{"report_id":"89590ca5-7b8b-4811-a3a5-134e9f907dc1","version":6,"status":"done","tags":[],"date":"2025-09-10T13:49:24Z","url":{"schema":"https","addr":"amlsec.uk/","fqdn":"amlsec.uk","domain":"amlsec.uk","tld":"uk"},"ip":{"addr":"104.21.68.166","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"amlsec.uk/","fqdn":"amlsec.uk","domain":"amlsec.uk","tld":"uk"},"title":"Sol Incinerator"},"submit":{"url":{"schema":"https","addr":"amlsec.uk/","fqdn":"amlsec.uk","domain":"amlsec.uk","tld":"uk"},"ip":{"addr":"104.21.68.166","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-15T13:49:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-10","alert":"Sinkholed","trigger":"coinmarketcop-api.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"coinmarketcop-api.com","ip":{"addr":"172.67.141.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-22","domain_rank":0,"first_seen":"2025-08-22T20:51:30.781912Z","last_seen":"2025-09-07T12:27:43.304105Z","alert_count":6,"request_count":6,"received_data":5102,"sent_data":4282,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"amlsec.uk","ip":{"addr":"172.67.196.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":10,"received_data":593532,"sent_data":4590,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-09-03T15:14:36.780259Z","alert_count":0,"request_count":1,"received_data":9481,"sent_data":548,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"amlsec.uk/","fqdn":"amlsec.uk","domain":"amlsec.uk","tld":"uk"},"ip":{"addr":"172.67.196.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3fc21dc80f5ca0044ed77adda5097fc3","sha1":"a344fe06d28e74ac5e54d75e2b51c85b60f64eff","sha256":"a5a04dd82547d29563f2662ca0fbe7ba12b42777e556bbec931af0561f360aa8","sha512":"848fb7f993ea11d2ad6b5ba9b6ddc66a882d1f94a9c149ce7aec757b85c3978439a76b61343cdde1d4922d04c329d3704509209415dcd10a42306961f6d1b4ea","ssdeep":"768:n3O8p+KO/2186UoLXG6r4bLJ/Zt1dkxFHJl+DiSEvFrpqwgmRq:eJAUUXr49Ztkb3S0gmo","tlshash":"61735386179f9c8586b9432b63167476b4068c0a325caccdfe34b6eee9731e181c7d63","size":74640,"data":"","first_seen":"2025-09-10T13:49:28.94133Z","last_seen":"2025-09-10T13:49:28.94133Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmarketcop-api.com/@v1/cdn/bundles/front-worker.js?t=29291869","fqdn":"coinmarketcop-api.com","domain":"coinmarketcop-api.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"21467f3250cee640b473f8226f4c91cc","sha1":"85b5eb1494e6f96c4babc015efa4ea0567cb8728","sha256":"d49ed388abc8be992e5a8fc01411ba84426eb48edc5e9315b5c571125874b0e1","sha512":"5cf5630c891b0547c680189323fe2baea5bb8057ddca31c852aa40e1c601f79e38a82c556674facc71dcfe2ac1cc4f2e9d75bf1e703abb4a89fcc59fde50b565","ssdeep":"6144:Us6RCjrjOJMZUk6p1ZsJzO3fXeYwlEU5nyiC5z:R64fj0lWCvXeYw8i+z","tlshash":"1f748c917280617916634fda41bf094ab238f120a409492cf75cc8d72bb99dad9bff7c","size":339536,"data":"","first_seen":"2025-09-09T11:19:31.450692Z","last_seen":"2025-09-15T05:50:13.753477Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlsec.uk/","fqdn":"amlsec.uk","domain":"amlsec.uk","tld":"uk"},"ip":{"addr":"172.67.196.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fb134ae95205934573f30ccd625cab12","sha1":"a374058bb37ef6d92c7e76eba63821ed1b339c01","sha256":"9e20460c99a5d06b2f468b0aa49e0cfc40308e3ca47e78681a347593c2c51566","sha512":"9c14d9ae95a3471f0d028532ec2ffaa02552ba1ce5222b0241fd4e003474144b4af8cf7f035ba98210929951e1d7e1b9c1e43a430d7ff1b6a7db9bfc99954beb","ssdeep":"","tlshash":"80e05e287aa610b872777595c76fa240e4b500636484d806f92ca68a0fc1e1534aabda","size":336,"data":"","first_seen":"2025-09-10T13:49:28.943959Z","last_seen":"2025-11-20T11:06:13.573359Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlsec.uk/","fqdn":"amlsec.uk","domain":"amlsec.uk","tld":"uk"},"ip":{"addr":"172.67.196.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"acd392157ea0747ea5449671cc60dbe2","sha1":"0c9629027a06e9e2c768a9a5882b7126eb35322e","sha256":"7cc7a608109b653f8a8cd65669b777d4c73d7b2bf01075a3797c2a5b096aaf52","sha512":"0e01d021b4f0adbad4c6041b56967ceae37f7f4e6f1e3e57f6655971d70a83af301ab9d1e91ec44d655d6ff477cef6f456b6a4c0be96d7c35c23150113727023","ssdeep":"","tlshash":"50d0a9a86eaa123827337124872fa28136f5800364a0f8067a0ca1c60fe0e1000be8d7","size":290,"data":"","first_seen":"2025-09-10T13:49:28.945524Z","last_seen":"2025-11-20T11:06:13.574202Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlsec.uk/","fqdn":"amlsec.uk","domain":"amlsec.uk","tld":"uk"},"ip":{"addr":"172.67.196.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f80724862326f85f2d2286172a77a2fd","sha1":"1503bf16255b24798f7bfb1137845ec35b4b1954","sha256":"4957c8c9e255c693c28bc1de485b15e8478536b53a7736e1770e7fefcaf4b027","sha512":"1a90c187e1a00fbd0df0fb9ba760b4d42246921cb17b1ac0896ee0d4d6aeb1f9eebb488cdb8157b7441cf3149961e82be56d9b5ad26e0e35feeb534264ea5c95","ssdeep":"","tlshash":"d4e0863935751574097b986fc74b934b7db1141b5001e4167d0c924b0fa4f1034e6599","size":423,"data":"","first_seen":"2025-09-10T13:49:28.947142Z","last_seen":"2025-11-20T11:06:13.575108Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlsec.uk/rpOTJ1qz44o6.js","fqdn":"amlsec.uk","domain":"amlsec.uk","tld":"uk"},"ip":{"addr":"172.67.196.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"445f193e552f6ba8851dd80c60d0d75e","sha1":"1e650366b6ba3afaf08e934e47a754c2793e472e","sha256":"a158416933a15dd799c0660d37424e76d21ac6a6510d3324972a7ebbc45b4068","sha512":"8f940d6fd6357eb9d863f059b71bf8f6188592d954037a6a64645802d0631cd6fb1dc0ec949a60a7853e66dc191e686eddc3a778d5a3ffe65fba2af3cb7724a7","ssdeep":"768:SHERO87mfgBNFhYFuGs1GrYQ99jrD8tRJlODs5cEvFrpq2gmR5:SHdbfgBNFi4ZnQvjrKnSqgm/","tlshash":"6d735386139f9c8585b8432b62267479b4068c0a365c9ccdff78b6deea735e180c7d63","size":78335,"data":"","first_seen":"2025-09-10T13:49:28.934645Z","last_seen":"2025-09-10T13:49:28.934645Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"coinmarketcop-api.com/@v1/services/connector?referrer=amlsec.uk","fqdn":"coinmarketcop-api.com","domain":"coinmarketcop-api.com","tld":"com"},"ip":{"addr":"172.67.141.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://amlsec.uk/","date":"2025-09-10T13:49:05.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinmarketcop-api.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 15:47:41 GMT","end":"Thu, 20 Nov 2025 16:45:54 GMT"},"fingerprint":{"sha1":"B0:CF:37:BB:3E:5D:19:87:C9:06:DA:2B:3A:C5:0B:77:11:4C:A2:47","sha256":"FC:6B:44:07:4E:C2:B7:3E:B8:95:B0:E9:D0:96:D9:1C:DC:FE:A5:D7:F6:6B:A4:D5:79:CF:BE:F3:E3:05:67:8E"}}},"request":{"raw":"GET /@v1/services/connector?referrer=amlsec.uk HTTP/1.1\r\nHost: coinmarketcop-api.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjdXN0b21lcklkIjoieEFWMGJUOVdZYSIsImdyb3VwX2lkIjo3OTksImlhdCI6MTc1NzM2MTU1MX0.V_70ipOJxuDuJRw9cIooNDDub9sjIU6rzzJVaaX3yA8\r\nX-Direction-Safe: 1757512144685\r\nX-Scale-Referrer: amlsec.uk\r\nX-Auth-Key: v3xLG%2FD4bzTcmFYuQd0muc4O8KmFuZEGjtGaHF3KqSo%3D\r\nOrigin: https://amlsec.uk\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlsec.uk/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 10 Sep 2025 13:49:06 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FwAPO9VjlHIRRwgauwWrrBi%2BriATEJRAv6uZirQklRQX8uOw5FTY82aSKydZreLnY7U2tK2hptT7SGwXwx10Rqv4Y9uwZExEIOe7Zaj%2BbyjMpUs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://amlsec.uk\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\netag: W/\"15f-3qzkiMf/vZnkWIfTt6XTKqiZu8k\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 97cf62fccedeb518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":351,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"262512fea46d6d85f4b42dee4d34d969","sha1":"deace488c7ffbd99e45887d3b7a5d32aa899bbc9","sha256":"a84e5990593a38500cc5fd667d453fabde8bf653373fbc9d8b526ed36b0f3c64","sha512":"9e79656da1bc2313457354cb527b7ff1803b6da78a4538b6451ce274a07ea03b8ed63e163671dcf49634b6bd0b349d2fd7ed191047c00492a0f0e24618baa03d","ssdeep":"","tlshash":"1de0c0e1679666618c9b0dc19a77bf1c4ddd6df0e596e06a62f024c19154d2014434fe","first_seen":"2025-09-10T13:49:28.91985Z","last_seen":"2025-09-10T13:49:28.91985Z","times_seen":1,"resource_available":false,"data":null}},"time_used":649,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":649,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-10","alert":"Sinkholed","trigger":"coinmarketcop-api.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlsec.uk/incinerator-logo.75023e64ffbba7e943388cf6247a46ff.svg","fqdn":"amlsec.uk","domain":"amlsec.uk","tld":"uk"},"ip":{"addr":"172.67.196.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlsec.uk/","date":"2025-09-10T13:49:03.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlsec.uk","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 12:35:33 GMT","end":"Mon, 08 Dec 2025 13:35:14 GMT"},"fingerprint":{"sha1":"F8:2F:B7:BD:63:42:59:AB:B6:9B:29:47:D0:9D:3E:51:FD:96:C9:80","sha256":"86:58:91:71:52:BC:B1:EE:5F:00:05:49:73:A7:12:6E:0B:0A:47:B7:53:AB:AB:06:D7:DE:96:49:5C:8D:D4:5E"}}},"request":{"raw":"GET /incinerator-logo.75023e64ffbba7e943388cf6247a46ff.svg HTTP/1.1\r\nHost: amlsec.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlsec.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 10 Sep 2025 13:49:03 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Tue, 09 Sep 2025 13:34:10 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y1NOp6rasqta9vfqbVKDUeeNyJKDRAzwh9qg%2FwtwuCkWAGxtYvPogsHAvobU%2BWX7Lt3Au9Nrjz0qabhOGljRqW%2BHH%2Ftvz48%3D\"}]}\r\netag: W/\"3a6e-63e5e5bef62b0\"\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 97cf62efec4ab505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14958,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fae6badad083491c27f58cec7d4384d6","sha1":"9df7f79b5370d621c5621c08602631ae4816c04f","sha256":"749803cb7ca31014e9d90eef6466ddcbf9d10080867d06c8aa99c60fd7424157","sha512":"af2672c363721327ce580c12c5c16be044a87d6e7a14fb8ef31a436874c9be33c14912ebd3e41eeee0761cf97af67a397b922ee2210464fe886ccfab284051ff","ssdeep":"192:cHOT4G+y1a99aCkuHaK54MqRpqE99999d0AkuHaw99999dw099qf9999k99pp2pv:KOgbJ","tlshash":"df62755ef084eb7ca98091f9ce8804f615d0b29ec591b18cff94568b84df5fae865338","first_seen":"2024-12-07T18:34:26.442506Z","last_seen":"2026-05-13T07:32:37.319488Z","times_seen":81,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlsec.uk/css2.css","fqdn":"amlsec.uk","domain":"amlsec.uk","tld":"uk"},"ip":{"addr":"172.67.196.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amlsec.uk/","date":"2025-09-10T13:49:03.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlsec.uk","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 12:35:33 GMT","end":"Mon, 08 Dec 2025 13:35:14 GMT"},"fingerprint":{"sha1":"F8:2F:B7:BD:63:42:59:AB:B6:9B:29:47:D0:9D:3E:51:FD:96:C9:80","sha256":"86:58:91:71:52:BC:B1:EE:5F:00:05:49:73:A7:12:6E:0B:0A:47:B7:53:AB:AB:06:D7:DE:96:49:5C:8D:D4:5E"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: amlsec.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlsec.uk/main.e35e85ee.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 10 Sep 2025 13:49:03 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Tue, 09 Sep 2025 13:34:10 GMT\r\netag: \"957-63e5e5bef4f28-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 401\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tUyHziscflrTrx8DhXDNI3Fox7sIHYaWknWMLPkeVud9YZD60BrakCz3Sm%2Bd5KYtOse4oa0Ta9NGQPMMZhGixbkZtzZ33pQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 97cf62f22c5ab505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2391,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"0e8a0dd42f50c63562e20668e373589a","sha1":"d70e5106f07a6ad635e0bdadb5fca49c02781f71","sha256":"66e5b7785dd6cc21e0f6f80fb9497c4f8c2ac772ef13460e83f139a1fcc4a931","sha512":"cb280a7fbac5e1ae5fd28e950146d93666755162a971d5884894d0a127bd19baa5a36f5942f088791220c44a70902a4d4633de445e5c9a32a3fc06d5760dd7c7","ssdeep":"","tlshash":"8e418840086a6510e7a75cc42acd7e22ea1eb19464569d34bffe004cbcabc7c5372b8d","first_seen":"2025-04-28T04:33:21.807161Z","last_seen":"2026-06-28T16:27:57.520592Z","times_seen":61,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlsec.uk/VT323.2bc43ad8eb2f60b39f27.ttf","fqdn":"amlsec.uk","domain":"amlsec.uk","tld":"uk"},"ip":{"addr":"172.67.196.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amlsec.uk/","date":"2025-09-10T13:49:03.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlsec.uk","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 12:35:33 GMT","end":"Mon, 08 Dec 2025 13:35:14 GMT"},"fingerprint":{"sha1":"F8:2F:B7:BD:63:42:59:AB:B6:9B:29:47:D0:9D:3E:51:FD:96:C9:80","sha256":"86:58:91:71:52:BC:B1:EE:5F:00:05:49:73:A7:12:6E:0B:0A:47:B7:53:AB:AB:06:D7:DE:96:49:5C:8D:D4:5E"}}},"request":{"raw":"GET /VT323.2bc43ad8eb2f60b39f27.ttf HTTP/1.1\r\nHost: amlsec.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlsec.uk/main.e35e85ee.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 10 Sep 2025 13:49:04 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Tue, 09 Sep 2025 13:34:10 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YPlWdWh6yAxxxGULYlu8Q2dW58IbrY5mI7C6JuI2t2SNB6i3Qh4vjj9uc2o0MIxs8s62Sesp3rxzRulOCMiRornPn8cN49o%3D\"}]}\r\netag: W/\"248b8-63e5e5bf1088d\"\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: font/ttf\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 97cf62f3ec6db505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":149688,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 17 tables, 1st \"GDEF\", 10 names, Microsoft, language 0x409","md5":"034de38c65e202c1cc838e7d014385fd","sha1":"a4cbe89ec9e1bf6ddd26c53c118f587f1b465f25","sha256":"cee34b1d391e4b77b07b514f2c9c98fb2f60b49d4936fde107d212cceac5e012","sha512":"8612da6519a39bab40fb3fb527dd7574679e45f603b2be582cf2d47a6b12b93fc931a8e9234efb7f5e55c990fddef73cdeb81eeb683bf8fca7c2d9e639ad347f","ssdeep":"1536:o4u3lnBcZ9lfaa0lVViVuWE9OzTMkKNpkziRTmFjHRnplqFGk6XJd78byGGNv42/:+3ln5lVViVuWwOHMkYpkzYsJTNwU","tlshash":"88e344c9d3932966a6d8c698db304825edd7bb32273ed34e95dc92e2a8c53d40741cce","first_seen":"2023-11-10T18:09:34Z","last_seen":"2026-07-05T11:43:18.54406Z","times_seen":71,"resource_available":false,"data":null}},"time_used":503,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":195,"receive":308,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmarketcop-api.com/@v1/log/join","fqdn":"coinmarketcop-api.com","domain":"coinmarketcop-api.com","tld":"com"},"ip":{"addr":"172.67.141.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://amlsec.uk/","date":"2025-09-10T13:49:04.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinmarketcop-api.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 15:47:41 GMT","end":"Thu, 20 Nov 2025 16:45:54 GMT"},"fingerprint":{"sha1":"B0:CF:37:BB:3E:5D:19:87:C9:06:DA:2B:3A:C5:0B:77:11:4C:A2:47","sha256":"FC:6B:44:07:4E:C2:B7:3E:B8:95:B0:E9:D0:96:D9:1C:DC:FE:A5:D7:F6:6B:A4:D5:79:CF:BE:F3:E3:05:67:8E"}}},"request":{"raw":"POST /@v1/log/join HTTP/1.1\r\nHost: coinmarketcop-api.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nx-scale-referrer: amlsec.uk\r\nauthorization: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjdXN0b21lcklkIjoieEFWMGJUOVdZYSIsImdyb3VwX2lkIjo3OTksImlhdCI6MTc1NzM2MTU1MX0.V_70ipOJxuDuJRw9cIooNDDub9sjIU6rzzJVaaX3yA8\r\nx-device: 0:Windows:Firefox\r\nContent-Length: 2\r\nOrigin: https://amlsec.uk\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlsec.uk/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 10 Sep 2025 13:49:04 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yMloYHBEHTV2efTm7XisWqILvOwjDOvAQGAdDdQcsGn9pLF24BHvpOKWh5z8Upp6aTdQOaZVvbe6aozYkUzFv7cPtAJBs5vYuipTyRgmwO%2BKGLM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://amlsec.uk\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\netag: W/\"20-llti1nxI8SZi+xVpiFYUSfGpvg8\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 97cf62f77eb3b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3b5b4d21f8c87c5e6534b5a1d9d4574a","sha1":"965b62d67c48f12662fb156988561449f1a9be0f","sha256":"24dcf0603597089c21d0ab963001064690004c39e72221981b7faf7a5edd5f25","sha512":"1218be959182a70f35f2eeaeadc640c721f546b6b46b48f21f9acb3dead02d478da0ac6855f6c55777fbf33486b967fad262e93a5da6327ac7517933f9663ba8","ssdeep":"","tlshash":"d18000000e00aca83bc20802b2832028aaf22a80808b20a2800c803a0b028e0c22ba0c","first_seen":"2025-07-26T22:59:19.534167Z","last_seen":"2025-10-13T01:44:36.478944Z","times_seen":529,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":345,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-10","alert":"Sinkholed","trigger":"coinmarketcop-api.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlsec.uk/favicon.ico","fqdn":"amlsec.uk","domain":"amlsec.uk","tld":"uk"},"ip":{"addr":"172.67.196.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlsec.uk/","date":"2025-09-10T13:49:04.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlsec.uk","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 12:35:33 GMT","end":"Mon, 08 Dec 2025 13:35:14 GMT"},"fingerprint":{"sha1":"F8:2F:B7:BD:63:42:59:AB:B6:9B:29:47:D0:9D:3E:51:FD:96:C9:80","sha256":"86:58:91:71:52:BC:B1:EE:5F:00:05:49:73:A7:12:6E:0B:0A:47:B7:53:AB:AB:06:D7:DE:96:49:5C:8D:D4:5E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: amlsec.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlsec.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 10 Sep 2025 13:49:04 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Tue, 09 Sep 2025 13:34:10 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4RezjGLBRtCdieDhwSJ5R4uvCA4dSJKUT31myASn7Z%2FBEACPWWwipNEzUkphcsdik2fF%2Bb10QXJJfik63gTb6rNVMAp%2BKqA%3D\"}]}\r\netag: W/\"3c2e-63e5e5bef5ae0\"\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/vnd.microsoft.icon\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 97cf62f7ac96b505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"b3fc27f6c6afb28b8571638b40fc406a","sha1":"c688bf06bf2a9d64ba0af51516f28a15cf352b63","sha256":"7947efc13fa86a3a065685d0848d1bdda570c1fb72c68475abff8fee7a1c6fe1","sha512":"e20a19d8c4732c2d9a474ad97d837e9110fe2da8f5290479db79337b03f8adad171efcb10022270843b93e26ed3090553c06bd6f42cde4f6aaf43e0648c07bcd","ssdeep":"96:T3sdbGdbGdbGdbGdbGdbGdbGdbGdbGdbGdbGdb6bwbPkPoSS7QrkcWxc4+Z:Isssssssssss3kFKQrkU","tlshash":"c06256158f18c2f2c4150e351f53d23863cd3e5a2814461e68e8be377a7387cd67aba5","first_seen":"2024-12-07T18:34:26.440881Z","last_seen":"2026-05-13T07:32:37.376035Z","times_seen":84,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":226,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmarketcop-api.com/@v1/services/connector?referrer=amlsec.uk","fqdn":"coinmarketcop-api.com","domain":"coinmarketcop-api.com","tld":"com"},"ip":{"addr":"172.67.141.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://amlsec.uk/","date":"2025-09-10T13:49:04.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinmarketcop-api.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 15:47:41 GMT","end":"Thu, 20 Nov 2025 16:45:54 GMT"},"fingerprint":{"sha1":"B0:CF:37:BB:3E:5D:19:87:C9:06:DA:2B:3A:C5:0B:77:11:4C:A2:47","sha256":"FC:6B:44:07:4E:C2:B7:3E:B8:95:B0:E9:D0:96:D9:1C:DC:FE:A5:D7:F6:6B:A4:D5:79:CF:BE:F3:E3:05:67:8E"}}},"request":{"raw":"OPTIONS /@v1/services/connector?referrer=amlsec.uk HTTP/1.1\r\nHost: coinmarketcop-api.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,x-auth-key,x-direction-safe,x-scale-referrer\r\nReferer: https://amlsec.uk/\r\nOrigin: https://amlsec.uk\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 10 Sep 2025 13:49:05 GMT\r\ncontent-length: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://amlsec.uk\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS,PATCH\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HHhMk9fvT6DM9uD5Tbo6CEGQoR6tKAcNzrwQjzBbwSIkwof95ewpol%2Bnm3l1x8MMRHANy4EUy56kVRGW5uELuIqndWmdAak5FdoRiqUnZc%2BkJR4%3D\"}]}\r\ncf-ray: 97cf62f85eb8b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T14:24:28.164507Z","times_seen":17452176,"resource_available":true,"data":null}},"time_used":706,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":706,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-10","alert":"Sinkholed","trigger":"coinmarketcop-api.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"amlsec.uk/","fqdn":"amlsec.uk","domain":"amlsec.uk","tld":"uk"},"ip":{"addr":"172.67.196.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-10T13:49:02.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlsec.uk","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 12:35:33 GMT","end":"Mon, 08 Dec 2025 13:35:14 GMT"},"fingerprint":{"sha1":"F8:2F:B7:BD:63:42:59:AB:B6:9B:29:47:D0:9D:3E:51:FD:96:C9:80","sha256":"86:58:91:71:52:BC:B1:EE:5F:00:05:49:73:A7:12:6E:0B:0A:47:B7:53:AB:AB:06:D7:DE:96:49:5C:8D:D4:5E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: amlsec.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 10 Sep 2025 13:49:03 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Tue, 09 Sep 2025 13:34:10 GMT\r\ncf-cache-status: DYNAMIC\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kAiFUdhs98C3KZM0giF5jbOr1PX%2FvflVA91YSBw6xWjejhxm0NK1zJqZvdKisspfIENNZ5yeEWB1rmndAFFP1xmqTDupZPb4AA%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 97cf62ed9d8535a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84651,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1372)","md5":"05b22f05c70ab9d23e19e6627f405b3b","sha1":"f8b2026c8cef9d188bc41f9c3f00f5c8969e5e2b","sha256":"0533e3e60af59eec088e7fca360cecdc63f2b5081e1a672a5049b6e28a9f5390","sha512":"aa9165c459748437c8833680d24758920c400b744f53f1ae7f06c01b0de8ffcc3130c57f8857015b52f29cdf19f2da5bba1f57d5a23c6a58ee22c72691efcffc","ssdeep":"768:sE5lNQ0yfZPwTIbbMXQcn8ymem3mPm3mgm8mzkoiVWF7HgFSxvfrC6+v/C6Yz:sE5leymem3mPm3mgm8mIoQQvfrC6+w","tlshash":"1e83a54470f205750e17627113eea71de53ad1c7c88bdc98bece02995fc2ba51e9b398","first_seen":"2025-09-10T13:49:28.930674Z","last_seen":"2025-09-10T13:49:28.930674Z","times_seen":1,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":38,"dns":23,"connect":1,"send":0,"wait":180,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlsec.uk/PressStart2P.21503c6a5385ab41dde9.ttf","fqdn":"amlsec.uk","domain":"amlsec.uk","tld":"uk"},"ip":{"addr":"172.67.196.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amlsec.uk/","date":"2025-09-10T13:49:03.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlsec.uk","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 12:35:33 GMT","end":"Mon, 08 Dec 2025 13:35:14 GMT"},"fingerprint":{"sha1":"F8:2F:B7:BD:63:42:59:AB:B6:9B:29:47:D0:9D:3E:51:FD:96:C9:80","sha256":"86:58:91:71:52:BC:B1:EE:5F:00:05:49:73:A7:12:6E:0B:0A:47:B7:53:AB:AB:06:D7:DE:96:49:5C:8D:D4:5E"}}},"request":{"raw":"GET /PressStart2P.21503c6a5385ab41dde9.ttf HTTP/1.1\r\nHost: amlsec.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlsec.uk/main.e35e85ee.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 10 Sep 2025 13:49:04 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Tue, 09 Sep 2025 13:34:10 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nnXB0XNePIM%2FwtGg71jmIJu6JS9QlXfyW9GOzjx%2F17s4GvivG7rZN6yAKyA%2ByErFdswgZNDCMsW05jhIrDzt3NvYRZlats0%3D\"}]}\r\netag: W/\"1c528-63e5e5bf0e17d\"\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: font/ttf\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 97cf62f3ec6eb505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":116008,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 13 names, Microsoft, language 0x409","md5":"f98cd910425bf727bd54ce767a9b6884","sha1":"59caa00e6aac4573f51943e0bdd20c758eddbf4a","sha256":"8d0248e41694fdd875dbcde859ee1bae5982ecfdc6c7e5e451b48950d29ba95a","sha512":"44904f17cd5efc06565a08838d627234cda763a6406798f0cbbdf1cf60c676b36efbdc44db6e8ce0dd860ef6738c0e47f6040ae82628fa31da71f38f0eb16c9b","ssdeep":"768:2sXZQPxxIAmt65gDNi6IGwcCD1qldBE12eKuIeyWZuBPh3+d8n7Mb1vZfR5ITTzk:fQPx6FUCZIpwNMWw5TkW4rOl6J+EO","tlshash":"0ab3a313ef88da5ecd24587f3b76e2559305e82d4626cffa910b752eccb60d40a4a783","first_seen":"2024-12-07T18:34:26.44973Z","last_seen":"2026-07-19T22:27:37.443195Z","times_seen":103,"resource_available":false,"data":null}},"time_used":375,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":150,"receive":225,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlsec.uk/main.e35e85ee.css","fqdn":"amlsec.uk","domain":"amlsec.uk","tld":"uk"},"ip":{"addr":"172.67.196.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amlsec.uk/","date":"2025-09-10T13:49:03.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlsec.uk","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 12:35:33 GMT","end":"Mon, 08 Dec 2025 13:35:14 GMT"},"fingerprint":{"sha1":"F8:2F:B7:BD:63:42:59:AB:B6:9B:29:47:D0:9D:3E:51:FD:96:C9:80","sha256":"86:58:91:71:52:BC:B1:EE:5F:00:05:49:73:A7:12:6E:0B:0A:47:B7:53:AB:AB:06:D7:DE:96:49:5C:8D:D4:5E"}}},"request":{"raw":"GET /main.e35e85ee.css HTTP/1.1\r\nHost: amlsec.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlsec.uk/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 10 Sep 2025 13:49:03 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Tue, 09 Sep 2025 13:34:10 GMT\r\netag: \"1541d-63e5e5bef7250-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 16158\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EbdWC28qsi05MGDi6ZrxeV%2B5zW%2Bn%2FvMURsT3hwN8NCnioKt1LrTSAxnXEmWDBpbkrluP3foBRxZ4xaInNuYQc474dhgpTCc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 97cf62efdc48b505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87069,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (64329)","md5":"0c4a34df4feeda5a42505c6aa2b5b37e","sha1":"86325308a0fc7b4a69c1e99cc1c57923a0443afa","sha256":"04947311af8a8fc18eaa260f0d9d0fce09f614ab5175d056f901a084ede809b8","sha512":"069941138130387784f60ee75987ff33477dc325bffdb0da9b569f6c2bf6765c43fa5bc37e400372614b4f27075283c9e9b9e3023fe2aa67a37eaf3f71960fe8","ssdeep":"1536:A579sGRXAmJJKzNbz8h9IgPm0O3W1jFfJRNuAGzyBj0:A57pRXAmJJKzNbz8h9IgPm41jFfJRNuN","tlshash":"0c83630d7e1d3a397c23577581d4999cd10b778ade7a43abbcc7220c8ac93d53a6a324","first_seen":"2025-09-10T13:49:28.933411Z","last_seen":"2025-11-20T11:06:13.569088Z","times_seen":5,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlsec.uk/rpOTJ1qz44o6.js","fqdn":"amlsec.uk","domain":"amlsec.uk","tld":"uk"},"ip":{"addr":"172.67.196.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlsec.uk/","date":"2025-09-10T13:49:03.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlsec.uk","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 12:35:33 GMT","end":"Mon, 08 Dec 2025 13:35:14 GMT"},"fingerprint":{"sha1":"F8:2F:B7:BD:63:42:59:AB:B6:9B:29:47:D0:9D:3E:51:FD:96:C9:80","sha256":"86:58:91:71:52:BC:B1:EE:5F:00:05:49:73:A7:12:6E:0B:0A:47:B7:53:AB:AB:06:D7:DE:96:49:5C:8D:D4:5E"}}},"request":{"raw":"GET /rpOTJ1qz44o6.js HTTP/1.1\r\nHost: amlsec.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlsec.uk/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 10 Sep 2025 13:49:03 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Tue, 09 Sep 2025 13:34:10 GMT\r\netag: \"131ff-63e5e5bf0fcd5-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 19018\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lM5ujRgpUqSBnD%2BYdl4dre2arS1YWL0zyCW9I%2BJsBoWv1r1NaDeK70UCuLINwpeFsuq2BRrZGBMeBphyq8W1ktuN%2BI8pcZg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 97cf62efec49b505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78335,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (63984)","md5":"445f193e552f6ba8851dd80c60d0d75e","sha1":"1e650366b6ba3afaf08e934e47a754c2793e472e","sha256":"a158416933a15dd799c0660d37424e76d21ac6a6510d3324972a7ebbc45b4068","sha512":"8f940d6fd6357eb9d863f059b71bf8f6188592d954037a6a64645802d0631cd6fb1dc0ec949a60a7853e66dc191e686eddc3a778d5a3ffe65fba2af3cb7724a7","ssdeep":"768:SHERO87mfgBNFhYFuGs1GrYQ99jrD8tRJlODs5cEvFrpq2gmR5:SHdbfgBNFi4ZnQvjrKnSqgm/","tlshash":"6d735386139f9c8585b8432b62267479b4068c0a365c9ccdff78b6deea735e180c7d63","first_seen":"2025-09-10T13:49:28.934645Z","last_seen":"2025-09-10T13:49:28.934645Z","times_seen":1,"resource_available":true,"data":null}},"time_used":343,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlsec.uk/b36cbac067ed868063e8e714f92f58d2ad548ef2.png","fqdn":"amlsec.uk","domain":"amlsec.uk","tld":"uk"},"ip":{"addr":"172.67.196.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlsec.uk/","date":"2025-09-10T13:49:03.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlsec.uk","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 12:35:33 GMT","end":"Mon, 08 Dec 2025 13:35:14 GMT"},"fingerprint":{"sha1":"F8:2F:B7:BD:63:42:59:AB:B6:9B:29:47:D0:9D:3E:51:FD:96:C9:80","sha256":"86:58:91:71:52:BC:B1:EE:5F:00:05:49:73:A7:12:6E:0B:0A:47:B7:53:AB:AB:06:D7:DE:96:49:5C:8D:D4:5E"}}},"request":{"raw":"GET /b36cbac067ed868063e8e714f92f58d2ad548ef2.png HTTP/1.1\r\nHost: amlsec.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlsec.uk/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 10 Sep 2025 13:49:03 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Tue, 09 Sep 2025 13:34:10 GMT\r\netag: \"514-63e5e5bef4758\"\r\naccept-ranges: bytes\r\ncontent-length: 1300\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zpfqkFlg%2BZweMcpCmigz%2Fn%2B4AGDQnur0fiws2iJQZukhZUkcfSXs3130ea7GByxcImHsiTAZkYBss0isfSSL0hkxhZN67XA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncf-ray: 97cf62efec4bb505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1300,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 148 x 132, 8-bit/color RGBA, non-interlaced","md5":"51122a03ae65c332bb6b86f771899678","sha1":"b36cbac067ed868063e8e714f92f58d2ad548ef2","sha256":"5f392d80a9a5b1d1c4f3ec62288f3e4e87fbffaa0b291b0afbc9d08e67fd281d","sha512":"e3670ac2d0cced1f26bd3e1fb14f89a6cfff49831a31e1fbb2971b42ca6d4b21e54b19ebdaa2d9778c5669a72d6b5d7a32ec7b9318658d7540055ca2197f8f99","ssdeep":"","tlshash":"4a219596cdc67b38b77d52ff818d885cef3b01c393962809442b0166fea66151451a4c","first_seen":"2025-09-10T13:49:28.936022Z","last_seen":"2026-04-08T13:10:44.130842Z","times_seen":8,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlsec.uk/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K4.woff2","fqdn":"amlsec.uk","domain":"amlsec.uk","tld":"uk"},"ip":{"addr":"172.67.196.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amlsec.uk/","date":"2025-09-10T13:49:03.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlsec.uk","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Sep 2025 12:35:33 GMT","end":"Mon, 08 Dec 2025 13:35:14 GMT"},"fingerprint":{"sha1":"F8:2F:B7:BD:63:42:59:AB:B6:9B:29:47:D0:9D:3E:51:FD:96:C9:80","sha256":"86:58:91:71:52:BC:B1:EE:5F:00:05:49:73:A7:12:6E:0B:0A:47:B7:53:AB:AB:06:D7:DE:96:49:5C:8D:D4:5E"}}},"request":{"raw":"GET /rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K4.woff2 HTTP/1.1\r\nHost: amlsec.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlsec.uk/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 10 Sep 2025 13:49:04 GMT\r\nserver: cloudflare\r\ncross-origin-resource-policy: cross-origin\r\nlast-modified: Tue, 09 Sep 2025 13:34:10 GMT\r\netag: \"9034-63e5e5bf0e94d\"\r\naccept-ranges: bytes\r\ncontent-length: 36916\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8xripSAu5tgXoLKqD%2Fz5pZvJCSjC1ipDmCIkrj4D9wVev59ydeaFAb8k435ZB%2FuDduCJbtGpcmEtlqecSW9coj9%2FVWX72ok%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: font/woff2\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncf-ray: 97cf62f3fc6fb505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36916,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36916, version 1.0","md5":"f0244b919a1d63ca2c430cbea5a9760b","sha1":"e85051d4a760f8feb6b2293ad9ba3cde1cbec15e","sha256":"967ec653e45a62f5dc91767eba95b0e2df6ed754bc4de4354e5efdf4ac9de068","sha512":"04d130036a5545024d95cd29b5562e4343ca475499b154c3d26458d2a4db6323f64ad4a9be6470982947b95f543f4003fccdcfe5072dabb04ccc5cb5d7148323","ssdeep":"768:GxfGQAfOaEkOfBo6V3Wz0sIPDNmgJPkM2SHhQ4DU7ol0CB1Y74bpmh:GxfGQy/WfBhC0ZvVLhxUUfB1Yvh","tlshash":"24f2f239bfe7dec3f0da9350113fc4108314a7e6a7482f42d6d585f8a45d424daadd98","first_seen":"2025-06-02T18:48:01.285787Z","last_seen":"2026-07-21T21:49:49.588025Z","times_seen":4115,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":220,"receive":132,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmarketcop-api.com/@v1/log/join","fqdn":"coinmarketcop-api.com","domain":"coinmarketcop-api.com","tld":"com"},"ip":{"addr":"172.67.141.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://amlsec.uk/","date":"2025-09-10T13:49:04.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinmarketcop-api.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 15:47:41 GMT","end":"Thu, 20 Nov 2025 16:45:54 GMT"},"fingerprint":{"sha1":"B0:CF:37:BB:3E:5D:19:87:C9:06:DA:2B:3A:C5:0B:77:11:4C:A2:47","sha256":"FC:6B:44:07:4E:C2:B7:3E:B8:95:B0:E9:D0:96:D9:1C:DC:FE:A5:D7:F6:6B:A4:D5:79:CF:BE:F3:E3:05:67:8E"}}},"request":{"raw":"OPTIONS /@v1/log/join HTTP/1.1\r\nHost: coinmarketcop-api.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,x-device,x-scale-referrer\r\nReferer: https://amlsec.uk/\r\nOrigin: https://amlsec.uk\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 10 Sep 2025 13:49:04 GMT\r\ncontent-length: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://amlsec.uk\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS,PATCH\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WVHa7wMwSwpkFM6bc4eTHCTmpih0D2fkRJeH8nTcJTfGHdAaeMvg5dNqxFThsuIlNl4EJOm%2B7kJ25mfDh5%2Fm%2FDYrZsk0EtA1ohfFm5NNGvUCnZA%3D\"}]}\r\ncf-ray: 97cf62f6aeadb518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T14:24:28.164507Z","times_seen":17452176,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":20,"dns":1,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-10","alert":"Sinkholed","trigger":"coinmarketcop-api.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinmarketcop-api.com/@v1/services/temp-link/create?referrer=amlsec.uk","fqdn":"coinmarketcop-api.com","domain":"coinmarketcop-api.com","tld":"com"},"ip":{"addr":"172.67.141.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://amlsec.uk/","date":"2025-09-10T13:49:04.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinmarketcop-api.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 15:47:41 GMT","end":"Thu, 20 Nov 2025 16:45:54 GMT"},"fingerprint":{"sha1":"B0:CF:37:BB:3E:5D:19:87:C9:06:DA:2B:3A:C5:0B:77:11:4C:A2:47","sha256":"FC:6B:44:07:4E:C2:B7:3E:B8:95:B0:E9:D0:96:D9:1C:DC:FE:A5:D7:F6:6B:A4:D5:79:CF:BE:F3:E3:05:67:8E"}}},"request":{"raw":"OPTIONS /@v1/services/temp-link/create?referrer=amlsec.uk HTTP/1.1\r\nHost: coinmarketcop-api.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,x-auth-key,x-auth-key-v2,x-direction-safe,x-scale-referrer\r\nReferer: https://amlsec.uk/\r\nOrigin: https://amlsec.uk\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 10 Sep 2025 13:49:05 GMT\r\ncontent-length: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://amlsec.uk\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS,PATCH\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8LeXhLuqJXfsB0LVDLkAJwBcKcmLZTLmmGgBg03V0TwypWblU6lGSuWZBXTZfPffTXmkytFGunIpRcccWX7LObY9YzZJwLXTY7fE0D9hDRP6qPI%3D\"}]}\r\ncf-ray: 97cf62f80eb6b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T14:24:28.164507Z","times_seen":17452176,"resource_available":true,"data":null}},"time_used":488,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":488,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-10","alert":"Sinkholed","trigger":"coinmarketcop-api.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Montserrat:ital,wght@0,100..900;1,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amlsec.uk/","date":"2025-09-10T13:49:04.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:41:11 GMT","end":"Mon, 10 Nov 2025 08:41:10 GMT"},"fingerprint":{"sha1":"74:C1:9B:D3:5D:65:CE:2E:7C:CC:41:C0:7C:F9:2C:AB:41:A3:EC:AA","sha256":"BC:18:82:63:1D:AE:2A:9D:1A:A3:B1:77:B2:AF:6F:0D:AA:CF:1A:88:5A:51:22:46:A8:66:C8:4F:9C:92:20:32"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Montserrat:ital,wght@0,100..900;1,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlsec.uk/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 10 Sep 2025 13:49:04 GMT\r\ndate: Wed, 10 Sep 2025 13:49:04 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8795,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"bcd01865bb66c8fb8cdc3fc53aa3efc4","sha1":"b51cb0675812dda181acf06adcf1f3de1929f054","sha256":"b8f7ca9074f04c891c152f6bb3fb864afe47e7f6e868299bbf8f1c08123113a8","sha512":"2043d320a4fb406bec163d37ee71b5de9aeb77ca74fc413226b99809af27efa61dc0c80e8d5ad2ca200f945ad6ea9b4f0abe5b879e3ade16cd6cf0cc5d99c1e1","ssdeep":"192:vyEfyZy6yG3gyLyZVyV77xd6n3UQjH+yYwyNFyuy3uySRk73vO6u8:vtfcHjg8cicOhwCFnbL8B","tlshash":"8f02fe91052bd504ea471cc527cf7e369e8e62a67481d1b97ffe2cd9aceac22132471c","first_seen":"2025-09-05T11:33:38.389978Z","last_seen":"2025-09-10T15:30:46.442614Z","times_seen":58,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":88,"dns":1,"connect":16,"send":0,"wait":35,"receive":0,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmarketcop-api.com/@v1/services/temp-link/create?referrer=amlsec.uk","fqdn":"coinmarketcop-api.com","domain":"coinmarketcop-api.com","tld":"com"},"ip":{"addr":"172.67.141.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://amlsec.uk/","date":"2025-09-10T13:49:05.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinmarketcop-api.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 15:47:41 GMT","end":"Thu, 20 Nov 2025 16:45:54 GMT"},"fingerprint":{"sha1":"B0:CF:37:BB:3E:5D:19:87:C9:06:DA:2B:3A:C5:0B:77:11:4C:A2:47","sha256":"FC:6B:44:07:4E:C2:B7:3E:B8:95:B0:E9:D0:96:D9:1C:DC:FE:A5:D7:F6:6B:A4:D5:79:CF:BE:F3:E3:05:67:8E"}}},"request":{"raw":"POST /@v1/services/temp-link/create?referrer=amlsec.uk HTTP/1.1\r\nHost: coinmarketcop-api.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nAuthorization: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjdXN0b21lcklkIjoieEFWMGJUOVdZYSIsImdyb3VwX2lkIjo3OTksImlhdCI6MTc1NzM2MTU1MX0.V_70ipOJxuDuJRw9cIooNDDub9sjIU6rzzJVaaX3yA8\r\nX-Direction-Safe: 1757512144634\r\nX-Scale-Referrer: amlsec.uk\r\nX-Auth-Key: LAs3NihJeXDO09gLHIPLJgim%2FV%2BR0DUleot5Wk0IrH8%3D\r\nX-Auth-Key-V2: nUBWndNk279TQbphtCGE8SGOnBuPqphi8IYTD59hshs%3D\r\nContent-Length: 2031\r\nOrigin: https://amlsec.uk\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlsec.uk/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 10 Sep 2025 13:49:05 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VaQv9%2B1L1w2YKhacSaG0%2FZhuXsy%2BLNlWj29WwgqDjQY2pbjvzJZ1%2BvEg0HaD0eepPcwA2Fhe4HX5EwEBcM3f2C1oSMOr%2BCLqLG8Fz9aDgH7o7f4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://amlsec.uk\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\netag: W/\"252-bqm953aeGMa+x6wQMry7eAh90Rg\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 97cf62fb1ed5b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":594,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1288161bfe98ed1e97c0b751d4acf7c6","sha1":"6ea9bde7769e18c6bec7ac1032bcbb78087dd118","sha256":"0c2a0073f0bcfa1c1fc03fc3dec649bfae4d34600f6d09ede6bc67c9bb3076d0","sha512":"363d09cb98abecd0e35fa237f4a1625c1a4d17ae3b71462f6ed7a56e00aff61aee0130fca294b455aeac977d6335811da9aeefae89c57d74b4dbdee11ec26910","ssdeep":"","tlshash":"adf002c1243fd1499f96a6f06d1c5c68eb4114027a82ec6a62748ba95d13c0cb5a05a2","first_seen":"2025-09-10T13:49:28.93913Z","last_seen":"2025-09-10T13:49:28.93913Z","times_seen":1,"resource_available":false,"data":null}},"time_used":609,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":609,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-10","alert":"Sinkholed","trigger":"coinmarketcop-api.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}
