{"report_id":"999ecf00-7ef0-4604-acd9-6f7681bd6a08","version":0,"status":"done","tags":[],"date":"2026-06-29T01:11:45Z","url":{"schema":"https","addr":"amlshield.sbs/","fqdn":"amlshield.sbs","domain":"amlshield.sbs","tld":"sbs"},"ip":{"addr":"185.158.133.1","port":0,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"final":{"url":{"schema":"https","addr":"amlshield.sbs/","fqdn":"amlshield.sbs","domain":"amlshield.sbs","tld":"sbs"},"title":"AML Shield - Проверка криптокошельков на AML-риски","dom":{"size":154211,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (45655)","md5":"85b650ba48e783185e5b8a17466b6bee","sha1":"5de262b3d47f6447fd380a1448ee82c390fc79ae","sha256":"d8b33bb0196d38590c6e5bfbe9a660bfdfdcd7cbf296438c1c655282198941b1","sha512":"6cf5249dc9f601dbd48386cc922504c5b4830d8b63f60dac049e91877247b37430fc337eed0757ceb4087cc855b73f06ed89e3058247ef976329f833f6f83516","ssdeep":"3072:APAZtK6guMiZp6BAb4iAZtK6guMiZp6Bv+3c0BjW:APSK6guMiZ0BriSK6guMiZ0BAcCW","tlshash":"8be35e74124d2d2d662bca80f58c7f286c3894d7eb2b9128f1ac18b567c7da4dd3e784","dom_hash":"domhash43990e19cd9bcca84e93e76f5499042a","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"amlshield.sbs/","fqdn":"amlshield.sbs","domain":"amlshield.sbs","tld":"sbs"},"ip":{"addr":"185.158.133.1","port":0,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-03T01:11:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-06-29","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"amlshield.sbs/assets/code.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-06-29","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"amlshield.sbs/assets/index-DgfeWB38.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-06-29","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"amlshield.sbs/assets/index-Ddg3ms6q.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null},"summary":[{"fqdn":"dontclickthislink.lol","ip":{"addr":"172.67.174.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-02","domain_rank":0,"first_seen":"2026-04-09T04:56:20.367729Z","last_seen":"2026-06-29T01:10:28.088541Z","alert_count":0,"request_count":4,"received_data":3748,"sent_data":2206,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"tonapi.io","ip":{"addr":"172.64.153.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-04-24","domain_rank":37995,"first_seen":"2022-04-26T16:09:28Z","last_seen":"2026-06-22T06:23:55.480534Z","alert_count":0,"request_count":2,"received_data":44897,"sent_data":1090,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"amlshield.sbs","ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"2025-11-12","domain_rank":0,"first_seen":"2026-06-29T01:11:50.868068Z","last_seen":"2026-06-29T01:11:50.868068Z","alert_count":3,"request_count":11,"received_data":7354081,"sent_data":7256,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-28T22:22:13.875484Z","alert_count":0,"request_count":1,"received_data":5571,"sent_data":559,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"explorer-api.walletconnect.com","ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-12-19","domain_rank":466611,"first_seen":"2022-10-10T18:16:28Z","last_seen":"2026-06-29T00:57:38.088112Z","alert_count":0,"request_count":6,"received_data":16109,"sent_data":4268,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"amlshield.sbs/","fqdn":"amlshield.sbs","domain":"amlshield.sbs","tld":"sbs"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"0bf86974a20804b033487e015b86e67f","sha1":"fbe1550be76a39d20a279d05ba65481bdd10b03f","sha256":"4d675d82812a31891f0f5c9f3a39243175f14f70a779be30b2444b0da95dd36c","sha512":"ab1f1aebb1cf5ee468505f788bb423c0154bcacff9061030026aeb91114a5449f50a874b68236620ad1464ffa5c78d49a1477df321857f6c03eb448f12668645","ssdeep":"","tlshash":"8df020a63c894034c36712652b739149303d242f380ead51f64d18613fa08a308ab51c","size":590,"data":"","first_seen":"2026-06-29T01:10:32.998547Z","last_seen":"2026-06-29T01:11:54.61702Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlshield.sbs/assets/code.js","fqdn":"amlshield.sbs","domain":"amlshield.sbs","tld":"sbs"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"d6491a556592b4237cc777faf2da3226","sha1":"5c7545e329e35d440736b1cb79e6a23d69926c8e","sha256":"c3845dd46930f5bd92453bb833bc371c6bc45521ef1ca9f29c71a24a0c268bca","sha512":"eecf7abf9caf9e7e68ab3c1e8382ff17ce8e004fd99d563ceff37f8304f29e92cddbc9ea92a267c3cb26829c968e48e4ee125d4fb74dd5d11c5af1ce3862408e","ssdeep":"","tlshash":"1f417d182f9065e863e22fd7052b19c5e146c86d7490008bb115fff07e98965f693f76","size":2096,"data":"","first_seen":"2026-06-29T01:10:32.984419Z","last_seen":"2026-06-29T01:11:54.607389Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-06-29","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"amlshield.sbs/assets/code.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null}},{"url":{"schema":"https","addr":"amlshield.sbs/assets/index-CxVOGdN3.js","fqdn":"amlshield.sbs","domain":"amlshield.sbs","tld":"sbs"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"92a11eff0071f351342784f60f2dd319","sha1":"90c2c6550348b3b1748e599af30e71bcb403729a","sha256":"83dfe0628bbe699387107060a6bff9a72c2d68db0592ddd74950e6223a3c12e5","sha512":"1bca7107335a3ecbcaf14add9a47b242c69e20f3a76adf57d23f42411e1c07598441a2b01bb57b9917c9b914ba83a1e050f29a4252d4a8fa8fdb6f9fac5f0a74","ssdeep":"6144:2Y4v5154hNdyAJpc2MU3go5oUQi/MWQ7kAXqYJtyFsYnK:6+hNpO2MU3go5olD7knYJtbYnK","tlshash":"35746dd8305ab575abb346a2807f411a733d2916780d4420b03cedae77b1549a2bbffd","size":340316,"data":"","first_seen":"2026-06-29T01:10:32.981653Z","last_seen":"2026-06-29T01:11:54.611518Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlshield.sbs/~flock.js","fqdn":"amlshield.sbs","domain":"amlshield.sbs","tld":"sbs"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","size":21296,"data":"","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-06-29T19:39:55.039393Z","times_seen":12086,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlshield.sbs/__l5e/events.js","fqdn":"amlshield.sbs","domain":"amlshield.sbs","tld":"sbs"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"4984c751409f378613ce4a697469eb54","sha1":"db702076417754abd5497526bb2d4326d3fc9594","sha256":"48b09309d5c937dcd3d62ffd10b47d9d4ed5926f6b96cdcdefa63099e84818fa","sha512":"32420a4ba8bc56dadddd982b9bb39cd56fc15249f7a6962f0f606a84681be20e5006554354eb317c0b5f44fa495a08a5ccffb42abbd8bdeeb4febb6530d6e393","ssdeep":"768:5+rVEje/DCjA89Huk/sk4S58W45XKxNAOtXVltoaSeSzc4R4jgcFykJ8X/cpCgAd:5buk/sk4S6etgYrXBfOVEkZovhfi7","tlshash":"aa13728878f714a30163917e5b9b810236349587354adfa4beac4d0a2fcd658e6f3fc9","size":44148,"data":"","first_seen":"2026-06-16T13:38:26.366748Z","last_seen":"2026-06-29T20:05:19.007219Z","times_seen":1231,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlshield.sbs/assets/index-DgfeWB38.js","fqdn":"amlshield.sbs","domain":"amlshield.sbs","tld":"sbs"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"58d5795ba8644b680736df85f9259dbf","sha1":"482c2e8ee2147664781d8b8d371f4df97641e1e1","sha256":"011fae4ee31abd36ae1144bb8fe45cf5feb44904a9e183782c2f6b666d3e1eef","sha512":"393fe2588745aa795570ec958ce24fdfe36d261d9c1b2432f4c11401178f20c4718c052967b2ea985e23ec49be50bb50cd8b41f2069578bb26aeee258d297903","ssdeep":"6144:veTrFQq1iP2Ne1hKTz9s6Awq8ZX7HPelYr1oUoHhoZCMCXkjaJUjajya:ve3Wq1iP2/ls6Awq8ZX7HPelYFqkjaJr","tlshash":"d634d8402bd0655823178f7bb72771f1f41e28797948c88be1987f2418ae727eaf6970","size":244618,"data":"","first_seen":"2026-06-29T01:10:32.987655Z","last_seen":"2026-06-29T01:11:54.615253Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-06-29","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"amlshield.sbs/assets/index-DgfeWB38.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null}},{"url":{"schema":"https","addr":"amlshield.sbs/assets/index-Ddg3ms6q.js","fqdn":"amlshield.sbs","domain":"amlshield.sbs","tld":"sbs"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"48f26fbdda4df41aa231fa45f4924edd","sha1":"b664fe26ca55159c6698fb7669feb79bfb36d713","sha256":"c1be3304e91aeba0327a80323fc06bb07b9c8b01ed2c854e17aaaea74a815c0b","sha512":"38f02870f6698cb64ccb78349933e7785d269b667555c4cb7de607d412c438fad57f7ce0e7ecddd8d990a5d802d8bb1141bd87247763ea8a187b973f775d52cc","ssdeep":"196608:seBusS6+TfswtZXFuseE7JZ9Qs0rG9L5K0m+:seBusS6+TfswtZXFuseE7JZ9Qs0rG9L9","tlshash":"0f664b406380e89c53978f76f73eb1d9e81d1a6e7998494be104fc60ad86627f9fc930","size":6624471,"data":"","first_seen":"2026-06-29T01:10:32.997121Z","last_seen":"2026-06-29T01:11:54.618451Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-06-29","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"amlshield.sbs/assets/index-Ddg3ms6q.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"amlshield.sbs/assets/index-Btz9QwSr.css","fqdn":"amlshield.sbs","domain":"amlshield.sbs","tld":"sbs"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amlshield.sbs/","date":"2026-06-29T01:11:20.059Z","timestamp":1782695480059,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlshield.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 May 2026 00:15:36 GMT","end":"Sat, 08 Aug 2026 01:15:30 GMT"},"fingerprint":{"sha1":"81:8F:62:FB:5F:2D:B9:AD:FF:03:90:72:D6:D9:E9:14:30:F1:29:AF","sha256":"A8:BE:1B:27:36:26:7C:83:AA:11:88:C4:63:53:A0:7D:A3:22:36:14:1C:A8:C1:5D:F3:1B:00:F4:A4:78:11:B8"}}},"request":{"raw":"GET /assets/index-Btz9QwSr.css HTTP/1.1\r\nHost: amlshield.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://amlshield.sbs/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=tYLUKeXFTib6_GxlJvZkTVJ_2v7vmMcyU4tbXU9ER.0-1782695479.537125-1.0.1.1-I7E1ybdSvJlXfUERCozV8lAhLc5Q8jQskCuzcZneAeWHfHwrDjeLNlYQXg_x7ZR_qNi2IneU7LY3ND1j3M0jaa1PxgiruIv_n92iNvxJog5Wa8rYDOGRS2PUaUsVX6YB\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 01:11:20 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"3fa85d31cbe06aadb497b683edfdb5b5\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a1310e7e69a8b4eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60976,"size_decoded":11059,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (60975)","md5":"3fa85d31cbe06aadb497b683edfdb5b5","sha1":"6d9533014d8ab44430149ff50e427b693c8bf7eb","sha256":"c95ec2611e8b9f6d2118d346596602c5c263a1a4e3607d09115fb0c15114495d","sha512":"6974968487901315ebd79fc14f3ac1f69da0bf3c4ea3aefc9d813bed67003606192f119f00583dac0e561a72c19a267f7b92f51a397e8a35edbe3c447db228fd","ssdeep":"768:QDGhkBoYQYekdZUhZNYreeaG9VV1U378VQZkt5Fy/GTW7WsW:JhkaYekvU2aG9V0378VQZkt5FyCW78","tlshash":"5a53861ab919a17e3c2790e8c3ccb5ec611af0c0de3a05b97e9a41216bd37f51dbb518","first_seen":"2026-06-29T01:10:32.98299Z","last_seen":"2026-06-29T01:11:54.602979Z","times_seen":2,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amlshield.sbs/","date":"2026-06-29T01:11:21.464Z","timestamp":1782695481464,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:10 GMT","end":"Mon, 31 Aug 2026 08:38:09 GMT"},"fingerprint":{"sha1":"8A:2F:DC:6F:C0:09:07:D3:E5:9C:B7:EE:C2:C4:63:DC:59:36:B5:1B","sha256":"64:7C:E4:55:AB:5C:58:7E:89:F1:19:3B:95:DB:7B:4B:E6:75:42:2C:0C:51:2E:66:85:F5:BB:51:58:08:39:19"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://amlshield.sbs/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 29 Jun 2026 01:11:21 GMT\r\ndate: Mon, 29 Jun 2026 01:11:21 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4887,"size_decoded":1390,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3fd96ba77783845730c343cf00ac7a93","sha1":"bc4f7f4f71aeae387232155c55c4f031c5f3f769","sha256":"27b95b2fcbc857ba25f7e5a707c5c4c06c5cf93415519b7669c19f4045edca37","sha512":"20b137cf9c61842c7bad62dd6c36125833022552379ad97324dbee2c2e9cb0303b17a9aee813ea2bcdbb68541c8c6edbfecfcfb2858cf27c2cff480d756d80cd","ssdeep":"96:aYg4aMzqYg4aybFZHYg4agkYg4aUJ3vYg4aERYg4aYGJc+uTYg4aR6NDO4a3qO4L:vywfydyGy63gy/yFVyR73xpmj3U8fHN","tlshash":"37a1ed91006f9104ea431dd627cf7e32ad8e51956082e27d6ffd2dca6cdbd23122874c","first_seen":"2025-09-10T21:50:06.177565Z","last_seen":"2026-06-29T19:36:10.509861Z","times_seen":18263,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":5,"connect":16,"send":0,"wait":36,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlshield.sbs/favicon.ico","fqdn":"amlshield.sbs","domain":"amlshield.sbs","tld":"sbs"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlshield.sbs/","date":"2026-06-29T01:11:21.794Z","timestamp":1782695481794,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlshield.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 May 2026 00:15:36 GMT","end":"Sat, 08 Aug 2026 01:15:30 GMT"},"fingerprint":{"sha1":"81:8F:62:FB:5F:2D:B9:AD:FF:03:90:72:D6:D9:E9:14:30:F1:29:AF","sha256":"A8:BE:1B:27:36:26:7C:83:AA:11:88:C4:63:53:A0:7D:A3:22:36:14:1C:A8:C1:5D:F3:1B:00:F4:A4:78:11:B8"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: amlshield.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://amlshield.sbs/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=tYLUKeXFTib6_GxlJvZkTVJ_2v7vmMcyU4tbXU9ER.0-1782695479.537125-1.0.1.1-I7E1ybdSvJlXfUERCozV8lAhLc5Q8jQskCuzcZneAeWHfHwrDjeLNlYQXg_x7ZR_qNi2IneU7LY3ND1j3M0jaa1PxgiruIv_n92iNvxJog5Wa8rYDOGRS2PUaUsVX6YB; session-id=be7dc146-7b5a-44a3-8963-d964a1b7efbe\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 01:11:21 GMT\r\ncontent-type: image/x-icon\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"566e64364d6957715dc11845f4800700\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a1310e893e5ab4eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7645,"size_decoded":8033,"mime_type":"image/x-icon","magic":"PNG image data, 73 x 74, 8-bit/color RGBA, non-interlaced","md5":"566e64364d6957715dc11845f4800700","sha1":"db98fcaaf06be921ed2b8f25ac80f0add9f4a787","sha256":"29a40d56580a5366083461297773dbf146ec043d1156f432f5472cb3487f506b","sha512":"d93824f3088a249625d0bbb64a99d1e320aa4e375ceea0205c961de73d04c635c97a7788865260e3ca13aba38a8dd95435f2183869f17a41afd4ee7d9364bc74","ssdeep":"192:NUNBikqtkfu6b+DkwFy3/0sRmz4fL5AHtHyhaFg63/:uNkkdfakwFy3/Xk6lepy6P","tlshash":"40f19e9f7f833802d90c95bf5492c75189c9d5551558c23fb0fd6132acaf5d3629f085","first_seen":"2025-05-20T14:46:56.545075Z","last_seen":"2026-06-29T09:06:28.982634Z","times_seen":1748,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/3386dde1-8b24-48c8-4b81-16979e342000?projectId=0f73abda9e52befa3057387fbfbab07a\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlshield.sbs/","date":"2026-06-29T01:11:21.802Z","timestamp":1782695481802,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 04:16:36 GMT","end":"Wed, 02 Sep 2026 05:16:25 GMT"},"fingerprint":{"sha1":"DC:D0:F7:32:00:90:71:77:19:17:82:23:72:AF:55:89:00:14:EB:BA","sha256":"FE:88:1B:93:AC:1B:71:AB:36:AD:D8:5C:FB:D5:69:2B:08:AA:96:B8:CF:3B:C0:A4:52:8F:C1:32:3F:7D:8B:AD"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/3386dde1-8b24-48c8-4b81-16979e342000?projectId=0f73abda9e52befa3057387fbfbab07a\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://amlshield.sbs/\r\nOrigin: https://amlshield.sbs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\ndate: Mon, 29 Jun 2026 01:11:21 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a1310e895f56b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 83\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfEA-Bw7H9k1gZltgcL-Suew9FfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: accept\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=19+14 c=1+12 v=2026.3.1 l=1682 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\ncontent-length: 1682\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1682,"size_decoded":2395,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"12fd7a0bbecec898caf25744ceae7549","sha1":"d4e4685c48987c850c780fd8e99de426fb5b19e8","sha256":"fdd5b72b8c65c37fd0db1c494691dc35794639a66ae8c11240def16c07d6e2ac","sha512":"08feddd7bab4b6b6135ba61fc3f12c7f4df27802d2357d1999ccf0dc17874f3d0a6b43368301389885f21a92273a41b420b729e408c2695d5becfbb8ddd5da8e","ssdeep":"","tlshash":"b8311a477584218d4283591bdbf086459953cc1b4b1c6123c11425b249a95731ee13dc","first_seen":"2025-02-27T06:37:34.817516Z","last_seen":"2026-06-29T01:11:54.604814Z","times_seen":1086,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":10,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dontclickthislink.lol/api/crypto/settings/?chain=1","fqdn":"dontclickthislink.lol","domain":"dontclickthislink.lol","tld":"lol"},"ip":{"addr":"172.67.174.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://amlshield.sbs/","date":"2026-06-29T01:11:21.815Z","timestamp":1782695481815,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dontclickthislink.lol","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 May 2026 17:03:24 GMT","end":"Sat, 29 Aug 2026 17:03:23 GMT"},"fingerprint":{"sha1":"58:7F:A4:75:56:85:3B:A9:1E:7D:47:D5:F8:A9:12:A7:42:81:76:55","sha256":"60:35:25:B3:BB:FF:8B:0C:67:3B:14:89:46:90:20:B0:9B:9E:48:2A:71:DD:6B:BF:A8:94:8F:8D:DE:D1:9E:49"}}},"request":{"raw":"GET /api/crypto/settings/?chain=1 HTTP/1.1\r\nHost: dontclickthislink.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://amlshield.sbs/\r\nContent-Type: application/json\r\nOrigin: https://amlshield.sbs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 01:11:22 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5glrn3bGU0V4sf2YvoAmLDg6urWbUTorifH%2F%2BXxuM1JvipoWvM3%2B65rg9h%2Fe6mHiFgQ3YGnlWHtpUJ9BYibxKW2tOJi81RsWCbOp4hpBAAzTl9FE2%2BSKMpj7JE%2FnJh4VIPwzmDrBPew%3D\"}]}\r\npriority: u=4,i=?0\r\nvary: Accept, origin\r\nallow: GET, HEAD, OPTIONS\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a1310e8a1efc56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56,"size_decoded":869,"mime_type":"application/json","magic":"JSON text data","md5":"513b4456c562ce3a95068b798cd1fba3","sha1":"21c8c7d6451a98c9a69f159e4a45ec91c605b720","sha256":"143d14fb5fc2902f219aabb183ef8a6269f7d84bd392ce464e09b801a5a66488","sha512":"1074eb1747b69768fda197eb766ed8d1d13a73c098dfeaa864dad78ac38512f7e2a2583bcbbabc6a0d3744ff59f621a4787e71e95f556a17727ee5e76384bf98","ssdeep":"","tlshash":"0990029a16c7655b64a114a649a48c0500d58f88805d37561a1e915615b86e96603605","first_seen":"2026-04-28T13:42:24.60913Z","last_seen":"2026-06-29T01:11:54.60533Z","times_seen":8,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tonapi.io/v2/blockchain/accounts/UQCY3tYl7cbAHYruuv2Rh0YlnxjQ0dsFkK9PO_LISlZTIf1o/transactions","fqdn":"tonapi.io","domain":"tonapi.io","tld":"io"},"ip":{"addr":"172.64.153.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://amlshield.sbs/","date":"2026-06-29T01:11:21.469Z","timestamp":1782695481469,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tonapi.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 May 2026 08:48:07 GMT","end":"Sat, 01 Aug 2026 09:48:03 GMT"},"fingerprint":{"sha1":"DC:A7:43:C5:B8:6F:D4:E7:7E:34:87:5E:DD:CA:AB:41:91:01:C9:98","sha256":"C9:70:45:51:7F:1E:79:8B:3E:40:EB:5D:73:95:35:75:1D:7E:E9:B0:79:32:F7:85:AA:9A:75:59:D7:0D:9A:C4"}}},"request":{"raw":"GET /v2/blockchain/accounts/UQCY3tYl7cbAHYruuv2Rh0YlnxjQ0dsFkK9PO_LISlZTIf1o/transactions HTTP/1.1\r\nHost: tonapi.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://amlshield.sbs/\r\nOrigin: https://amlshield.sbs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 29 Jun 2026 01:11:21 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: https://amlshield.sbs\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,X-Tonapi-Client,X-Capability,F\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncf-ray: a1310e87caec0b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21843,"size_decoded":6010,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"52edef585c67b093a0c5c0f735e32ad5","sha1":"c53e34e8023bcbf0f4f7e81f9dd26f32c2498dee","sha256":"dec2d63c6acdb2eaa3c1fe69803750e17d518096db06e88268e996e497ab0ccf","sha512":"bbf998eade0d90a18b79dc7551fbf9e2055fc980b45ec0e93678cb87a2f47305f645ae02e27cc9970ee60609375164d485c6634c40ec372beb51be838165f6d1","ssdeep":"192:9vK1DpVNvECrhp84rvC3KWNh0BRv93R9P9mSOZqp7kP4R9oR5u21ePCvCGRD/7BT:Up8uh9vp7kPork7BuGAruF/c90kK9L","tlshash":"5fa2f9206798b5f7cb7f9501159f3e9722bc30bbd8c37c959aecc6941fa31ae6812105","first_seen":"2026-04-09T04:56:28.146792Z","last_seen":"2026-06-29T01:11:54.605882Z","times_seen":12,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":84,"dns":0,"connect":10,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlshield.sbs/","fqdn":"amlshield.sbs","domain":"amlshield.sbs","tld":"sbs"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-29T01:11:19.444Z","timestamp":1782695479444,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlshield.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 May 2026 00:15:36 GMT","end":"Sat, 08 Aug 2026 01:15:30 GMT"},"fingerprint":{"sha1":"81:8F:62:FB:5F:2D:B9:AD:FF:03:90:72:D6:D9:E9:14:30:F1:29:AF","sha256":"A8:BE:1B:27:36:26:7C:83:AA:11:88:C4:63:53:A0:7D:A3:22:36:14:1C:A8:C1:5D:F3:1B:00:F4:A4:78:11:B8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: amlshield.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 01:11:19 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, must-revalidate, max-age=0\r\nset-cookie: __cf_bm=tYLUKeXFTib6_GxlJvZkTVJ_2v7vmMcyU4tbXU9ER.0-1782695479.537125-1.0.1.1-I7E1ybdSvJlXfUERCozV8lAhLc5Q8jQskCuzcZneAeWHfHwrDjeLNlYQXg_x7ZR_qNi2IneU7LY3ND1j3M0jaa1PxgiruIv_n92iNvxJog5Wa8rYDOGRS2PUaUsVX6YB; HttpOnly; SameSite=None; Secure; Path=/; Domain=amlshield.sbs; Expires=Mon, 29 Jun 2026 01:41:19 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a1310e7b1832b4eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3850,"size_decoded":2397,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (888)","md5":"a694dfa58680e32aad97d8fe9d04e061","sha1":"19bd1cd51139cbb37426ee3cefd5f7a6ee666407","sha256":"71716cc66ffaf871e5f51f29b8a7bb08a72fd1a134187e7562aa6c1fc2ca9891","sha512":"100af65dd344e82ff80cd06146c8ffa04009122694453372d59d21176a5b1a7cb2e399b027682aa0adb0a55b1cb6522ce970978f668d97f265b9524f2d49b914","ssdeep":"","tlshash":"4a8187630ddc98444224d91adde2f508186d927f9a8b4f58b5ac58bf3fd6ad0c4e760c","first_seen":"2026-06-29T01:11:54.60641Z","last_seen":"2026-06-29T01:11:54.60641Z","times_seen":1,"resource_available":true,"data":null}},"time_used":352,"timings":{"blocked":-1,"dns":64,"connect":1,"send":0,"wait":266,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlshield.sbs/assets/code.js","fqdn":"amlshield.sbs","domain":"amlshield.sbs","tld":"sbs"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlshield.sbs/","date":"2026-06-29T01:11:20.064Z","timestamp":1782695480064,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlshield.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 May 2026 00:15:36 GMT","end":"Sat, 08 Aug 2026 01:15:30 GMT"},"fingerprint":{"sha1":"81:8F:62:FB:5F:2D:B9:AD:FF:03:90:72:D6:D9:E9:14:30:F1:29:AF","sha256":"A8:BE:1B:27:36:26:7C:83:AA:11:88:C4:63:53:A0:7D:A3:22:36:14:1C:A8:C1:5D:F3:1B:00:F4:A4:78:11:B8"}}},"request":{"raw":"GET /assets/code.js HTTP/1.1\r\nHost: amlshield.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://amlshield.sbs/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=tYLUKeXFTib6_GxlJvZkTVJ_2v7vmMcyU4tbXU9ER.0-1782695479.537125-1.0.1.1-I7E1ybdSvJlXfUERCozV8lAhLc5Q8jQskCuzcZneAeWHfHwrDjeLNlYQXg_x7ZR_qNi2IneU7LY3ND1j3M0jaa1PxgiruIv_n92iNvxJog5Wa8rYDOGRS2PUaUsVX6YB\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 01:11:20 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=300, stale-while-revalidate=86400\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"d6491a556592b4237cc777faf2da3226\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a1310e7e69aeb4eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2096,"size_decoded":1354,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2059), with no line terminators","md5":"d6491a556592b4237cc777faf2da3226","sha1":"5c7545e329e35d440736b1cb79e6a23d69926c8e","sha256":"c3845dd46930f5bd92453bb833bc371c6bc45521ef1ca9f29c71a24a0c268bca","sha512":"eecf7abf9caf9e7e68ab3c1e8382ff17ce8e004fd99d563ceff37f8304f29e92cddbc9ea92a267c3cb26829c968e48e4ee125d4fb74dd5d11c5af1ce3862408e","ssdeep":"","tlshash":"1f417d182f9065e863e22fd7052b19c5e146c86d7490008bb115fff07e98965f693f76","first_seen":"2026-06-29T01:10:32.984419Z","last_seen":"2026-06-29T01:11:54.607389Z","times_seen":2,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-06-29","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"amlshield.sbs/assets/code.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getAllListings?projectId=0f73abda9e52befa3057387fbfbab07a\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0\u0026recommendedIds=4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0%2C20459438007b75f4f4acb98bf29aa3b800550309646d375da5fd4aac6c2a2c66%2C0b415a746fb9ee99cce155c2ceca0c6f6061b1dbca2d722b3ba16381d0562150%2C8a0ee50d1f22f6651afcae7eb4253e52a3310b90af5daef78a8c4929a9bb99d4%2Cfbea6f68df4e6ce163c144df86da89f24cb244f19b53903e26aea9ab7de6393c","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://amlshield.sbs/","date":"2026-06-29T01:11:21.487Z","timestamp":1782695481487,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 04:16:36 GMT","end":"Wed, 02 Sep 2026 05:16:25 GMT"},"fingerprint":{"sha1":"DC:D0:F7:32:00:90:71:77:19:17:82:23:72:AF:55:89:00:14:EB:BA","sha256":"FE:88:1B:93:AC:1B:71:AB:36:AD:D8:5C:FB:D5:69:2B:08:AA:96:B8:CF:3B:C0:A4:52:8F:C1:32:3F:7D:8B:AD"}}},"request":{"raw":"GET /w3m/v1/getAllListings?projectId=0f73abda9e52befa3057387fbfbab07a\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0\u0026recommendedIds=4622a2b2d6af1c9844944291e5e7351a6aa24cd7b23099efac1b2fd875da31a0%2C20459438007b75f4f4acb98bf29aa3b800550309646d375da5fd4aac6c2a2c66%2C0b415a746fb9ee99cce155c2ceca0c6f6061b1dbca2d722b3ba16381d0562150%2C8a0ee50d1f22f6651afcae7eb4253e52a3310b90af5daef78a8c4929a9bb99d4%2Cfbea6f68df4e6ce163c144df86da89f24cb244f19b53903e26aea9ab7de6393c HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://amlshield.sbs/\r\nOrigin: https://amlshield.sbs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 01:11:21 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncf-ray: a1310e87be27b512-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 84\r\ncache-control: public, max-age=2592000, s-maxage=86400\r\nlast-modified: Mon, 29 Jun 2026 01:09:57 GMT\r\nserver: cloudflare\r\nx-robots-tag: noindex\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4691,"size_decoded":1740,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9feb0f3b8ab4d14f774278d43db5b34d","sha1":"abf38dee1009cadb8d4f561b77ff5df5ff65b96e","sha256":"e3adb82135d23427cd75815f887f55d0d41af4a4f5f8a41041a94d09e3471696","sha512":"0190a5350e3ed28be25ca3e28d7e9e50ae9393e363f1062a366b3d1d9e97838b824a4cc644d19fd00754264be3ae78308a79df53e6101e3a9f30db26d5c89fe2","ssdeep":"96:nNSNbh/YiOA959Jw52te72WFMVMrhIa1WUIjls7/dVbqb+OhMEBcE9hX9hc1wWZv:8OAfvTDbU67rc5fn","tlshash":"36a145bb4f908f6e1f2007c5701d3a9c665f240bd7c46ce2f1808f6d80e9af66662562","first_seen":"2026-02-03T09:22:06.551258Z","last_seen":"2026-06-29T01:11:54.608908Z","times_seen":13,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":65,"dns":0,"connect":1,"send":0,"wait":54,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dontclickthislink.lol/api/users/domains/visits/?","fqdn":"dontclickthislink.lol","domain":"dontclickthislink.lol","tld":"lol"},"ip":{"addr":"172.67.174.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://amlshield.sbs/","date":"2026-06-29T01:11:21.800Z","timestamp":1782695481800,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dontclickthislink.lol","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 May 2026 17:03:24 GMT","end":"Sat, 29 Aug 2026 17:03:23 GMT"},"fingerprint":{"sha1":"58:7F:A4:75:56:85:3B:A9:1E:7D:47:D5:F8:A9:12:A7:42:81:76:55","sha256":"60:35:25:B3:BB:FF:8B:0C:67:3B:14:89:46:90:20:B0:9B:9E:48:2A:71:DD:6B:BF:A8:94:8F:8D:DE:D1:9E:49"}}},"request":{"raw":"POST /api/users/domains/visits/? HTTP/1.1\r\nHost: dontclickthislink.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://amlshield.sbs/\r\nContent-Type: application/json\r\nContent-Length: 43\r\nOrigin: https://amlshield.sbs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 01:11:22 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept, origin\r\nallow: GET, POST, HEAD, OPTIONS\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OhYz4TamtoSGakAvSN%2Bnt9PdjOG%2B%2F1jT5FGiPqlg%2FzhkUI95lchO8jlDKZ%2BP6ArXFTJD9eVrILCQAAuRUaGPej%2Bw%2FE25u%2FSLk5L1WZgC9wUVMgVbKtCOoN7mxFxFclBiqZgN7s6vHeg%3D\"}]}\r\ncontent-length: 16\r\ncf-ray: a1310e89fefb56c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":826,"mime_type":"application/json","magic":"JSON text data","md5":"9dfec0b7b34869a4bb6c5e030d9f6bc4","sha1":"76e1558c8d698fab1c9f350e2350b4d40c5951f1","sha256":"56587cffbb30e338497c9114f74803a530a713ebe374b69fcfa8551ad8dad1e9","sha512":"6857c3701190d054e551f288aca1e6c121392a4745448a01d62c80472e39cf2d3e9b52e2d19a2c8550f629a6b602fed77adb1ddf1aae03b9110a25dce3ac6ffd","ssdeep":"","tlshash":"9e600022000208208088008202202a228080203000002080000aa00880228000008002","first_seen":"2023-04-06T07:36:31Z","last_seen":"2026-06-29T01:11:54.609706Z","times_seen":563,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":355,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/7c2cee4e-a5bd-4ebd-277d-f496c69fa000?projectId=0f73abda9e52befa3057387fbfbab07a\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlshield.sbs/","date":"2026-06-29T01:11:21.804Z","timestamp":1782695481804,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 04:16:36 GMT","end":"Wed, 02 Sep 2026 05:16:25 GMT"},"fingerprint":{"sha1":"DC:D0:F7:32:00:90:71:77:19:17:82:23:72:AF:55:89:00:14:EB:BA","sha256":"FE:88:1B:93:AC:1B:71:AB:36:AD:D8:5C:FB:D5:69:2B:08:AA:96:B8:CF:3B:C0:A4:52:8F:C1:32:3F:7D:8B:AD"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/7c2cee4e-a5bd-4ebd-277d-f496c69fa000?projectId=0f73abda9e52befa3057387fbfbab07a\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://amlshield.sbs/\r\nOrigin: https://amlshield.sbs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\ndate: Mon, 29 Jun 2026 01:11:21 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a1310e895f55b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 83\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cf9e6rjyr-bBkWoPuSw_vsUwKifmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: accept\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=10+3 c=1+2 v=2026.4.0 l=1508 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\ncontent-length: 1508\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1508,"size_decoded":2219,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9e8857769972441243d690548cf3e485","sha1":"38328c4d250c38d98763e7b89cfeca1b3b7bb2c2","sha256":"7e7be8edd769cd0ee13580176c51f034867846e592e3434e4b0f30f2cc8b709b","sha512":"121207c756badb363bc86cc8c09ab16965dd26c89d151bc25bdaf3cc106621ab5eed1ef14618394595d80309e2b322e853b20a0f55baada496a60aade841a670","ssdeep":"","tlshash":"7231b59e09441c24511aaaff2ccaa4ab32b5249268afd635c30b5ae6a65454d383f1c8","first_seen":"2025-10-02T02:13:48.566179Z","last_seen":"2026-06-29T01:11:54.610238Z","times_seen":573,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/2e181ba3-bf6f-4599-5349-f7409bc62100?projectId=0f73abda9e52befa3057387fbfbab07a\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlshield.sbs/","date":"2026-06-29T01:11:21.813Z","timestamp":1782695481813,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 04:16:36 GMT","end":"Wed, 02 Sep 2026 05:16:25 GMT"},"fingerprint":{"sha1":"DC:D0:F7:32:00:90:71:77:19:17:82:23:72:AF:55:89:00:14:EB:BA","sha256":"FE:88:1B:93:AC:1B:71:AB:36:AD:D8:5C:FB:D5:69:2B:08:AA:96:B8:CF:3B:C0:A4:52:8F:C1:32:3F:7D:8B:AD"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/2e181ba3-bf6f-4599-5349-f7409bc62100?projectId=0f73abda9e52befa3057387fbfbab07a\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://amlshield.sbs/\r\nOrigin: https://amlshield.sbs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\ndate: Mon, 29 Jun 2026 01:11:21 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a1310e895f59b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 83\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfx8sZ_gQjxblo6S9ktOMr7R0BfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=26+4 c=1+2 v=2025.2.4 l=520 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'\r\ncontent-length: 520\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520,"size_decoded":1186,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"22c97b9c571498a31f52c5b262ba0a8f","sha1":"b28e5ef85b5bfed3fe034611dc208590c6af7d7b","sha256":"aba7699c972ec5e808625798c34ecb0e8017768cfdc5852bd13e94b7664c253c","sha512":"8ffec6e75b574d13b5a3a70ffd27763bf26f024ebb7ed5738015abdf7176f7aebe37442bb8e82177969c72b622e2bbc4e5a9593a85fa59689d0e02ed301d5ed4","ssdeep":"","tlshash":"a1f0059de63d010eda77072c6b53951318d62a65b027924c345d4c02528dfecbbecbd3","first_seen":"2025-12-31T16:29:42.661268Z","last_seen":"2026-06-29T01:11:54.610731Z","times_seen":25,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlshield.sbs/assets/index-CxVOGdN3.js","fqdn":"amlshield.sbs","domain":"amlshield.sbs","tld":"sbs"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlshield.sbs/","date":"2026-06-29T01:11:20.053Z","timestamp":1782695480053,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlshield.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 May 2026 00:15:36 GMT","end":"Sat, 08 Aug 2026 01:15:30 GMT"},"fingerprint":{"sha1":"81:8F:62:FB:5F:2D:B9:AD:FF:03:90:72:D6:D9:E9:14:30:F1:29:AF","sha256":"A8:BE:1B:27:36:26:7C:83:AA:11:88:C4:63:53:A0:7D:A3:22:36:14:1C:A8:C1:5D:F3:1B:00:F4:A4:78:11:B8"}}},"request":{"raw":"GET /assets/index-CxVOGdN3.js HTTP/1.1\r\nHost: amlshield.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://amlshield.sbs/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=tYLUKeXFTib6_GxlJvZkTVJ_2v7vmMcyU4tbXU9ER.0-1782695479.537125-1.0.1.1-I7E1ybdSvJlXfUERCozV8lAhLc5Q8jQskCuzcZneAeWHfHwrDjeLNlYQXg_x7ZR_qNi2IneU7LY3ND1j3M0jaa1PxgiruIv_n92iNvxJog5Wa8rYDOGRS2PUaUsVX6YB\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 01:11:20 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"92a11eff0071f351342784f60f2dd319\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a1310e7e59a1b4eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":340316,"size_decoded":106655,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (37534)","md5":"92a11eff0071f351342784f60f2dd319","sha1":"90c2c6550348b3b1748e599af30e71bcb403729a","sha256":"83dfe0628bbe699387107060a6bff9a72c2d68db0592ddd74950e6223a3c12e5","sha512":"1bca7107335a3ecbcaf14add9a47b242c69e20f3a76adf57d23f42411e1c07598441a2b01bb57b9917c9b914ba83a1e050f29a4252d4a8fa8fdb6f9fac5f0a74","ssdeep":"6144:2Y4v5154hNdyAJpc2MU3go5oUQi/MWQ7kAXqYJtyFsYnK:6+hNpO2MU3go5olD7knYJtbYnK","tlshash":"35746dd8305ab575abb346a2807f411a733d2916780d4420b03cedae77b1549a2bbffd","first_seen":"2026-06-29T01:10:32.981653Z","last_seen":"2026-06-29T01:11:54.611518Z","times_seen":2,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlshield.sbs/~flock.js","fqdn":"amlshield.sbs","domain":"amlshield.sbs","tld":"sbs"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlshield.sbs/","date":"2026-06-29T01:11:20.061Z","timestamp":1782695480061,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlshield.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 May 2026 00:15:36 GMT","end":"Sat, 08 Aug 2026 01:15:30 GMT"},"fingerprint":{"sha1":"81:8F:62:FB:5F:2D:B9:AD:FF:03:90:72:D6:D9:E9:14:30:F1:29:AF","sha256":"A8:BE:1B:27:36:26:7C:83:AA:11:88:C4:63:53:A0:7D:A3:22:36:14:1C:A8:C1:5D:F3:1B:00:F4:A4:78:11:B8"}}},"request":{"raw":"GET /~flock.js HTTP/1.1\r\nHost: amlshield.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://amlshield.sbs/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=tYLUKeXFTib6_GxlJvZkTVJ_2v7vmMcyU4tbXU9ER.0-1782695479.537125-1.0.1.1-I7E1ybdSvJlXfUERCozV8lAhLc5Q8jQskCuzcZneAeWHfHwrDjeLNlYQXg_x7ZR_qNi2IneU7LY3ND1j3M0jaa1PxgiruIv_n92iNvxJog5Wa8rYDOGRS2PUaUsVX6YB\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 01:11:20 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: max-age=1500\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a1310e7e69a9b4eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21296,"size_decoded":8697,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21296), with no line terminators","md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-06-29T19:39:55.039393Z","times_seen":12086,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlshield.sbs/__l5e/events.js","fqdn":"amlshield.sbs","domain":"amlshield.sbs","tld":"sbs"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlshield.sbs/","date":"2026-06-29T01:11:20.063Z","timestamp":1782695480063,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlshield.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 May 2026 00:15:36 GMT","end":"Sat, 08 Aug 2026 01:15:30 GMT"},"fingerprint":{"sha1":"81:8F:62:FB:5F:2D:B9:AD:FF:03:90:72:D6:D9:E9:14:30:F1:29:AF","sha256":"A8:BE:1B:27:36:26:7C:83:AA:11:88:C4:63:53:A0:7D:A3:22:36:14:1C:A8:C1:5D:F3:1B:00:F4:A4:78:11:B8"}}},"request":{"raw":"GET /__l5e/events.js HTTP/1.1\r\nHost: amlshield.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://amlshield.sbs/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=tYLUKeXFTib6_GxlJvZkTVJ_2v7vmMcyU4tbXU9ER.0-1782695479.537125-1.0.1.1-I7E1ybdSvJlXfUERCozV8lAhLc5Q8jQskCuzcZneAeWHfHwrDjeLNlYQXg_x7ZR_qNi2IneU7LY3ND1j3M0jaa1PxgiruIv_n92iNvxJog5Wa8rYDOGRS2PUaUsVX6YB\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 01:11:20 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncache-control: no-store\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a1310e7e69acb4eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44148,"size_decoded":9969,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (356)","md5":"4984c751409f378613ce4a697469eb54","sha1":"db702076417754abd5497526bb2d4326d3fc9594","sha256":"48b09309d5c937dcd3d62ffd10b47d9d4ed5926f6b96cdcdefa63099e84818fa","sha512":"32420a4ba8bc56dadddd982b9bb39cd56fc15249f7a6962f0f606a84681be20e5006554354eb317c0b5f44fa495a08a5ccffb42abbd8bdeeb4febb6530d6e393","ssdeep":"768:5+rVEje/DCjA89Huk/sk4S58W45XKxNAOtXVltoaSeSzc4R4jgcFykJ8X/cpCgAd:5buk/sk4S6etgYrXBfOVEkZovhfi7","tlshash":"aa13728878f714a30163917e5b9b810236349587354adfa4beac4d0a2fcd658e6f3fc9","first_seen":"2026-06-16T13:38:26.366748Z","last_seen":"2026-06-29T20:05:19.007219Z","times_seen":1231,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/4e7d6f52-f663-4fc1-4b88-eebe7fc72800?projectId=0f73abda9e52befa3057387fbfbab07a\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlshield.sbs/","date":"2026-06-29T01:11:21.806Z","timestamp":1782695481806,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 04:16:36 GMT","end":"Wed, 02 Sep 2026 05:16:25 GMT"},"fingerprint":{"sha1":"DC:D0:F7:32:00:90:71:77:19:17:82:23:72:AF:55:89:00:14:EB:BA","sha256":"FE:88:1B:93:AC:1B:71:AB:36:AD:D8:5C:FB:D5:69:2B:08:AA:96:B8:CF:3B:C0:A4:52:8F:C1:32:3F:7D:8B:AD"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/4e7d6f52-f663-4fc1-4b88-eebe7fc72800?projectId=0f73abda9e52befa3057387fbfbab07a\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://amlshield.sbs/\r\nOrigin: https://amlshield.sbs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\ndate: Mon, 29 Jun 2026 01:11:21 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a1310e895f58b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 83\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfwVowhypScApAcmoeznMTkZRzfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: accept\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=8+0 c=0+1 v=2026.4.6 l=1638 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\ncontent-length: 1638\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1638,"size_decoded":2348,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0ccfb2325173637f538577b4cad23f43","sha1":"70060aadb98e9a950fb797ae0105460d184d7236","sha256":"b655ab554ceb7219eb8702f830dc7edd8492194e06eddcf2ccbea5fe180d2518","sha512":"ada7b30dcb5f784d6feb476033ccb6b435aa8c250bcf596b27372354594d7ffeeeb0d2dc9e5f2c322a4da07925dfee2c97239a9dcd0fc227145f8414e5794242","ssdeep":"","tlshash":"1e310a85ed51fd0e6fc02af8a8039d3500b5d802f51f05e9eea53891d7646f2107be98","first_seen":"2025-01-28T05:59:32.012212Z","last_seen":"2026-06-29T01:11:54.613109Z","times_seen":1174,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"explorer-api.walletconnect.com/w3m/v1/getWalletImage/3d7eb880-7654-431f-ed84-a25712b45200?projectId=0f73abda9e52befa3057387fbfbab07a\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0","fqdn":"explorer-api.walletconnect.com","domain":"walletconnect.com","tld":"com"},"ip":{"addr":"172.66.147.126","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlshield.sbs/","date":"2026-06-29T01:11:21.807Z","timestamp":1782695481807,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Jun 2026 04:16:36 GMT","end":"Wed, 02 Sep 2026 05:16:25 GMT"},"fingerprint":{"sha1":"DC:D0:F7:32:00:90:71:77:19:17:82:23:72:AF:55:89:00:14:EB:BA","sha256":"FE:88:1B:93:AC:1B:71:AB:36:AD:D8:5C:FB:D5:69:2B:08:AA:96:B8:CF:3B:C0:A4:52:8F:C1:32:3F:7D:8B:AD"}}},"request":{"raw":"GET /w3m/v1/getWalletImage/3d7eb880-7654-431f-ed84-a25712b45200?projectId=0f73abda9e52befa3057387fbfbab07a\u0026sdkType=wcm\u0026sdkVersion=js-2.7.0 HTTP/1.1\r\nHost: explorer-api.walletconnect.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://amlshield.sbs/\r\nOrigin: https://amlshield.sbs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\ndate: Mon, 29 Jun 2026 01:11:21 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a1310e895f57b517-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 83\r\ncache-control: public, max-age=31536000, s-maxage=86400\r\netag: \"cfepCHWB1qkSi-cNd1o8wsvD9BfmDcyauXnchu_YTSDQ\"\r\nserver: cloudflare\r\nvary: Accept\r\nx-wc-r2-status: HIT\r\ncf-images: internal=ok/- q=0 n=37+4 c=0+4 v=2026.2.12 l=2176 f=false c2=0\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:;\r\ncontent-length: 2176\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2176,"size_decoded":2861,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7b91b6e5024dfdf6e8a4d61f0f74dd13","sha1":"1614f764ed7b516c7768fae0966abab152ac7d1b","sha256":"00e34844a07301274fc65fdbb65891aa95436b94c4c860d9edfcb96331c5487f","sha512":"c3948fdb40f0f4154fce632acb88cf9cf57ce39d2858e4934d8820c4d5729da238c569448b5bcb6d1780e37f005cb9f5ed60093005cfa451a92270c4c0034566","ssdeep":"","tlshash":"48413ab2c3378c72ce2cb5e3e9b2d5168b449a5a91859afc22413d33a4b145cc4b89e4","first_seen":"2025-01-28T05:59:32.007883Z","last_seen":"2026-06-29T01:11:54.613597Z","times_seen":3038,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dontclickthislink.lol/api/users/domains/visits/?","fqdn":"dontclickthislink.lol","domain":"dontclickthislink.lol","tld":"lol"},"ip":{"addr":"172.67.174.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://amlshield.sbs/","date":"2026-06-29T01:11:21.817Z","timestamp":1782695481817,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dontclickthislink.lol","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 May 2026 17:03:24 GMT","end":"Sat, 29 Aug 2026 17:03:23 GMT"},"fingerprint":{"sha1":"58:7F:A4:75:56:85:3B:A9:1E:7D:47:D5:F8:A9:12:A7:42:81:76:55","sha256":"60:35:25:B3:BB:FF:8B:0C:67:3B:14:89:46:90:20:B0:9B:9E:48:2A:71:DD:6B:BF:A8:94:8F:8D:DE:D1:9E:49"}}},"request":{"raw":"OPTIONS /api/users/domains/visits/? HTTP/1.1\r\nHost: dontclickthislink.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://amlshield.sbs/\r\nOrigin: https://amlshield.sbs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 01:11:21 GMT\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: accept, authorization, content-type, user-agent, x-csrftoken, x-requested-with, ngrok-skip-browser-warning, referer, sec-ch-ua, sec-ch-ua-mobile, sec-ch-ua-platform, CF-Visitor, CF-IPCountry, X-Forwarded-Proto, CF-Connecting-IP, X-Forwarded-For, CF-RAY, Strict-Transport-Security\r\naccess-control-allow-methods: DELETE, GET, OPTIONS, PATCH, POST, PUT\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iR%2FVIjgI8p7HldSsi2ekJzrV78ZGyf8hnpNHZZpnld7gBsT8dfSrjaAtjQGnoABKVjQwCgHDQA%2FqcSh5faW35CxhDOIigwwICF46MoXzHyRFYhdg8NBRtdOfQg7XXdTebIzuraQE624%3D\"}]}\r\ncf-ray: a1310e898ef856c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1030,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-29T20:32:15.499955Z","times_seen":16835046,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":20,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlshield.sbs/assets/index-Ddg3ms6q.js","fqdn":"amlshield.sbs","domain":"amlshield.sbs","tld":"sbs"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlshield.sbs/","date":"2026-06-29T01:11:20.066Z","timestamp":1782695480066,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlshield.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 May 2026 00:15:36 GMT","end":"Sat, 08 Aug 2026 01:15:30 GMT"},"fingerprint":{"sha1":"81:8F:62:FB:5F:2D:B9:AD:FF:03:90:72:D6:D9:E9:14:30:F1:29:AF","sha256":"A8:BE:1B:27:36:26:7C:83:AA:11:88:C4:63:53:A0:7D:A3:22:36:14:1C:A8:C1:5D:F3:1B:00:F4:A4:78:11:B8"}}},"request":{"raw":"GET /assets/index-Ddg3ms6q.js HTTP/1.1\r\nHost: amlshield.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://amlshield.sbs/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=tYLUKeXFTib6_GxlJvZkTVJ_2v7vmMcyU4tbXU9ER.0-1782695479.537125-1.0.1.1-I7E1ybdSvJlXfUERCozV8lAhLc5Q8jQskCuzcZneAeWHfHwrDjeLNlYQXg_x7ZR_qNi2IneU7LY3ND1j3M0jaa1PxgiruIv_n92iNvxJog5Wa8rYDOGRS2PUaUsVX6YB\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 01:11:20 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"48f26fbdda4df41aa231fa45f4924edd\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a1310e7e69b0b4eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6624471,"size_decoded":2690716,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"79e1a18c53c65594408be0b9db3657d8","sha1":"4a652fca19dd653af320d5b18335cb925e223a84","sha256":"8caa6a22778c1fe661004c98567555415114d92fe106ec4b1a9dcedd92ff800e","sha512":"31eb6750d64edf9ed4398c1b013dc122254f06c42218f0499e72c231d2109946ee4a5ee4bb03853a17e6491bb96200d6668da31ab1c43d7ed8b23ae6da058e71","ssdeep":"6144:wSjMwAbZ9ZC0/V+p3mZZ6XRqerKUr4OjsoQPb3EZy49FLZCp0XsL:FMwAPZv+p2H6XRDDr4A4b3ElFLZCCc","tlshash":"42256350c251e9fcda04de11de3ca31c99321b9de6f8b7f026a8f816dd86817286c9f5","first_seen":"2026-06-29T01:10:32.985744Z","last_seen":"2026-06-29T01:11:54.614565Z","times_seen":2,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-06-29","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"amlshield.sbs/assets/index-Ddg3ms6q.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null}},{"url":{"schema":"https","addr":"amlshield.sbs/assets/index-DgfeWB38.js","fqdn":"amlshield.sbs","domain":"amlshield.sbs","tld":"sbs"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlshield.sbs/","date":"2026-06-29T01:11:20.068Z","timestamp":1782695480068,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlshield.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 May 2026 00:15:36 GMT","end":"Sat, 08 Aug 2026 01:15:30 GMT"},"fingerprint":{"sha1":"81:8F:62:FB:5F:2D:B9:AD:FF:03:90:72:D6:D9:E9:14:30:F1:29:AF","sha256":"A8:BE:1B:27:36:26:7C:83:AA:11:88:C4:63:53:A0:7D:A3:22:36:14:1C:A8:C1:5D:F3:1B:00:F4:A4:78:11:B8"}}},"request":{"raw":"GET /assets/index-DgfeWB38.js HTTP/1.1\r\nHost: amlshield.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://amlshield.sbs/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=tYLUKeXFTib6_GxlJvZkTVJ_2v7vmMcyU4tbXU9ER.0-1782695479.537125-1.0.1.1-I7E1ybdSvJlXfUERCozV8lAhLc5Q8jQskCuzcZneAeWHfHwrDjeLNlYQXg_x7ZR_qNi2IneU7LY3ND1j3M0jaa1PxgiruIv_n92iNvxJog5Wa8rYDOGRS2PUaUsVX6YB\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 01:11:20 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"58d5795ba8644b680736df85f9259dbf\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a1310e7e79b6b4eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":244618,"size_decoded":73468,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (22480)","md5":"58d5795ba8644b680736df85f9259dbf","sha1":"482c2e8ee2147664781d8b8d371f4df97641e1e1","sha256":"011fae4ee31abd36ae1144bb8fe45cf5feb44904a9e183782c2f6b666d3e1eef","sha512":"393fe2588745aa795570ec958ce24fdfe36d261d9c1b2432f4c11401178f20c4718c052967b2ea985e23ec49be50bb50cd8b41f2069578bb26aeee258d297903","ssdeep":"6144:veTrFQq1iP2Ne1hKTz9s6Awq8ZX7HPelYr1oUoHhoZCMCXkjaJUjajya:ve3Wq1iP2/ls6Awq8ZX7HPelYFqkjaJr","tlshash":"d634d8402bd0655823178f7bb72771f1f41e28797948c88be1987f2418ae727eaf6970","first_seen":"2026-06-29T01:10:32.987655Z","last_seen":"2026-06-29T01:11:54.615253Z","times_seen":2,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-06-29","alert":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","trigger":"amlshield.sbs/assets/index-DgfeWB38.js","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"@imp0rtp3 (modified by Florian Roth)","date":"2020-09-06","description":"Unique code from Jetriz, Swid \u0026 Jeniva of the Tetris framework","reference":"https://imp0rtp3.wordpress.com/2021/08/12/tetris","rule":"apt_CN_Tetris_JS_advanced_1"}}],"urlquery":null}},{"url":{"schema":"https","addr":"amlshield.sbs/__l5e/trackevents","fqdn":"amlshield.sbs","domain":"amlshield.sbs","tld":"sbs"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://amlshield.sbs/","date":"2026-06-29T01:11:20.501Z","timestamp":1782695480501,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlshield.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 May 2026 00:15:36 GMT","end":"Sat, 08 Aug 2026 01:15:30 GMT"},"fingerprint":{"sha1":"81:8F:62:FB:5F:2D:B9:AD:FF:03:90:72:D6:D9:E9:14:30:F1:29:AF","sha256":"A8:BE:1B:27:36:26:7C:83:AA:11:88:C4:63:53:A0:7D:A3:22:36:14:1C:A8:C1:5D:F3:1B:00:F4:A4:78:11:B8"}}},"request":{"raw":"POST /__l5e/trackevents HTTP/1.1\r\nHost: amlshield.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://amlshield.sbs/\r\nContent-Type: application/json\r\nContent-Length: 3465\r\nOrigin: https://amlshield.sbs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=tYLUKeXFTib6_GxlJvZkTVJ_2v7vmMcyU4tbXU9ER.0-1782695479.537125-1.0.1.1-I7E1ybdSvJlXfUERCozV8lAhLc5Q8jQskCuzcZneAeWHfHwrDjeLNlYQXg_x7ZR_qNi2IneU7LY3ND1j3M0jaa1PxgiruIv_n92iNvxJog5Wa8rYDOGRS2PUaUsVX6YB\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 202 \r\ndate: Mon, 29 Jun 2026 01:11:20 GMT\r\ncontent-type: application/json\r\ncontent-length: 17\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a1310e812abeb4eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17,"size_decoded":338,"mime_type":"application/json","magic":"JSON text data","md5":"1125b91815c32790c1b224791b9d70fc","sha1":"becba42c161d72b4b90cfae9c81fc971e6803870","sha256":"11a49f853eb8befe94fef278d487125cd20930b9e41c4c0934394443e7f00878","sha512":"84bd85e5b348d7d910df3525a8d57ec6da3c8afaae5248e5c4bb81644e56c6c4d052046c4be3c069d9d234b52e24a02dc829cd17a179d3f9fc2a76c735c0e46d","ssdeep":"","tlshash":"e56000022a0008a08080008002002ba28000203000203088c00a200000a28000008002","first_seen":"2025-07-06T07:47:53.239897Z","last_seen":"2026-06-29T19:39:55.109271Z","times_seen":2290,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlshield.sbs/~api/analytics","fqdn":"amlshield.sbs","domain":"amlshield.sbs","tld":"sbs"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://amlshield.sbs/","date":"2026-06-29T01:11:20.561Z","timestamp":1782695480561,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlshield.sbs","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 10 May 2026 00:15:36 GMT","end":"Sat, 08 Aug 2026 01:15:30 GMT"},"fingerprint":{"sha1":"81:8F:62:FB:5F:2D:B9:AD:FF:03:90:72:D6:D9:E9:14:30:F1:29:AF","sha256":"A8:BE:1B:27:36:26:7C:83:AA:11:88:C4:63:53:A0:7D:A3:22:36:14:1C:A8:C1:5D:F3:1B:00:F4:A4:78:11:B8"}}},"request":{"raw":"POST /~api/analytics HTTP/1.1\r\nHost: amlshield.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://amlshield.sbs/\r\nContent-Type: application/json\r\nContent-Length: 334\r\nOrigin: https://amlshield.sbs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=tYLUKeXFTib6_GxlJvZkTVJ_2v7vmMcyU4tbXU9ER.0-1782695479.537125-1.0.1.1-I7E1ybdSvJlXfUERCozV8lAhLc5Q8jQskCuzcZneAeWHfHwrDjeLNlYQXg_x7ZR_qNi2IneU7LY3ND1j3M0jaa1PxgiruIv_n92iNvxJog5Wa8rYDOGRS2PUaUsVX6YB; session-id=be7dc146-7b5a-44a3-8963-d964a1b7efbe\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 01:11:20 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 4\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a1310e818b09b4eb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4,"size_decoded":333,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"f92965e2c8a7afb3c1b9a5c09a263636","sha1":"e9b450d14bc2363d292c84f17cfad5cfbd58a458","sha256":"11a6767d5674c7e45f7e00dc525762275b3a48491ad6045427d2609cc496c516","sha512":"25775ba3c567970fc3df3f8107f2a78a67c5619d54bfb37704423acceec253316949eee77b81100a01b91c742e475b4f6157dd2427a9f9fafd87a4078f2d65df","ssdeep":"","tlshash":"54300000000000000000c00c00000000000000000c0000000000000000000000000000","first_seen":"2023-04-09T18:20:08Z","last_seen":"2026-06-29T19:39:55.070409Z","times_seen":12092,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tonapi.io/v2/blockchain/accounts/UQCY3tYl7cbAHYruuv2Rh0YlnxjQ0dsFkK9PO_LISlZTIf1o/transactions","fqdn":"tonapi.io","domain":"tonapi.io","tld":"io"},"ip":{"addr":"172.64.153.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://amlshield.sbs/","date":"2026-06-29T01:11:21.468Z","timestamp":1782695481468,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tonapi.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 03 May 2026 08:48:07 GMT","end":"Sat, 01 Aug 2026 09:48:03 GMT"},"fingerprint":{"sha1":"DC:A7:43:C5:B8:6F:D4:E7:7E:34:87:5E:DD:CA:AB:41:91:01:C9:98","sha256":"C9:70:45:51:7F:1E:79:8B:3E:40:EB:5D:73:95:35:75:1D:7E:E9:B0:79:32:F7:85:AA:9A:75:59:D7:0D:9A:C4"}}},"request":{"raw":"GET /v2/blockchain/accounts/UQCY3tYl7cbAHYruuv2Rh0YlnxjQ0dsFkK9PO_LISlZTIf1o/transactions HTTP/1.1\r\nHost: tonapi.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://amlshield.sbs/\r\nOrigin: https://amlshield.sbs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 29 Jun 2026 01:11:21 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: https://amlshield.sbs\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization,X-Tonapi-Client,X-Capability,F\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncf-ray: a1310e879a0bdfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21843,"size_decoded":5985,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"52edef585c67b093a0c5c0f735e32ad5","sha1":"c53e34e8023bcbf0f4f7e81f9dd26f32c2498dee","sha256":"dec2d63c6acdb2eaa3c1fe69803750e17d518096db06e88268e996e497ab0ccf","sha512":"bbf998eade0d90a18b79dc7551fbf9e2055fc980b45ec0e93678cb87a2f47305f645ae02e27cc9970ee60609375164d485c6634c40ec372beb51be838165f6d1","ssdeep":"192:9vK1DpVNvECrhp84rvC3KWNh0BRv93R9P9mSOZqp7kP4R9oR5u21ePCvCGRD/7BT:Up8uh9vp7kPork7BuGAruF/c90kK9L","tlshash":"5fa2f9206798b5f7cb7f9501159f3e9722bc30bbd8c37c959aecc6941fa31ae6812105","first_seen":"2026-04-09T04:56:28.146792Z","last_seen":"2026-06-29T01:11:54.605882Z","times_seen":12,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":63,"dns":0,"connect":1,"send":0,"wait":72,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dontclickthislink.lol/api/crypto/settings/?chain=1","fqdn":"dontclickthislink.lol","domain":"dontclickthislink.lol","tld":"lol"},"ip":{"addr":"172.67.174.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://amlshield.sbs/","date":"2026-06-29T01:11:21.823Z","timestamp":1782695481823,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dontclickthislink.lol","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 31 May 2026 17:03:24 GMT","end":"Sat, 29 Aug 2026 17:03:23 GMT"},"fingerprint":{"sha1":"58:7F:A4:75:56:85:3B:A9:1E:7D:47:D5:F8:A9:12:A7:42:81:76:55","sha256":"60:35:25:B3:BB:FF:8B:0C:67:3B:14:89:46:90:20:B0:9B:9E:48:2A:71:DD:6B:BF:A8:94:8F:8D:DE:D1:9E:49"}}},"request":{"raw":"OPTIONS /api/crypto/settings/?chain=1 HTTP/1.1\r\nHost: dontclickthislink.lol\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://amlshield.sbs/\r\nOrigin: https://amlshield.sbs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 29 Jun 2026 01:11:21 GMT\r\ncontent-type: text/html; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: accept, authorization, content-type, user-agent, x-csrftoken, x-requested-with, ngrok-skip-browser-warning, referer, sec-ch-ua, sec-ch-ua-mobile, sec-ch-ua-platform, CF-Visitor, CF-IPCountry, X-Forwarded-Proto, CF-Connecting-IP, X-Forwarded-For, CF-RAY, Strict-Transport-Security\r\naccess-control-allow-methods: DELETE, GET, OPTIONS, PATCH, POST, PUT\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ek8%2BDPbPC5etKk%2BKQ8F1hwRV2SQBbMmT46k5bq2esZy%2BCkUnT5h2oJnQsECKdEyed1H0kWkLcc28gnaoTq1RnwVeCiAU06TSKKIancqKZmWNsjulYNggSz1oxzkisPJjx6WvoOX8aA4%3D\"}]}\r\ncf-ray: a1310e898ef956c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1032,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-29T20:32:15.499955Z","times_seen":16835046,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}