F0:6E:02:14:55:8F:E3:68:A2:34:A6:75:3A:E2:87:81:69:87:89:79:13:CC:F4:CD:36:2C:F2"}}},"request":{"raw":"GET /images/scrooge.webp HTTP/1.1\r\nHost: aml-confirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aml-confirm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 02:49:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3284\r\nlast-modified: Sun, 22 Feb 2026 14:12:47 GMT\r\npriority: u=4,i=?0\r\netag: \"699b0edf-cd4\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BVuuZFc%2BzrXhOalnq%2F3B32tNSueoGnC6a7nMFoXPDlU6RoOyc9Z4cvRCcxbmu8ql52d7yIYjykXQqw6ELLAozI0iCPSDj9C3BRt1Co8L5Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e125d3f2fa35ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3284,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"884c19cf4efbb63139e9156da3fc6ad3","sha1":"6b940a1205537db46cf4299e059085e87d60a7b7","sha256":"586bc9c6999a57c34d63512ff02f1e988c54415ff1fa958a490e74bf22c41292","sha512":"94e89bbaafe87140a299893ec9a231515a9a6adf2dcd346b2e4d4f7a4a5ffcd940387b93f7b3e643086788cfbe023e9a5489e10b69595f34f5c89e347e391af1","ssdeep":"","tlshash":"33614b9346f168d3d8caa494d0ef697bd7dda8803b9290798f65d474342c10afba750c","first_seen":"2025-06-28T19:36:09.224686Z","last_seen":"2026-06-29T00:47:57.698624Z","times_seen":62,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"aml-confirm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"aml-confirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aml-confirm.com/images/team4.webp","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aml-confirm.com/","date":"2026-03-24T02:49:43.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aml-confirm.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 16:10:47 GMT","end":"Tue, 09 Jun 2026 16:10:46 GMT"},"fingerprint":{"sha1":"33:85:40:D1:0F:B2:13:2C:21:88:20:5E:A7:03:A0:96:CF:08:0D:BB","sha256":"39:EF:F2:F9:35:F0:6E:02:14:55:8F:E3:68:A2:34:A6:75:3A:E2:87:81:69:87:89:79:13:CC:F4:CD:36:2C:F2"}}},"request":{"raw":"GET /images/team4.webp HTTP/1.1\r\nHost: aml-confirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aml-confirm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 02:49:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4960\r\nlast-modified: Sun, 22 Feb 2026 14:12:48 GMT\r\npriority: u=4,i=?0\r\netag: \"699b0ee0-1360\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gt92w8TpCPn0eVyXDPzpLMqNZOPIw5BqU55TUdGLsnk78HeU7aQiqQnt1JmGbl8QhkPYgvyX7YzO2s3zFSQ7oKOfTLknh14bsMtwdWeljw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e125d3f1f945ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4960,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x366, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"667a7a156924eb8cf1ea2cc310fa84be","sha1":"a0c41d24550cb1375e1e7184e562cdd1fc19bdaf","sha256":"687e6062d6b65a7669c1badbbf7a4f374eb95572ab40efefcabee1208b96f679","sha512":"c7f8d10bc7c4d14fc2a2444150999baf64f7ae98728ddcc09bbc6147d8452bfdf08f3e17780641303299482bc7ab237d9df36f332446d674632771ff81d2b99e","ssdeep":"96:MZETuQouq6zgoF7sOUTf/l6RdFDcPAnD+zFc5msuDmMIui/Jyx9woc0BhNC3:3TuQo67sO4/ATFDoAD+zW5mVTIRhnocb","tlshash":"e6a18d621f66e1a1eb564f3b2431ca4a218337c487c490a8b3a99c9561d597cabe3b12","first_seen":"2025-04-08T20:33:55.212733Z","last_seen":"2026-07-07T12:36:49.703173Z","times_seen":528,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"aml-confirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"aml-confirm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aml-confirm.com/images/1.webp","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aml-confirm.com/","date":"2026-03-24T02:49:43.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aml-confirm.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 16:10:47 GMT","end":"Tue, 09 Jun 2026 16:10:46 GMT"},"fingerprint":{"sha1":"33:85:40:D1:0F:B2:13:2C:21:88:20:5E:A7:03:A0:96:CF:08:0D:BB","sha256":"39:EF:F2:F9:35:F0:6E:02:14:55:8F:E3:68:A2:34:A6:75:3A:E2:87:81:69:87:89:79:13:CC:F4:CD:36:2C:F2"}}},"request":{"raw":"GET /images/1.webp HTTP/1.1\r\nHost: aml-confirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aml-confirm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 02:49:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17736\r\nlast-modified: Sun, 22 Feb 2026 14:12:29 GMT\r\npriority: u=4,i=?0\r\netag: \"699b0ecd-4548\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WhjgJEL7qUIQmN31rSE44LaqPTjtUH3vlcLC8y06jI6vVGGSXCcmzkNjppXyN2uER9iS1jwq8z99jx2xsR3nsbhOKbrKEAObKLZw%2BUFpYg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e125d3f1f9c5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17736,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"34c33fe8802b4b10208dfcdda6009966","sha1":"2549fe12531916aecc8eef914cf684386f5ce0ac","sha256":"4b5e126864d6ae239eb63902c59095ba7c9ddcadf60280435eccda33a0814984","sha512":"cfa542e991efff731ad35bec5dcb3b340567e9fa298346fa86db04ee1cdba24694aacec15b26e0788c76a81ad3c0d339c181d89aa7ded77067dca7ac806ef64c","ssdeep":"384:wyj4IS710dt8qZ/66Gswpf3ob8ftZrTfhqwXRFuxZ:EdZqZ/bGZokHrTfhqwXWZ","tlshash":"2c82d0eab9b341445c3bbd36892aab1a149f943d262c75344d8318cb47d6ec33252f6c","first_seen":"2025-06-26T13:18:40.476679Z","last_seen":"2026-07-03T05:00:40.52998Z","times_seen":69,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"aml-confirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"aml-confirm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aml-confirm.com/images/22.webp","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aml-confirm.com/","date":"2026-03-24T02:49:43.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aml-confirm.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 16:10:47 GMT","end":"Tue, 09 Jun 2026 16:10:46 GMT"},"fingerprint":{"sha1":"33:85:40:D1:0F:B2:13:2C:21:88:20:5E:A7:03:A0:96:CF:08:0D:BB","sha256":"39:EF:F2:F9:35:F0:6E:02:14:55:8F:E3:68:A2:34:A6:75:3A:E2:87:81:69:87:89:79:13:CC:F4:CD:36:2C:F2"}}},"request":{"raw":"GET /images/22.webp HTTP/1.1\r\nHost: aml-confirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aml-confirm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 02:49:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19300\r\nlast-modified: Sun, 22 Feb 2026 14:12:31 GMT\r\npriority: u=4,i=?0\r\netag: \"699b0ecf-4b64\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i3O2gETSfYnZNLxsRJ%2BUR8Ml%2B%2FruYcgAAFXwSZU0W1NGtNTumhP1o8nsMtABacTfUa2%2BXF9aTzyL1PE9pM2xZDq79pEuIyT%2F2OopJKdA2w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e125d3f2fad5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19300,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d4224b0cea000adfe29027c4ace6ca90","sha1":"f3f62f8c429c5446db4ee28f6857c81265bb6a8d","sha256":"9c5add30b5e422671689a41106849fdc2319a01ac3952b16c9506aed05bfedd8","sha512":"f846a43f28741f7a4ee7528a042e9d0de1bb45ccb65e239f9941c4a536f74529539d08f9f740f437bb523a8f5756292835dec6dc15e2825c1b082d04a236a04b","ssdeep":"384:60GohnG8pPSTVjACEs6tLfdQYaW+61jXKDFFoBlM7PD0sHLG2Xz2x:60GoI8ZyVjCLSiZ1jXA8l0rbLG2XKx","tlshash":"cf82c0d0d6b9946bacbc43a8bf2011bdb5fc12ea3a545b134d00747c87eb97a076ad34","first_seen":"2025-04-08T20:33:55.237744Z","last_seen":"2026-07-07T12:36:49.720603Z","times_seen":439,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"aml-confirm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"aml-confirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aml-confirm.com/assets/utils-D71RtZIR.js","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aml-confirm.com/","date":"2026-03-24T02:49:43.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aml-confirm.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 16:10:47 GMT","end":"Tue, 09 Jun 2026 16:10:46 GMT"},"fingerprint":{"sha1":"33:85:40:D1:0F:B2:13:2C:21:88:20:5E:A7:03:A0:96:CF:08:0D:BB","sha256":"39:EF:F2:F9:35:F0:6E:02:14:55:8F:E3:68:A2:34:A6:75:3A:E2:87:81:69:87:89:79:13:CC:F4:CD:36:2C:F2"}}},"request":{"raw":"GET /assets/utils-D71RtZIR.js HTTP/1.1\r\nHost: aml-confirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aml-confirm.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 02:49:44 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RkT4%2FX0dsYOvRbaEv7jLBdk8mwTEJPx3k05A7KATwHjlIwezjoU7OVoTlexrfZoP5iHmu2uhAyWolhA6qr75i4yOS4x8fJ7maq0JBazuiQ%3D%3D\"}]}\r\nlast-modified: Sun, 22 Feb 2026 14:11:42 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699b0e9e-19ef\"\r\ncf-ray: 9e125d41efd25ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6639,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6638)","md5":"969f4cbff620f8c20a8f68f2d33e1d64","sha1":"e2da6ce119af68a3a102f8a814af112f0f23dbe6","sha256":"251bff81a06fa4c957373a22260fc7a6d338ec96c8e9aa9201b95c78528f62c0","sha512":"a13db6cf54c57bd14931d4635c7c3d1a94d7e46069c402259cca9d06ee651f041b42d9c154078516716a17023c9f3d7923e6d78774f32c5d8784efb88cc2db0a","ssdeep":"192:cr7vjLWfvAIQcx6q5hlia6vNaSuXceqqeee/erNBl09yt:cvbLWf4IQrMiJvNduXrqt5mrrS92","tlshash":"a7d1b7dd72d170765b9705ea80fa0506f22c04d8345e8490f15cdcba797572a43bbafd","first_seen":"2025-10-07T04:53:21.658478Z","last_seen":"2026-05-12T11:03:46.899875Z","times_seen":17,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"aml-confirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"aml-confirm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aml-confirm.com/assets/index-itS0ERym.js","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aml-confirm.com/","date":"2026-03-24T02:49:43.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aml-confirm.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 16:10:47 GMT","end":"Tue, 09 Jun 2026 16:10:46 GMT"},"fingerprint":{"sha1":"33:85:40:D1:0F:B2:13:2C:21:88:20:5E:A7:03:A0:96:CF:08:0D:BB","sha256":"39:EF:F2:F9:35:F0:6E:02:14:55:8F:E3:68:A2:34:A6:75:3A:E2:87:81:69:87:89:79:13:CC:F4:CD:36:2C:F2"}}},"request":{"raw":"GET /assets/index-itS0ERym.js HTTP/1.1\r\nHost: aml-confirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aml-confirm.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 02:49:44 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bh%2Bf5b%2Biw5r2%2FYiLMoL8JDkK%2BMXyP8aoKkFqSay%2B%2BfuBBuJ2RYAvdWNMMce0VBXTXTzlm1oNFUYvbsOYp2vjT2jZHu5%2BdL2mMdhS0rWzEw%3D%3D\"}]}\r\nlast-modified: Sun, 22 Feb 2026 14:11:22 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699b0e8a-14e25\"\r\ncf-ray: 9e125d41efd35ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85541,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b1fd8c53af973c9ef2888d835156b0f7","sha1":"c6381915a99cb1ed5a2859053f079febbbfd2201","sha256":"7b6913faea60bba92406b606e8cd4ed005cdaeadfd4848e5bc8a28cf95b8d03f","sha512":"c4db19819707920f1b563971f956231a9a20e2bce3ab4529a56852519ee4a836493a34a339fb048c73e3ad0708d5fec1358c467ea0ad62eb71d1153b19a8f621","ssdeep":"1536:Dx+1P8UtMvqB0oC0aqp9OEXCsY8+MqkEWR2rGjQHxmw/rq:DADMvboRdCsh+MqkWnRmAq","tlshash":"89830899221066b546eb17ca52e8c65163b44444b40ed5f830fd4caf6a7ec9803bfffa","first_seen":"2026-02-06T23:09:55.745233Z","last_seen":"2026-03-28T06:24:32.023539Z","times_seen":11,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"aml-confirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"aml-confirm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aml-confirm.com/assets/index-itS0ERym.js","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aml-confirm.com/","date":"2026-03-24T02:49:43.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aml-confirm.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 16:10:47 GMT","end":"Tue, 09 Jun 2026 16:10:46 GMT"},"fingerprint":{"sha1":"33:85:40:D1:0F:B2:13:2C:21:88:20:5E:A7:03:A0:96:CF:08:0D:BB","sha256":"39:EF:F2:F9:35:F0:6E:02:14:55:8F:E3:68:A2:34:A6:75:3A:E2:87:81:69:87:89:79:13:CC:F4:CD:36:2C:F2"}}},"request":{"raw":"GET /assets/index-itS0ERym.js HTTP/1.1\r\nHost: aml-confirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aml-confirm.com/assets/main-DxLw_CHK.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 02:49:44 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eJgQr%2FHdlc89FrZqszlIF4wNms2SZJuS2TwZ%2BHfm6kLG0SwqayTSSfqGlhR8n5rIuw1yt4BSCsvy5MHZoz6QFJYmpIpMu2E0m1YgF6VQlg%3D%3D\"}]}\r\nlast-modified: Sun, 22 Feb 2026 14:11:22 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"699b0e8a-14e25\"\r\ncf-ray: 9e125d41efd55ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85541,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b1fd8c53af973c9ef2888d835156b0f7","sha1":"c6381915a99cb1ed5a2859053f079febbbfd2201","sha256":"7b6913faea60bba92406b606e8cd4ed005cdaeadfd4848e5bc8a28cf95b8d03f","sha512":"c4db19819707920f1b563971f956231a9a20e2bce3ab4529a56852519ee4a836493a34a339fb048c73e3ad0708d5fec1358c467ea0ad62eb71d1153b19a8f621","ssdeep":"1536:Dx+1P8UtMvqB0oC0aqp9OEXCsY8+MqkEWR2rGjQHxmw/rq:DADMvboRdCsh+MqkWnRmAq","tlshash":"89830899221066b546eb17ca52e8c65163b44444b40ed5f830fd4caf6a7ec9803bfffa","first_seen":"2026-02-06T23:09:55.745233Z","last_seen":"2026-03-28T06:24:32.023539Z","times_seen":11,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"aml-confirm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"aml-confirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aml-confirm.com/assets/utils-D71RtZIR.js","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aml-confirm.com/","date":"2026-03-24T02:49:44.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aml-confirm.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 16:10:47 GMT","end":"Tue, 09 Jun 2026 16:10:46 GMT"},"fingerprint":{"sha1":"33:85:40:D1:0F:B2:13:2C:21:88:20:5E:A7:03:A0:96:CF:08:0D:BB","sha256":"39:EF:F2:F9:35:F0:6E:02:14:55:8F:E3:68:A2:34:A6:75:3A:E2:87:81:69:87:89:79:13:CC:F4:CD:36:2C:F2"}}},"request":{"raw":"GET /assets/utils-D71RtZIR.js HTTP/1.1\r\nHost: aml-confirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aml-confirm.com/assets/index-itS0ERym.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 02:49:44 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AIJ5hWNWQ9owLOKPr52bpPufzR7ymxfhK7v5%2FxaM7%2BUDJ1gZvDQxIaKe5ft%2BavBfvn6jhBc%2B2t6Cfp9sMWvgBsNM8%2BPRg6UBXW4iOADzhw%3D%3D\"}]}\r\nlast-modified: Sun, 22 Feb 2026 14:11:42 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"699b0e9e-19ef\"\r\ncf-ray: 9e125d428fde5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6639,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6638)","md5":"969f4cbff620f8c20a8f68f2d33e1d64","sha1":"e2da6ce119af68a3a102f8a814af112f0f23dbe6","sha256":"251bff81a06fa4c957373a22260fc7a6d338ec96c8e9aa9201b95c78528f62c0","sha512":"a13db6cf54c57bd14931d4635c7c3d1a94d7e46069c402259cca9d06ee651f041b42d9c154078516716a17023c9f3d7923e6d78774f32c5d8784efb88cc2db0a","ssdeep":"192:cr7vjLWfvAIQcx6q5hlia6vNaSuXceqqeee/erNBl09yt:cvbLWf4IQrMiJvNduXrqt5mrrS92","tlshash":"a7d1b7dd72d170765b9705ea80fa0506f22c04d8345e8490f15cdcba797572a43bbafd","first_seen":"2025-10-07T04:53:21.658478Z","last_seen":"2026-05-12T11:03:46.899875Z","times_seen":17,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"aml-confirm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"aml-confirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aml-confirm.com/main.css","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aml-confirm.com/","date":"2026-03-24T02:49:43.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aml-confirm.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 16:10:47 GMT","end":"Tue, 09 Jun 2026 16:10:46 GMT"},"fingerprint":{"sha1":"33:85:40:D1:0F:B2:13:2C:21:88:20:5E:A7:03:A0:96:CF:08:0D:BB","sha256":"39:EF:F2:F9:35:F0:6E:02:14:55:8F:E3:68:A2:34:A6:75:3A:E2:87:81:69:87:89:79:13:CC:F4:CD:36:2C:F2"}}},"request":{"raw":"GET /main.css HTTP/1.1\r\nHost: aml-confirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aml-confirm.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 02:49:43 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BFGoyiE03Q5E0DqSr%2B2LBVa5zKZAp%2BSQCEs1Gli8s9faMowkJLRU%2FzS6%2B%2FG315ucKAaQ4aYZDWsUYD1BD1LUy172oWi9VDEqupWx%2BCRHQg%3D%3D\"}]}\r\nlast-modified: Sun, 22 Feb 2026 14:11:17 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699b0e85-21fc5\"\r\ncf-ray: 9e125d3f0f8b5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":139205,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (27787)","md5":"c35c6cffc2974b4ff1da8284f24d348a","sha1":"e064571c4d383baf603afe4e02612f45f73158ae","sha256":"6b5bb65897d9f89c1cd004229432f6f6f468343dde3c804d88fbf7372a49426f","sha512":"c2b1b974a82cb3a1bbbfe957bf84923dcaaf2cb9f2dc11eb3a3d98461d711b8327aa3d78c99ec6531b8facad0dc1367889e49d5dba45cafb87cdf85122eb0ed7","ssdeep":"1536:+MJihoCcZCOud8G8tKS65wqsZCG+dM2cl6iCRotsV84sxIKcv4g01UeEPEQEB4KC:ywu/diUyjU5KOUSf","tlshash":"7ad3a765365c14047d0b9912269f1b68227cb041d92acaf8fee33588decade575b3f8c","first_seen":"2025-06-26T13:44:20.104496Z","last_seen":"2026-04-27T03:22:06.487935Z","times_seen":66,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"aml-confirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"aml-confirm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aml-confirm.com/images/team6.webp","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aml-confirm.com/","date":"2026-03-24T02:49:43.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aml-confirm.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 16:10:47 GMT","end":"Tue, 09 Jun 2026 16:10:46 GMT"},"fingerprint":{"sha1":"33:85:40:D1:0F:B2:13:2C:21:88:20:5E:A7:03:A0:96:CF:08:0D:BB","sha256":"39:EF:F2:F9:35:F0:6E:02:14:55:8F:E3:68:A2:34:A6:75:3A:E2:87:81:69:87:89:79:13:CC:F4:CD:36:2C:F2"}}},"request":{"raw":"GET /images/team6.webp HTTP/1.1\r\nHost: aml-confirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aml-confirm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 02:49:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8070\r\nlast-modified: Sun, 22 Feb 2026 14:12:50 GMT\r\npriority: u=4,i=?0\r\netag: \"699b0ee2-1f86\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tsU9IGoy6U7c99S%2Bqzxk7h2qjgD8J6%2FeyhIJhy7KwuuvbBUn%2FDmAla7QTTDskGeGgguHivySL5KWU7bAU5eqHQcAmBqhhQ%2FDN4RzCd8edQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e125d3f1f965ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8070,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x366, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ff92c5d0702748d4fd4a7598287b52e9","sha1":"1c52f75273473401f01060b11732c9f2b93bdec0","sha256":"4678f709196922389c98ba22c894212e124843154455769551b2af283e2afb78","sha512":"0d728fb2b6b205466fda940e0732da04c5bd6f42a17a266ba871e2412d285caada5814ed15240ebfa942798871c2de97ee109cd16856da574255de2ba4abca5c","ssdeep":"96:Ag9uYyKIvVYX1msb1sbUItmcdl0+InYMAXAf6glqBTTCxBd5bIe75fPM8Hif/pDq:V94J+8sRYHzM3dtPMSifFKXG+8W9fJ","tlshash":"d7f1c0157ba4493c6ee08b78d1f4e6827ef5dd0946f37d1a580518f43c2d690390bb26","first_seen":"2025-04-08T20:33:55.234306Z","last_seen":"2026-07-07T12:36:49.666952Z","times_seen":445,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"aml-confirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"aml-confirm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aml-confirm.com/images/team8.webp","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aml-confirm.com/","date":"2026-03-24T02:49:43.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aml-confirm.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 16:10:47 GMT","end":"Tue, 09 Jun 2026 16:10:46 GMT"},"fingerprint":{"sha1":"33:85:40:D1:0F:B2:13:2C:21:88:20:5E:A7:03:A0:96:CF:08:0D:BB","sha256":"39:EF:F2:F9:35:F0:6E:02:14:55:8F:E3:68:A2:34:A6:75:3A:E2:87:81:69:87:89:79:13:CC:F4:CD:36:2C:F2"}}},"request":{"raw":"GET /images/team8.webp HTTP/1.1\r\nHost: aml-confirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aml-confirm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 02:49:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19804\r\nlast-modified: Sun, 22 Feb 2026 14:12:51 GMT\r\npriority: u=4,i=?0\r\netag: \"699b0ee3-4d5c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GPznugDyCKCtwbMFOCBDcLeGawx%2FH5JTJhSYOnzfdl1VgtPNQGESVQ4F%2FvjZtJRvGvQLb0llOzJco277sEK4lWIPL%2FjipROCtYHZvex0%2Bg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e125d3f1f985ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19804,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x366, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fd8f7be198d97dbaaa2d1a3b5645191b","sha1":"8ca51f777ba30dbb1f57c755abe0cd17c9ba3ccc","sha256":"3d886348daceeeb72cbb1f157440d88e3cd8e273199f0be11ab8fb489a8d6b60","sha512":"618952eff83f028c6d211dffe0525d2f6c2b957552e33010698dd8119163ccc349d5389c2cd78e0ea58f80ce7e710cbc9417df9d48c33091bd6db2ee3651c910","ssdeep":"384:jnpCiYZLoKv/PpXu2HTr6bhIBuwbIkC5SxpHgoIHEC4Eij4dvvngZp+T:jnBYSa/HHTrqqUwG5cHaLi0d0E","tlshash":"a592d1066158b1a2e7bfe4029bad2daf1d20c2cdb86806534d9cf141d617db27b3f56c","first_seen":"2025-04-08T20:33:55.235982Z","last_seen":"2026-07-07T12:36:49.720086Z","times_seen":446,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"aml-confirm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"aml-confirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aml-confirm.com/images/2.webp","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aml-confirm.com/","date":"2026-03-24T02:49:43.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aml-confirm.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 16:10:47 GMT","end":"Tue, 09 Jun 2026 16:10:46 GMT"},"fingerprint":{"sha1":"33:85:40:D1:0F:B2:13:2C:21:88:20:5E:A7:03:A0:96:CF:08:0D:BB","sha256":"39:EF:F2:F9:35:F0:6E:02:14:55:8F:E3:68:A2:34:A6:75:3A:E2:87:81:69:87:89:79:13:CC:F4:CD:36:2C:F2"}}},"request":{"raw":"GET /images/2.webp HTTP/1.1\r\nHost: aml-confirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aml-confirm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 02:49:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16496\r\nlast-modified: Sun, 22 Feb 2026 14:12:30 GMT\r\npriority: u=4,i=?0\r\netag: \"699b0ece-4070\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gDvF2ooCfz840dm%2F%2F9vnfCXViKUJGfzS89xarUglJyAiWlM82EwiIF6TcEMnrdlbSoZlLSr8ruw6%2Ft8SiS6ak7EjobyVPjmQ2yrFAUOfCw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e125d3f1f9d5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16496,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"947df7acced5b51c6ae36be4222f3a07","sha1":"005acda28e64be4fbaf62a6d01daebb207479719","sha256":"811597a429f841b4828b6085091688919b6681231c6d3d65a0fa195fc4d7be63","sha512":"f7c6911f67e05c60c60140738166b26a2ab45628b54bb4305a8dd86e12420815fe8f85ea35f2fbfff6948272ab937ce31ed2622f07a66abdf97ebfb84006608c","ssdeep":"384:LiUoRMMG9fJt6yEYwbgl2AGblGsOEXkTnAwvamRO6wP2O7Rf2miXO:LiRRLG9T6pYJ2DYt3vBpO7ReXXO","tlshash":"9e72c01a60f31457ed7c3c8d742bda42e86694261e540f8a6d849fd0d619dafb2019ce","first_seen":"2025-06-26T13:18:40.480454Z","last_seen":"2026-07-03T05:00:40.549121Z","times_seen":68,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"aml-confirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"aml-confirm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aml-confirm.com/images/amlsafe.webp","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aml-confirm.com/","date":"2026-03-24T02:49:43.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aml-confirm.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 16:10:47 GMT","end":"Tue, 09 Jun 2026 16:10:46 GMT"},"fingerprint":{"sha1":"33:85:40:D1:0F:B2:13:2C:21:88:20:5E:A7:03:A0:96:CF:08:0D:BB","sha256":"39:EF:F2:F9:35:F0:6E:02:14:55:8F:E3:68:A2:34:A6:75:3A:E2:87:81:69:87:89:79:13:CC:F4:CD:36:2C:F2"}}},"request":{"raw":"GET /images/amlsafe.webp HTTP/1.1\r\nHost: aml-confirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aml-confirm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 02:49:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9844\r\nlast-modified: Sun, 22 Feb 2026 14:12:35 GMT\r\npriority: u=4,i=?0\r\netag: \"699b0ed3-2674\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L4pZjjG13W1Dl6Ms2DcNfILKEnUbjhuJ0201DlUkIjoEGf%2BL8V5hWxO8eR8LzEWRhRp5LAa4don4qpYbyxdH9bt%2FYAwzi5ilFyUBwlK4sA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e125d3f2fa65ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9844,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f748a3cfd9873d313464f9e4bbcd76f2","sha1":"a83bddfbde067d55b167ec308e126cf8ca62f39d","sha256":"8fbbeb76beafc36aa0ea7fc570774505c2420352539aef015c3de412cf89a6db","sha512":"ef92662bbe1500595f103d365ff34222f0e6b6286dc3dd240f276d2d8965f8cebd9398adc835c0e4e9c1b06ffbef80edfb0084a5d717139bd5ed6edcaecc078d","ssdeep":"192:ZFiBIVp+T5ehnQHhd5BTr2zdmQbkJZaGwcs5LREy:Z7H+T5QnO75B24QbkzcLR","tlshash":"b8121a95884d9044db9790f86f0320b3a9798873cadcae7384fef0a5d7591f19fa9d40","first_seen":"2025-04-08T20:33:55.228278Z","last_seen":"2026-07-18T17:51:01.767266Z","times_seen":402,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"aml-confirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"aml-confirm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aml-confirm.com/images/33.webp","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aml-confirm.com/","date":"2026-03-24T02:49:43.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aml-confirm.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 16:10:47 GMT","end":"Tue, 09 Jun 2026 16:10:46 GMT"},"fingerprint":{"sha1":"33:85:40:D1:0F:B2:13:2C:21:88:20:5E:A7:03:A0:96:CF:08:0D:BB","sha256":"39:EF:F2:F9:35:F0:6E:02:14:55:8F:E3:68:A2:34:A6:75:3A:E2:87:81:69:87:89:79:13:CC:F4:CD:36:2C:F2"}}},"request":{"raw":"GET /images/33.webp HTTP/1.1\r\nHost: aml-confirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aml-confirm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 02:49:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 51260\r\nlast-modified: Sun, 22 Feb 2026 14:12:33 GMT\r\npriority: u=4,i=?0\r\netag: \"699b0ed1-c83c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P7YZwEa8Z2i0YmULF34WkMzTX578e6B4zi1NFF0SuopxPRb%2FwhrMVFuAxuAdoeDEX4hMb%2BwyeHHe%2BJgkapbUd9vv8RTeZaJlqGOuR6wo0Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e125d3f3fae5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51260,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ee868cf20c90ea252365e462b6ed3c5e","sha1":"152db0b5653fd2b887fd121364cdf30958681d03","sha256":"127cbc5c941fbc03d9cbb37facd6601951d51318c0e6e50c7d15596c4481630f","sha512":"03515bab68fbeed2a2f2ac21c9f59551eeabffa5b8f62789aaab7fb2983303a36d7d9ba4cbb2d798df73081c15f614c6cc9504eb5813d11fc298bc4214438707","ssdeep":"768:j653t9vVD5JXaaGDkMYqov6bM/z1Czd1spLBSuvAmxpp4UZYrmlKLs0PpkhHWQhw:stFV0vYt6bY1CJSB4UZ1Qg7/6uoeC4","tlshash":"6533f1d2bbee3551c19ff51dc9eb49da1105f40ace1cb98c42d864ca99722fd132b163","first_seen":"2025-04-08T20:33:55.213792Z","last_seen":"2026-07-18T17:51:01.785541Z","times_seen":445,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"aml-confirm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"aml-confirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aml-confirm.com/assets/modulepreload-polyfill-B5Qt9EMX.js","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aml-confirm.com/","date":"2026-03-24T02:49:43.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aml-confirm.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 16:10:47 GMT","end":"Tue, 09 Jun 2026 16:10:46 GMT"},"fingerprint":{"sha1":"33:85:40:D1:0F:B2:13:2C:21:88:20:5E:A7:03:A0:96:CF:08:0D:BB","sha256":"39:EF:F2:F9:35:F0:6E:02:14:55:8F:E3:68:A2:34:A6:75:3A:E2:87:81:69:87:89:79:13:CC:F4:CD:36:2C:F2"}}},"request":{"raw":"GET /assets/modulepreload-polyfill-B5Qt9EMX.js HTTP/1.1\r\nHost: aml-confirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aml-confirm.com/assets/main-DxLw_CHK.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 02:49:43 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IlLdX6CbfSkgcrlzHkISBBfIx8ofGTAgjF5y5%2FYYpgu%2F%2Bwwn9GHLmOblIWz5N2RFZr5aBKAglkWOWW306sHZ95Cvb%2F73mbWop2EsjwIsuQ%3D%3D\"}]}\r\nlast-modified: Sun, 22 Feb 2026 14:11:36 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699b0e98-2c7\"\r\ncf-ray: 9e125d403fbd5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":711,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (710)","md5":"ecade416f429813a6fa1e1d969883c66","sha1":"7a2613dd8fe3b82021cf37b0845cb73de5a3ee38","sha256":"d2a32840421496e872ade591618d2fa5c33797605d1aec04301717e5a90757d0","sha512":"6b54ce8b3c94e8aa8f5fb503f48c0f0385b455f1475e178aecfebc45d366351b74d4bda0fa378e8b7198cfdf4de0778096d92ab538dc2d1c14edc7e8c3a3930b","ssdeep":"","tlshash":"4201c0e83496e106115a0eadf1b3c618fa94345238a6e4c0d05c2cd9a76bcc0a5a5d4d","first_seen":"2023-05-24T13:14:00Z","last_seen":"2026-07-26T00:31:47.666558Z","times_seen":2040,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"aml-confirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"aml-confirm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aml-confirm.com/images/team3.webp","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aml-confirm.com/","date":"2026-03-24T02:49:43.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aml-confirm.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 16:10:47 GMT","end":"Tue, 09 Jun 2026 16:10:46 GMT"},"fingerprint":{"sha1":"33:85:40:D1:0F:B2:13:2C:21:88:20:5E:A7:03:A0:96:CF:08:0D:BB","sha256":"39:EF:F2:F9:35:F0:6E:02:14:55:8F:E3:68:A2:34:A6:75:3A:E2:87:81:69:87:89:79:13:CC:F4:CD:36:2C:F2"}}},"request":{"raw":"GET /images/team3.webp HTTP/1.1\r\nHost: aml-confirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aml-confirm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 02:49:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5358\r\nlast-modified: Sun, 22 Feb 2026 14:12:48 GMT\r\npriority: u=4,i=?0\r\netag: \"699b0ee0-14ee\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HYbrlyZ%2Bnx2%2BaZcA6Ij0v5fOzOehKPofyOoEc%2FDOV2TqZC33op3jorK0aJbcZc9sT3hJzXf%2FUa0iYR2z5DrM5YZl20164UZ3uTIklbA3lQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e125d3f1f935ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5358,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x366, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"74bcbc95eb9c765eb9807d9a6f5a198d","sha1":"3a1595be13ffd0a8622900fbe79b8bafa5a72d3b","sha256":"40b376a82e6f6ed6e382e6955fca2037bb67a22fdb08b26736d357051393dc2a","sha512":"41286c269e0650b523a3cbc18f91b95a10173f7f90bd5a0164f0f29a3c114928dbda998a93397de4e80cb5838370c46cf7ff369a189abb4a777d0fe34ce17e6c","ssdeep":"96:CHNESUnx97dkN8xnkhSwRWXBwK025xozmK0sMu2+7fJDf4Y/UCh2:ANof7g8xkhQhzzPtfu2exrt8Cg","tlshash":"9ab1aee0825d0da86a8ed98c15576a636c2d345c17c403951c855a637a8f61ecff4f2f","first_seen":"2025-04-08T20:33:55.231907Z","last_seen":"2026-07-07T12:36:49.694389Z","times_seen":447,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"aml-confirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"aml-confirm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aml-confirm.com/images/3.webp","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aml-confirm.com/","date":"2026-03-24T02:49:43.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aml-confirm.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 16:10:47 GMT","end":"Tue, 09 Jun 2026 16:10:46 GMT"},"fingerprint":{"sha1":"33:85:40:D1:0F:B2:13:2C:21:88:20:5E:A7:03:A0:96:CF:08:0D:BB","sha256":"39:EF:F2:F9:35:F0:6E:02:14:55:8F:E3:68:A2:34:A6:75:3A:E2:87:81:69:87:89:79:13:CC:F4:CD:36:2C:F2"}}},"request":{"raw":"GET /images/3.webp HTTP/1.1\r\nHost: aml-confirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aml-confirm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 02:49:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 27892\r\nlast-modified: Sun, 22 Feb 2026 14:12:32 GMT\r\npriority: u=4,i=?0\r\netag: \"699b0ed0-6cf4\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6c%2FCj%2FxjtGHlg1nqs4bjJOmK5TzfPNnWECA4Qi3lswOYEKjCiZSCHnsbOdSWKoAxbCls%2FgN%2BVJPndIM3cT9M65M7A6SfScDdyLpF8mni3A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e125d3f1f9b5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27892,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ae5130a440120093b7c556cd597e752f","sha1":"584b0b248d7f1b0ea1d18f3fae8c37a3130137f6","sha256":"b51f0973ddbf2dd286d747d0cc2e1c849245122d8bdebe0877421f0fe2af343f","sha512":"cd2a5370ecd304fd10a7e06ddf3254df19b210893793ddacf74a119f05514f83adf2c1b85c05d8270331ac33ccdf7970105fae17707140abf3f38bbf79b6547c","ssdeep":"768:1rQ0nPwVQLINjgcYXzotHnjMt1wyo1401l:1kWwVQ+jgcg8HwtWyWd1l","tlshash":"79c2e1a10bafc801ec64fbda206dee59aaa141d50b5120f73dcf9d499c6edb01c0936f","first_seen":"2025-06-26T13:18:40.488742Z","last_seen":"2026-07-03T05:00:40.528874Z","times_seen":68,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"aml-confirm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"aml-confirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aml-confirm.com/images/cryptohome.webp","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aml-confirm.com/","date":"2026-03-24T02:49:43.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aml-confirm.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 16:10:47 GMT","end":"Tue, 09 Jun 2026 16:10:46 GMT"},"fingerprint":{"sha1":"33:85:40:D1:0F:B2:13:2C:21:88:20:5E:A7:03:A0:96:CF:08:0D:BB","sha256":"39:EF:F2:F9:35:F0:6E:02:14:55:8F:E3:68:A2:34:A6:75:3A:E2:87:81:69:87:89:79:13:CC:F4:CD:36:2C:F2"}}},"request":{"raw":"GET /images/cryptohome.webp HTTP/1.1\r\nHost: aml-confirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aml-confirm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 02:49:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6524\r\nlast-modified: Sun, 22 Feb 2026 14:12:35 GMT\r\npriority: u=4,i=?0\r\netag: \"699b0ed3-197c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VFIEUiC%2BL5uu7A3zQpePpycIOOz26CQIbLHTlAFtMiDQ72kxOK%2BjvRW4ZzzotbfeisyyHY1zuAu9PwIW8zIM3V4pqYRtlJ7f8rA4OiXDYw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e125d3f2fa25ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6524,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"10a2a0b43e1c12c0518ee43437610ef9","sha1":"49885aa60fda4e756d9e02516f9e8b4abf0441b5","sha256":"bb65329601cee30def53aeabaa90cca20c36c5c5560c20f6bb7c85f40989f5ef","sha512":"d08a23b1764987b0c01beb8f6f5c5ede4305be744ea396f7c0fa5670a347768123958154f5e34c34fcce6c6b962264327a091c0d82f7b5a53bdbab83782b5c77","ssdeep":"192:K5CHETRBoVjBVHm0hQVK2/R8j+9yYZXa:KAH6R+tsFVNR9a","tlshash":"a0d18fe6236d7678e4546fb4bad993d1a6447a3c84507d37283f8eae7cc56748230dc0","first_seen":"2025-04-08T20:33:55.236886Z","last_seen":"2026-07-18T17:51:01.784654Z","times_seen":404,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"aml-confirm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"aml-confirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aml-confirm.com/images/how-does.svg","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aml-confirm.com/","date":"2026-03-24T02:49:43.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aml-confirm.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 16:10:47 GMT","end":"Tue, 09 Jun 2026 16:10:46 GMT"},"fingerprint":{"sha1":"33:85:40:D1:0F:B2:13:2C:21:88:20:5E:A7:03:A0:96:CF:08:0D:BB","sha256":"39:EF:F2:F9:35:F0:6E:02:14:55:8F:E3:68:A2:34:A6:75:3A:E2:87:81:69:87:89:79:13:CC:F4:CD:36:2C:F2"}}},"request":{"raw":"GET /images/how-does.svg HTTP/1.1\r\nHost: aml-confirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aml-confirm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 02:49:43 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i5XDubcyUHVesp61X%2FgnWpBBkHBUSrVO8%2BvnrahzLN8NoQl%2FJSTrnVtMvOqCcVE%2BOzR7wzLubuCiOuPq2rdnWnkTPAlzcq%2BOBfV2g5GlWA%3D%3D\"}]}\r\nlast-modified: Sun, 22 Feb 2026 14:12:44 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699b0edc-1270d\"\r\ncf-ray: 9e125d3f0f8e5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75533,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f74cda42deb365718c80d66ae85c229a","sha1":"4239d279133a77b716a777486656143cf4338569","sha256":"f01c6f20d0beb7cb60a8831b8da262f042cd98a11a758be9032a2459550d4c98","sha512":"d6e3819cb59a1f4e9d1f9802d17c8015e978702b3eeaaeaa4fd61d5bf22a47aae20333fde7abcdb2d450383e9d1617f6edbfd3588d5d0b540376e0dd88a5f7e0","ssdeep":"768:oPk3zyS7R4f5w0BpHL9HMayHkEBGhFUfSmAVg3wTcECVSW7pfxMXuGgNQrdpW4gG:O04o7kF3DTcD7pZy/JkBZga4V","tlshash":"757383dc3f708cc55ec48bdb7f1150ec6a57d5b3aa898e08d15c8f6d088682c9dea983","first_seen":"2025-04-08T20:33:55.218198Z","last_seen":"2026-07-22T18:30:36.53163Z","times_seen":509,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"aml-confirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"aml-confirm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aml-confirm.com/images/1.svg","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aml-confirm.com/","date":"2026-03-24T02:49:43.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aml-confirm.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 16:10:47 GMT","end":"Tue, 09 Jun 2026 16:10:46 GMT"},"fingerprint":{"sha1":"33:85:40:D1:0F:B2:13:2C:21:88:20:5E:A7:03:A0:96:CF:08:0D:BB","sha256":"39:EF:F2:F9:35:F0:6E:02:14:55:8F:E3:68:A2:34:A6:75:3A:E2:87:81:69:87:89:79:13:CC:F4:CD:36:2C:F2"}}},"request":{"raw":"GET /images/1.svg HTTP/1.1\r\nHost: aml-confirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aml-confirm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 02:49:43 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E3k%2BLpjiPRnwj75x%2BJm6q2rBYK7sLibxo6FCmwLcuqUtwQTIffjB0IO1AhTK6QSmOiC6kqagI24jtQZ7pcqapO9xQ4ozcmdZrgSCABm3oA%3D%3D\"}]}\r\nlast-modified: Sun, 22 Feb 2026 14:12:28 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699b0ecc-dadf3\"\r\ncf-ray: 9e125d3f0f8f5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":896499,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7e54ee403da676c99d77633c01b606c3","sha1":"351c6bb9a4dba01eed5cc86ac6ae0a38f3e472f6","sha256":"59fee31a79439edb17dccae8553674f87012403c8a486c9b098a1e294c119e65","sha512":"7cc6dd0aea72a3f8e9c324dec727ab5133eef87d600768bf29801201118d4025fae2ce28071582dd3699b13a1ded3f3b78c56aa9fb53a67c7e5d1bcb7a099947","ssdeep":"24576:euayhlfPkhRx15QVsLcIuJ2wStoU6ghC5:eaDex6gW","tlshash":"be151214f80ae5b503bd0a251eb7156c6f748f709895ab8e87ac774683983c0f3ede25","first_seen":"2025-04-08T20:33:55.231096Z","last_seen":"2026-07-22T18:30:36.544542Z","times_seen":461,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":134,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"aml-confirm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"aml-confirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aml-confirm.com/images/what-else1.svg","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aml-confirm.com/","date":"2026-03-24T02:49:43.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aml-confirm.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 16:10:47 GMT","end":"Tue, 09 Jun 2026 16:10:46 GMT"},"fingerprint":{"sha1":"33:85:40:D1:0F:B2:13:2C:21:88:20:5E:A7:03:A0:96:CF:08:0D:BB","sha256":"39:EF:F2:F9:35:F0:6E:02:14:55:8F:E3:68:A2:34:A6:75:3A:E2:87:81:69:87:89:79:13:CC:F4:CD:36:2C:F2"}}},"request":{"raw":"GET /images/what-else1.svg HTTP/1.1\r\nHost: aml-confirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aml-confirm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 02:49:43 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uAPWQMghj3rpaKmxE4nf6SpldAto%2F%2BHaQK%2BwZGuas2DVeF2aIIAIKLwbAfzOnrYq3jvl0NEFEV08OQJZWqFOBoJXGZjAatUhQsgs4b9K1Q%3D%3D\"}]}\r\nlast-modified: Sun, 22 Feb 2026 14:12:59 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699b0eeb-54b36\"\r\ncf-ray: 9e125d3f1f905ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":346934,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"512f89c0f286c15602c3185b3e8de07d","sha1":"3056e918097ec260b8a565aa088e78ef3bd78d0e","sha256":"030d84266479bd6e195d340e2dbbab1f20afab194bcf91f92c7e0fa3f8008220","sha512":"945a753a8816321ff62b4b792f286ba617fede9e7fe087219eb688db95c88f33cb435cff215a864c89881f62152ba5a2f92ab823263c211c5b1c960a894c85cb","ssdeep":"1536:y5QRcR9vN3RRPtmmhMgbSsPpI1v4xhBQVdDNDNi+6hjNRcjRQrIGtUOW2uFh+tGw:EZH+W","tlshash":"957450ec2fb01dd98ddc8bd7bf1285ad6823d1779999ce08c25c8f581585c2cfc66a82","first_seen":"2025-04-08T20:33:55.211481Z","last_seen":"2026-07-18T17:51:01.772522Z","times_seen":380,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"aml-confirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"aml-confirm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aml-confirm.com/images/what-else2.webp","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aml-confirm.com/","date":"2026-03-24T02:49:43.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aml-confirm.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 16:10:47 GMT","end":"Tue, 09 Jun 2026 16:10:46 GMT"},"fingerprint":{"sha1":"33:85:40:D1:0F:B2:13:2C:21:88:20:5E:A7:03:A0:96:CF:08:0D:BB","sha256":"39:EF:F2:F9:35:F0:6E:02:14:55:8F:E3:68:A2:34:A6:75:3A:E2:87:81:69:87:89:79:13:CC:F4:CD:36:2C:F2"}}},"request":{"raw":"GET /images/what-else2.webp HTTP/1.1\r\nHost: aml-confirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aml-confirm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 02:49:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 22208\r\nlast-modified: Sun, 22 Feb 2026 14:13:00 GMT\r\npriority: u=4,i=?0\r\netag: \"699b0eec-56c0\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GZrcya1N6fMLIk%2FHN8OuPJXzhq2EFctRuTam4m3ICUvX4br3egNSO7yX9GCHWTIcvZ3T1tSwaA%2Fc2iUcUmgxumKIKlxfBSBX4T1%2Fbl38aQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e125d3f1f915ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22208,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e1e057fdfd21fcb1b20f6dbff68beec6","sha1":"0a1b93824ad73034f0fdcca9cdb69bb141cc766f","sha256":"56999b85ede07c51cb32cbb21169a76bab2fd5396bb1edf7cedf88b1f32c32eb","sha512":"7d78ceee169f2e5309396dec77dae0bded22a9b2f0223308c15019904c203233071bb88f126fb037de94a793ef2d88533dff1cce22efd85216fb2d5f4587385d","ssdeep":"384:VZgiCAV2JY7iTlSiIQigkOzLewew0/dOnPm5FcHCQO5D2p:VYWmTlSiTTLez//dXFcHCQSa","tlshash":"25a2cffc302d028afeedc67b6906af92b9fe14571470ca0d63587a8155906c753cabb8","first_seen":"2025-04-08T20:33:55.221615Z","last_seen":"2026-07-18T17:51:01.781036Z","times_seen":416,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"aml-confirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"aml-confirm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aml-confirm.com/images/team5.webp","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aml-confirm.com/","date":"2026-03-24T02:49:43.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aml-confirm.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 16:10:47 GMT","end":"Tue, 09 Jun 2026 16:10:46 GMT"},"fingerprint":{"sha1":"33:85:40:D1:0F:B2:13:2C:21:88:20:5E:A7:03:A0:96:CF:08:0D:BB","sha256":"39:EF:F2:F9:35:F0:6E:02:14:55:8F:E3:68:A2:34:A6:75:3A:E2:87:81:69:87:89:79:13:CC:F4:CD:36:2C:F2"}}},"request":{"raw":"GET /images/team5.webp HTTP/1.1\r\nHost: aml-confirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aml-confirm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 02:49:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5402\r\nlast-modified: Sun, 22 Feb 2026 14:12:49 GMT\r\npriority: u=4,i=?0\r\netag: \"699b0ee1-151a\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Ur08uyXojwrwHP%2FTa6slR7QJc58EmcQB9V4ipEgNHDl%2BDzoIp%2FkNQG02n8sBfvnDXS7jwuqPp5rJ6ho7vojfn7%2F3nyaKJI2N5QMJj435w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e125d3f1f955ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5402,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x366, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1b861f2296e3769da970e6af87cff205","sha1":"23e4cfc4f857247ae9955dff2503c3d6231febb1","sha256":"05201c411495b15a1807b3e649ca8fbbfbfee22e149b1ad0c42f9e3768e81230","sha512":"e9dc80a9198a8ee38b1a9407ff0d74258851a61f9461c97a83f5f9f34642ea5466a510610e6371e5d9f77333257749505396468ee9f8a2cf40241fc97dbc3b91","ssdeep":"96:ZRNCyHuEJ8uPWkvCwcBsYUKtZ88YPn+AkI+TwG0UVJg:fNBHui8uPWs2WYUEZ8jPxkTVJg","tlshash":"f1b1aed50af4c71c980316884b4c294beb7a6f5c9d20fd755c52eebb939bcc0661260e","first_seen":"2025-04-08T20:33:55.227028Z","last_seen":"2026-07-07T12:36:49.725552Z","times_seen":446,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"aml-confirm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"aml-confirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aml-confirm.com/images/purefi.webp","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aml-confirm.com/","date":"2026-03-24T02:49:43.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aml-confirm.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 16:10:47 GMT","end":"Tue, 09 Jun 2026 16:10:46 GMT"},"fingerprint":{"sha1":"33:85:40:D1:0F:B2:13:2C:21:88:20:5E:A7:03:A0:96:CF:08:0D:BB","sha256":"39:EF:F2:F9:35:F0:6E:02:14:55:8F:E3:68:A2:34:A6:75:3A:E2:87:81:69:87:89:79:13:CC:F4:CD:36:2C:F2"}}},"request":{"raw":"GET /images/purefi.webp HTTP/1.1\r\nHost: aml-confirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aml-confirm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 02:49:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2914\r\nlast-modified: Sun, 22 Feb 2026 14:12:46 GMT\r\npriority: u=4,i=?0\r\netag: \"699b0ede-b62\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2%2FLokeZhKNbAPpXFRv6ypTX%2B%2FzOVj6dLgboGE%2BhZAb5ymGRHDGgzzGBTkk%2Bm%2BWHIvTQzFqChw9EMl7bDyzaN2p2xcb9rI%2BjTfPqaulxboQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e125d3f2fa85ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2914,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ecb23a9f640cf59bb0b7e268313f2f9a","sha1":"2df0ecacf2e76a7e0ce20dcef096403f359de962","sha256":"09f0695e6f065f49332a04169976e49a32af8d4c7c5962388a7412431f2174ec","sha512":"39ef2685491f9f64f597be1cd853430696831fc147eace8d36cf6d936144126a8786c4cb2cbf5fd49527b354ea651064989e0b2e0b07e2eb49b32de147b87899","ssdeep":"","tlshash":"bc515b486c7f8e069f63937021739927eb05c20d1d7008a187d1d42a5e0fea69aa455c","first_seen":"2025-06-28T19:36:09.24223Z","last_seen":"2026-06-28T23:08:29.223648Z","times_seen":61,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"aml-confirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"aml-confirm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aml-confirm.com/assets/swiper-DpKYHp1-.js","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aml-confirm.com/","date":"2026-03-24T02:49:43.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aml-confirm.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 16:10:47 GMT","end":"Tue, 09 Jun 2026 16:10:46 GMT"},"fingerprint":{"sha1":"33:85:40:D1:0F:B2:13:2C:21:88:20:5E:A7:03:A0:96:CF:08:0D:BB","sha256":"39:EF:F2:F9:35:F0:6E:02:14:55:8F:E3:68:A2:34:A6:75:3A:E2:87:81:69:87:89:79:13:CC:F4:CD:36:2C:F2"}}},"request":{"raw":"GET /assets/swiper-DpKYHp1-.js HTTP/1.1\r\nHost: aml-confirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aml-confirm.com/assets/main-DxLw_CHK.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 02:49:44 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T8SfytOXA45cnTtwA8H2Xpob4sBhw4SD5qPUq5qlxZpJnxH%2FVpoiQ8WZbWclYu7mDxEJZ3DDoiq7UMPL%2BemR2JOd9ihEIVy2Svr2bLLTvg%3D%3D\"}]}\r\nlast-modified: Sun, 22 Feb 2026 14:11:41 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"699b0e9d-f819\"\r\ncf-ray: 9e125d41efd45ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63513,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (63512)","md5":"1d3b9989a25a843d0fdcc594944d0104","sha1":"884ec9e922f5a0853c5364eb180dcf7b77aae983","sha256":"a9d9a2d36d91c12475e0b7d0168a80e350450924653493b30dcd6c19cc03eaef","sha512":"542eaa8fc73627b6a6a96a7981d65d8bff2ef76b06b35a1c79a79bcadf03a3635c7cf03115eeb96032b50de2d6d3bcc9bb0339b27690e1e5e8d4eb976b68e7e7","ssdeep":"1536:KSK03lcG8WP1Ztu7PCKRnyXABlxvHw97rRkz:HP07Pv","tlshash":"2b531889e124753a82e326da93a5c10173a54d54b849c8e871fc8c6b49be95c07feffc","first_seen":"2026-02-06T23:09:55.742441Z","last_seen":"2026-04-08T10:58:05.431982Z","times_seen":12,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"aml-confirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"aml-confirm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aml-confirm.com/images/team2.webp","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aml-confirm.com/","date":"2026-03-24T02:49:43.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aml-confirm.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 16:10:47 GMT","end":"Tue, 09 Jun 2026 16:10:46 GMT"},"fingerprint":{"sha1":"33:85:40:D1:0F:B2:13:2C:21:88:20:5E:A7:03:A0:96:CF:08:0D:BB","sha256":"39:EF:F2:F9:35:F0:6E:02:14:55:8F:E3:68:A2:34:A6:75:3A:E2:87:81:69:87:89:79:13:CC:F4:CD:36:2C:F2"}}},"request":{"raw":"GET /images/team2.webp HTTP/1.1\r\nHost: aml-confirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aml-confirm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 02:49:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5812\r\nlast-modified: Sun, 22 Feb 2026 14:12:47 GMT\r\npriority: u=4,i=?0\r\netag: \"699b0edf-16b4\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xN43hJcf1oO5jYBC7%2FV%2BxdO8sD%2FmFdRXWVf09VE%2BMRQZ9K%2BiKM1BNaS2bA6X0T6KiT%2FrLLi9WpeV5mN8A6tZvvBE45%2BnubaqeuJJKiA%2FoA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e125d3f1f925ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5812,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x366, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7ddbbf9cab745b9433bea6b2edc96096","sha1":"5d6c1060beabd56827c5441fea4d7cabdd59b70b","sha256":"3a3f8a7f6ccee1feb368a7a7c8d357a29156e35181772292242b6de2a053cf01","sha512":"7635535a1db3b572135119ca99e4beb6517af783ab9df43ee97535273c534e247610d7b7cfd123886fe73c8941deb68e4959daf394c91ffc8c85921f9af92729","ssdeep":"96:8WoZZT+fYdS4oDKOhMRDvHm4s6XepK3f/j+u63ygikCq6d+Lv1A+k2uos:8njOYdFoO7D/mv6RD+7jikCBQL9u3","tlshash":"efc1afd46f92c0bb00d1f848aabd189626bd77e1ee12112625c9690038d13a4625feef","first_seen":"2025-04-08T20:33:55.24233Z","last_seen":"2026-07-07T12:36:49.729582Z","times_seen":445,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"aml-confirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"aml-confirm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aml-confirm.com/images/cryptopnl.webp","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aml-confirm.com/","date":"2026-03-24T02:49:43.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aml-confirm.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 16:10:47 GMT","end":"Tue, 09 Jun 2026 16:10:46 GMT"},"fingerprint":{"sha1":"33:85:40:D1:0F:B2:13:2C:21:88:20:5E:A7:03:A0:96:CF:08:0D:BB","sha256":"39:EF:F2:F9:35:F0:6E:02:14:55:8F:E3:68:A2:34:A6:75:3A:E2:87:81:69:87:89:79:13:CC:F4:CD:36:2C:F2"}}},"request":{"raw":"GET /images/cryptopnl.webp HTTP/1.1\r\nHost: aml-confirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aml-confirm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 02:49:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2424\r\nlast-modified: Sun, 22 Feb 2026 14:12:36 GMT\r\npriority: u=4,i=?0\r\netag: \"699b0ed4-978\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZU%2BXJfpkseZ6t%2BdDezDyMUZ5ccWlG%2BKS2Kdf9tjRRGBUOZuVahnEcizSwVhWGasRY%2BKxANJM0oXfR15qCKaSxoC9ZPebB8V1X%2FHpoYwYKg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e125d3f2fa45ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2424,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f6f8643ea2051c776abc130970c485a0","sha1":"18ca64bcf3b61fc77291e65174a6b321f5eb4f3b","sha256":"80124c9264e4ac3b1c7aa601e6762fea3dcc4560615185cae2a324ba41b1d01d","sha512":"ad3c0f67353b27aa6548b6a409ca1f33d35bc9e3309777b2795e49ae02f7828484ad6e082c0cdc66c658ba28d464dbae4003c6ac758695f0ca961be16dab1b10","ssdeep":"","tlshash":"60413d21deb54d5bbb36c3b923d92242a1804635cb116d25b29ff378495110210f7da0","first_seen":"2025-06-28T19:36:09.229274Z","last_seen":"2026-06-28T23:08:29.219101Z","times_seen":61,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"aml-confirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"aml-confirm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aml-confirm.com/images/hodlcredit.webp","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aml-confirm.com/","date":"2026-03-24T02:49:43.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aml-confirm.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 16:10:47 GMT","end":"Tue, 09 Jun 2026 16:10:46 GMT"},"fingerprint":{"sha1":"33:85:40:D1:0F:B2:13:2C:21:88:20:5E:A7:03:A0:96:CF:08:0D:BB","sha256":"39:EF:F2:F9:35:F0:6E:02:14:55:8F:E3:68:A2:34:A6:75:3A:E2:87:81:69:87:89:79:13:CC:F4:CD:36:2C:F2"}}},"request":{"raw":"GET /images/hodlcredit.webp HTTP/1.1\r\nHost: aml-confirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aml-confirm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 02:49:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1556\r\nlast-modified: Sun, 22 Feb 2026 14:12:39 GMT\r\npriority: u=4,i=?0\r\netag: \"699b0ed7-614\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zB5GlVnjhmQqNzx0AuzuZL%2BN35rjXZ8Q%2FA%2FrPuLL6fSPPKyYSmB%2Fw1XXWYdleMtklya%2Fj0DvngupCIzsOfnTsBfCzO83IHgvS53pv5FnvA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e125d3f2fa75ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1556,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b586a4f1c34a9edfc96feee68ec0e180","sha1":"668f0d3d472d295c224c9dba35f5e77a9926d1fb","sha256":"40f73c06872c9435da38203bd4ea949ca2257834ec7994880ba468e98aad835a","sha512":"74ac88272bdc356c71ae4c50cf408e74e9e331cc306486c22fd0a91ff65bd288eb3e1716af6e21d2a83ba1793757b4c859cd413ce3a8b5b57b6c537ee6a0eb9f","ssdeep":"","tlshash":"1631ea610dd1d97c695a2fea2387588493472d2dbf291177f6352c90287c146d63612a","first_seen":"2025-06-28T19:47:13.739795Z","last_seen":"2026-06-28T23:08:29.241216Z","times_seen":54,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"aml-confirm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"aml-confirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aml-confirm.com/images/laslobit.webp","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aml-confirm.com/","date":"2026-03-24T02:49:43.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aml-confirm.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 16:10:47 GMT","end":"Tue, 09 Jun 2026 16:10:46 GMT"},"fingerprint":{"sha1":"33:85:40:D1:0F:B2:13:2C:21:88:20:5E:A7:03:A0:96:CF:08:0D:BB","sha256":"39:EF:F2:F9:35:F0:6E:02:14:55:8F:E3:68:A2:34:A6:75:3A:E2:87:81:69:87:89:79:13:CC:F4:CD:36:2C:F2"}}},"request":{"raw":"GET /images/laslobit.webp HTTP/1.1\r\nHost: aml-confirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aml-confirm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 02:49:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2628\r\nlast-modified: Sun, 22 Feb 2026 14:12:45 GMT\r\npriority: u=4,i=?0\r\netag: \"699b0edd-a44\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=grWp8vVGmXM9%2F%2B0nK9IT1OV1wAMdB8y3%2FqQxVj7s%2FvjI5vPxWBpEli2LFIe%2BxiWJ5LdVAh93K1ITVc%2B0cDyxNz16VWIlg%2F53fhUxFhuzZw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e125d3f2faa5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2628,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e44bf879cab65f20a7dc4d0280d6c95c","sha1":"65c82043c70f0ca23e677d31cb87d970f71f2130","sha256":"f3fb94dca2ac756e2ddfdc0f261654d445a82869206d40974cb157bc3f35afd1","sha512":"7e326ed599b7244dcf690af65ca21889df137226d5123ee7d94bac32897a26e01dba0a812e689bf356799900a12c7ee51080ba366ec14f2381fbe03088f956cf","ssdeep":"","tlshash":"41515e425a3a702d3849287d5cc4d25c5a1d057a72d4b3e80b17ad0d3f0943361b76af","first_seen":"2025-06-28T19:47:13.751838Z","last_seen":"2026-06-28T23:08:29.236669Z","times_seen":38,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"aml-confirm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"aml-confirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aml-confirm.com/images/gate.webp","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aml-confirm.com/","date":"2026-03-24T02:49:43.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aml-confirm.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 16:10:47 GMT","end":"Tue, 09 Jun 2026 16:10:46 GMT"},"fingerprint":{"sha1":"33:85:40:D1:0F:B2:13:2C:21:88:20:5E:A7:03:A0:96:CF:08:0D:BB","sha256":"39:EF:F2:F9:35:F0:6E:02:14:55:8F:E3:68:A2:34:A6:75:3A:E2:87:81:69:87:89:79:13:CC:F4:CD:36:2C:F2"}}},"request":{"raw":"GET /images/gate.webp HTTP/1.1\r\nHost: aml-confirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aml-confirm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 02:49:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2490\r\nlast-modified: Sun, 22 Feb 2026 14:12:39 GMT\r\npriority: u=4,i=?0\r\netag: \"699b0ed7-9ba\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zUCkU6gTNSHYxurpDkCxHIqtHf%2Be705a4jl8L%2BiJfeU2n07Od0FVv0NJ%2FFlp3VwU0Fc7cseBHJ96NOuVyhfjAH3i9KtCgXVwO8KI9EdnPA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e125d3f2fab5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2490,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0da376de29e3effa9e73b409d638072e","sha1":"e1c98a7a1e1a7d4b504922bb5d6d9288b2aac2fb","sha256":"84ba54b7ffd029a116e70c73218c941f40d25c45373e29000933a40d09983d49","sha512":"e197311efdbff88f896ef7e213e09d5d00920282aba80812d260b6bc4a6f3c04985ed6add87fe6a47c5bea24848dddc42121e0c7c7783e5ff23fb5f0c9d4dfc8","ssdeep":"","tlshash":"5a511a434d24098d5d29061a9ae2c6e52a9bb2087709c14faff88df71fb55231d226ba","first_seen":"2025-06-28T19:36:09.223225Z","last_seen":"2026-06-29T00:47:57.678723Z","times_seen":62,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"aml-confirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"aml-confirm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aml-confirm.com/images/11.webp","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aml-confirm.com/","date":"2026-03-24T02:49:43.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aml-confirm.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 16:10:47 GMT","end":"Tue, 09 Jun 2026 16:10:46 GMT"},"fingerprint":{"sha1":"33:85:40:D1:0F:B2:13:2C:21:88:20:5E:A7:03:A0:96:CF:08:0D:BB","sha256":"39:EF:F2:F9:35:F0:6E:02:14:55:8F:E3:68:A2:34:A6:75:3A:E2:87:81:69:87:89:79:13:CC:F4:CD:36:2C:F2"}}},"request":{"raw":"GET /images/11.webp HTTP/1.1\r\nHost: aml-confirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aml-confirm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 02:49:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19946\r\nlast-modified: Sun, 22 Feb 2026 14:12:29 GMT\r\npriority: u=4,i=?0\r\netag: \"699b0ecd-4dea\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jfTGeincN6xusKsoI73E5vzlSRoCyppXMl3vnV6tfwZtKUQ4BgsoRQ4N3kgsYpzU0eAVMRnej%2Fh3aKPDXK6kXFJkEebkkARjOCRf2NgUyA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e125d3f2fac5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19946,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d848cc6082d065edec132c04bcc72a1e","sha1":"ee347487fc051c45082e8053d05d06aa37a0dccb","sha256":"ece6e8ca616a5c0416427834c086199980328f18e36c53707dd559cd49f0536f","sha512":"b67c5bd932034b717261d74d10d67fd5d1ab0ca507dd0dcdeb2f1679bc8628d83762af7fbac359fb2148981804a907bc7a138f69d1ceba3ca93f34ebd720668e","ssdeep":"384:qJTRUuDcWFQBZnHM/C0R7YDW1w2gMTFT1eDQTS0VamG7MurCubw/g8qf2Ggt:qX+WFQfs/C27O32gevTS0VamcCRg8qf+","tlshash":"1792e0087400489a87ff0ddaa85f9771534e5edd7c7e00693bf8aa8c93e4a958215f4d","first_seen":"2025-04-08T20:33:55.233493Z","last_seen":"2026-07-18T17:51:01.778501Z","times_seen":444,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"aml-confirm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"aml-confirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aml-confirm.com/images/44.webp","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aml-confirm.com/","date":"2026-03-24T02:49:43.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aml-confirm.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 16:10:47 GMT","end":"Tue, 09 Jun 2026 16:10:46 GMT"},"fingerprint":{"sha1":"33:85:40:D1:0F:B2:13:2C:21:88:20:5E:A7:03:A0:96:CF:08:0D:BB","sha256":"39:EF:F2:F9:35:F0:6E:02:14:55:8F:E3:68:A2:34:A6:75:3A:E2:87:81:69:87:89:79:13:CC:F4:CD:36:2C:F2"}}},"request":{"raw":"GET /images/44.webp HTTP/1.1\r\nHost: aml-confirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aml-confirm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 02:49:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10916\r\nlast-modified: Sun, 22 Feb 2026 14:12:34 GMT\r\npriority: u=4,i=?0\r\netag: \"699b0ed2-2aa4\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1HMvVa4Wvl1eJMaxhi5DlOw%2FlKUTuLkNLO%2Bqbs3cGURXpHyvKtgY1uELdF70PMKTVSjXU8BXB%2F2NfXyTKT0HYpcA%2FEzUG4eGpIZWssygxA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e125d3f3faf5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10916,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b8dc93cca387bf2c17d1f47b79205b00","sha1":"afd9f668392c676754652edef35bc84af4624532","sha256":"064243afc32b9aba427090bffe6c1fb20a9a3068368147cec2566007d5dbf709","sha512":"a4364e4e888bfa68c1ed6e279753e8947616ce68c933bf16857e59d509551fe7a2b0d94966c34f10c7c74bb61bd721223db97416011e573e2c0ca22fc8ca50b8","ssdeep":"192:HCtlaTub/yIuJoKRhKGzNnL3DrY2kVBOr60PuO/mpIs3mW26mbBNzY:iuCb/moK+Un/rrkjx0B+pIsH26mdN8","tlshash":"5232c0e1be3a71a09a0439aeb36c5194c535600fc27a7df77a59047ca8c35f031817d6","first_seen":"2025-04-08T20:33:55.238728Z","last_seen":"2026-07-18T17:51:01.773811Z","times_seen":444,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"aml-confirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"aml-confirm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aml-confirm.com/","date":"2026-03-24T02:49:43.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://aml-confirm.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aml-confirm.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48444\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 23 Mar 2026 17:58:08 GMT\r\nexpires: Tue, 23 Mar 2027 17:58:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 31895\r\nlast-modified: Mon, 29 Jul 2024 22:51:01 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48444,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48444, version 1.0","md5":"8e433c0592f77beb6dc527d7b90be120","sha1":"d7402416753ae1bb4cbd4b10d33a0c10517838bd","sha256":"f052ee44c3728dfd23aba8a4567150bc314d23903026fbb6ad089422c2df56af","sha512":"5e90f48b923bb95aeb49691d03dade8825c119b2fa28977ea170c41548900f4e0165e2869f97c7a9380d7ff8ff331a1da855500e5f7b0dfd2b9abd77a386bbf3","ssdeep":"768:dn0V9qZpy/4pR+9MzTCGXckDohHxCc/TfZQEh9UONYyPYcABoN/8rZujvB:dn0+rAmWUMooVrbZQE7NYyzABK8rQ1","tlshash":"0523f25daa398ea9ed25403bd63f2ff004c61409dd645cdfa62871bf2db290d06633d6","first_seen":"2024-07-30T23:13:06Z","last_seen":"2026-07-26T04:30:43.563377Z","times_seen":23474,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":148,"dns":0,"connect":8,"send":0,"wait":8,"receive":11,"ssl":138},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aml-confirm.com/","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-24T02:49:43.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aml-confirm.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 16:10:47 GMT","end":"Tue, 09 Jun 2026 16:10:46 GMT"},"fingerprint":{"sha1":"33:85:40:D1:0F:B2:13:2C:21:88:20:5E:A7:03:A0:96:CF:08:0D:BB","sha256":"39:EF:F2:F9:35:F0:6E:02:14:55:8F:E3:68:A2:34:A6:75:3A:E2:87:81:69:87:89:79:13:CC:F4:CD:36:2C:F2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: aml-confirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 24 Mar 2026 02:49:43 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sun, 22 Feb 2026 14:11:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xDGdJu12%2FSouMs%2BOEcMCVQ6pN1AHbVO%2F%2BFd4ciYnO6Mfvz2mmJujEqsa%2Fc4Gzsoqv8Ye8N3UhS%2FiLYe%2FOkjj%2FWIpJqGuCExFn%2FMhD4SqqQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9e125d3d7870723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21197,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (674)","md5":"56b9524ce6d23eea88ae817ddd9c445f","sha1":"f022833809657dd734bc8863b86b65ff17ebc300","sha256":"f4e71bb6d0149c99f1c5edaad94a5ebb48005f97f1921b66ff07234ecb25c329","sha512":"12a16a2ae9bfcde05ba3bb7324bdfb0b000592e318edac5c472a78e97618e3c77c07673c544cfc439d7926c5aa01b4e0b35c1ffcdcbbd9c48dfd2137b8d1654c","ssdeep":"384:eh/7bt6UZ4SBjRYml5UVusziaw9QUV3Nm/UJStOltKtO5XCOUPO6M72N4Zs:C/7btNAml5dhoO1ri","tlshash":"63924321918c3d7b511726e3b4155bab709f8e7ade234521b3ff8a6993e3c80e837452","first_seen":"2026-02-06T23:09:55.755703Z","last_seen":"2026-03-28T06:24:32.039543Z","times_seen":11,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":41,"dns":30,"connect":1,"send":0,"wait":63,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"aml-confirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"aml-confirm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aml-confirm.com/images/home-image.png","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aml-confirm.com/","date":"2026-03-24T02:49:43.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aml-confirm.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 16:10:47 GMT","end":"Tue, 09 Jun 2026 16:10:46 GMT"},"fingerprint":{"sha1":"33:85:40:D1:0F:B2:13:2C:21:88:20:5E:A7:03:A0:96:CF:08:0D:BB","sha256":"39:EF:F2:F9:35:F0:6E:02:14:55:8F:E3:68:A2:34:A6:75:3A:E2:87:81:69:87:89:79:13:CC:F4:CD:36:2C:F2"}}},"request":{"raw":"GET /images/home-image.png HTTP/1.1\r\nHost: aml-confirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aml-confirm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 02:49:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 146551\r\nlast-modified: Sun, 22 Feb 2026 14:12:42 GMT\r\npriority: u=4,i=?0\r\netag: \"699b0eda-23c77\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YTA%2FyZ5dpic8Ip5SScv4U1XXQdocWqYOvYlqaj7cqZ7RrfnqCQGRqhAm5gXxdIo%2Fy%2BL5BMpl5fkznDTPjjJLYup79%2BQDlCGk7QKmyC02MQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e125d3f0f8d5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146551,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1512 x 2130, 8-bit/color RGBA, non-interlaced","md5":"9cad99dbdf29233a3e18fae89cbcdd56","sha1":"05d9639f849359af23082e722dd8bae99bfdf560","sha256":"b005f5a6875b15ca7957b90dbae8cf52e6ff1645b327d4b7ef90892401ffcff5","sha512":"9ab249cc09967d21d5a3cf2b75250c3bcc0305d5c0c693d9c7b55e62dcd0de734950c55f5ec6dcb3b5d091ff6d193892b5b27de3cb6a06065df1f7df84223665","ssdeep":"3072:GaDBLdkD1Y5RW69+1cVOA0gi52BytVMTSqXQfjo/n7:lDBLqqW6NV1+52BytVMuaqc","tlshash":"6fe3e058250b5d6ac84d86358beb4fb5f76c8ad94598fe1b0bb40276bcf7319cc83881","first_seen":"2025-04-08T20:33:55.226246Z","last_seen":"2026-07-18T17:51:01.777117Z","times_seen":474,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"aml-confirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"aml-confirm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aml-confirm.com/images/oneobmen.webp","fqdn":"aml-confirm.com","domain":"aml-confirm.com","tld":"com"},"ip":{"addr":"172.67.152.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aml-confirm.com/","date":"2026-03-24T02:49:43.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aml-confirm.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 11 Mar 2026 16:10:47 GMT","end":"Tue, 09 Jun 2026 16:10:46 GMT"},"fingerprint":{"sha1":"33:85:40:D1:0F:B2:13:2C:21:88:20:5E:A7:03:A0:96:CF:08:0D:BB","sha256":"39:EF:F2:F9:35:F0:6E:02:14:55:8F:E3:68:A2:34:A6:75:3A:E2:87:81:69:87:89:79:13:CC:F4:CD:36:2C:F2"}}},"request":{"raw":"GET /images/oneobmen.webp HTTP/1.1\r\nHost: aml-confirm.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aml-confirm.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 24 Mar 2026 02:49:43 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4282\r\nlast-modified: Sun, 22 Feb 2026 14:12:45 GMT\r\npriority: u=4,i=?0\r\netag: \"699b0edd-10ba\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gg%2FisGvWMDXZ4rLKwPVzg0%2F68hElRoQiNm6g1iAgSgpStfyQRZZnquuADOjMjbiUwiqpz4Idu6QxAzSEt51hA9szHw0D5DLVpPeEHs9BsA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e125d3f1f9e5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4282,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1bc53ee5929fc3195e5adf1d86c72a33","sha1":"a72412370f4ff21cbb9d758dd6d68731356c9276","sha256":"a6264cb3a7fabd924bcd62bee017831472ecd32fc7624700d3df895a0968af7c","sha512":"acda9b9f3a95005731d72c16ff515c0121114d43612838fcc8f34c731741171c37dc2cc4abe9b461a8eed3984249c38c8457c819f9795064eea99e75b0a1b80e","ssdeep":"96:X2mKVaGphCpFLE38bTHNstUDueEtDhT8zCJK6OS+CRC0MwhwH1nf4i7:vgTpuicTtGUDVE3T8zsHCDwhw","tlshash":"d2918fda6a84d4b4d905a77f4af27f40db8423064781075e2157a906fdbc8c854965f3","first_seen":"2025-04-08T20:33:55.235244Z","last_seen":"2026-07-18T17:51:01.78188Z","times_seen":403,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-24","alert":"Phishing Block","trigger":"aml-confirm.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-24","alert":"Sinkholed","trigger":"aml-confirm.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}