{"report_id":"d6b39824-eb58-4b76-b90e-2908fbfb53c0","version":6,"status":"done","tags":["scam","fraud","crypto"],"date":"2026-03-13T02:10:28Z","url":{"schema":"http","addr":"amlsec.cyou","fqdn":"amlsec.cyou","domain":"amlsec.cyou","tld":"cyou"},"ip":{"addr":"172.67.149.200","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"amlsec.cyou/","fqdn":"amlsec.cyou","domain":"amlsec.cyou","tld":"cyou"},"title":"The Best AML Service for Your Business - AML Secure","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T11:07:12.655044Z","times_seen":17760269,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"amlsec.cyou","fqdn":"amlsec.cyou","domain":"amlsec.cyou","tld":"cyou"},"ip":{"addr":"172.67.149.200","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-17T02:10:28Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"amlsec.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null},{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"192.178.204.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-08T22:15:01.701196Z","alert_count":0,"request_count":1,"received_data":36183,"sent_data":534,"comment":"","tags":null,"fingerprints":null},{"fqdn":"amlsec.cyou","ip":{"addr":"104.21.29.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-28","domain_rank":0,"first_seen":"2026-03-13T02:10:34.12072Z","last_seen":"2026-03-13T02:10:34.12072Z","alert_count":68,"request_count":34,"received_data":12033647,"sent_data":14870,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-03-08T22:33:42.678774Z","alert_count":0,"request_count":2,"received_data":175261,"sent_data":885,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-08T22:19:32.591288Z","alert_count":0,"request_count":1,"received_data":5999,"sent_data":481,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"amlsec.cyou/frank_assets/web3-provider/web3-loader.js","fqdn":"amlsec.cyou","domain":"amlsec.cyou","tld":"cyou"},"ip":{"addr":"104.21.29.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b64ec349c7eeb4324f4e7c20eb7fc98","sha1":"c09046d05daa28ef73e4bf3b58bd6518ce98a271","sha256":"801d62fc02f89e7c1b414392e066dcda139ea3154cb3a48da721ff9a9df49f1f","sha512":"e92c61f409b0a56e41654c1f867089473bed649bf3a8d7167fd1a179993295863f20d0a63b20c5e2c20ba6ee55dab82802c06591cd39d188489a479deefc8b23","ssdeep":"768:sCoOXPhfU4Ui8YG7uOFQgauwF4ifTSQoc8S:SOXXwYG7XQTd4irgS","tlshash":"5b13b8f957a0a8f089a787d5aa131e09fa159c77c7624315f2bc274dbfd2e0cc806e91","size":41716,"data":"","first_seen":"2023-10-17T15:07:19Z","last_seen":"2026-08-03T21:00:55.094799Z","times_seen":405,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlsec.cyou/frank_assets/web3-provider/web3-connect.js","fqdn":"amlsec.cyou","domain":"amlsec.cyou","tld":"cyou"},"ip":{"addr":"104.21.29.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"47f795b848c217887b6b777101941080","sha1":"e35aedb35e68be3a777324fd92adf7396132b7b2","sha256":"39f201db3b9481261cc1660c3c2f9880fb09ef44c1e5fe5d9e2fd9deb818bd10","sha512":"ec7124aea23a2262ca514584d77395d39f27134ed5938b4dee942ef87170067e4195b2e9feb595b68deb412cd1916d539c658f06a36543fe54708ef7869ff93c","ssdeep":"6144:Nyk4F3cPmw7kM9YTIPAIhKVlbolFdQMPjqUY2OoGHFiRlQIiH+O3+2zrbwRbCNvr:0SY0zGliQIipDwRbamsjEmLR","tlshash":"e7f4f984b6a4b061439765a4003f540ff27aba2d780a44bcf654d8f6bcbc98d653bf39","size":747370,"data":"","first_seen":"2023-03-07T14:37:40Z","last_seen":"2026-08-07T08:59:16.710547Z","times_seen":651,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlsec.cyou/frank_assets/web3-provider/web3-router.js","fqdn":"amlsec.cyou","domain":"amlsec.cyou","tld":"cyou"},"ip":{"addr":"104.21.29.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"85a56c216646e3aa7ae57bab1b834845","sha1":"2a2cd889995e1d2a2c469afca8e7605034afd2d6","sha256":"c259624218132a2cd36ad673de1ef15631307c4c491c3c63b5e930084b6308ef","sha512":"268f515873f0160d2a49020afdf40a9b2b4a9243df2fce5ba7cad114a8f6771d987573c65688889472c0bc6853a41cc61a42e09457fb5971b61703e540b1be80","ssdeep":"12288:7KY9J6iZolXNgr1uogYc86/O/B1rQnRIwhFhAWsfpD2LeQE8mq:7KY9poNyhdcxWBVQnAVfgLeg","tlshash":"e4d439d472a6f039439753a8547f0186f33d6854700c806cf7acf9eaa8a9599c67bf38","size":624671,"data":"","first_seen":"2023-06-30T00:51:10Z","last_seen":"2026-08-03T12:41:36.358004Z","times_seen":327,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6cf353c3b8738cded0ecaf2100e7da1e","sha1":"9fbbee8565587f0a3a897a84045d7a216efa3a64","sha256":"985f1224c0eeec99d367a9db35e58e44b21e7eb9ce45831b15b4c108e41fd97f","sha512":"b9d13adaf4af1e21d923ac1ab3e69f8bdd755c9b984c4018c660470c7b7dd079f100c72f7b8215f64cdbe632990cc416e88542b4f170194610b5e685b4678da5","ssdeep":"1536:iKJqLfGmNQ2X8NFb4uvEOUjF3j7MtOBlxvHlik3+AkNk7yGCdmFiBnyOlV/TDQr/:nJebsNy1ikuGeBnR/TDQ9chHdN+ui","tlshash":"dbe3e789a221b67646e3169b93e4c211b3b50544b80ac4e470fd4c9f597ec9c13feefa","size":154597,"data":"","first_seen":"2025-06-28T19:00:56.686116Z","last_seen":"2026-08-07T10:47:32.804127Z","times_seen":26697,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlsec.cyou/frank_assets/web3-provider/web3-seaport.js","fqdn":"amlsec.cyou","domain":"amlsec.cyou","tld":"cyou"},"ip":{"addr":"104.21.29.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb07a7c3decf8bc73e32ab77262cabab","sha1":"c850e79dbd5c09a233020b19a35ac342459786a8","sha256":"0b82ab6b06608a64112e546c285283a3ad0cf357924130fc355da4626331b5da","sha512":"a1387da18e86b1b9f2e8e31abb765aa156d9b8314e8af9204774354389e568747e2057b1039b82dd30af865ce894cb0d871f43d4a2856add0b25b30b91e925fd","ssdeep":"","tlshash":"5211749c1ac0f189d7da63f84837a7ece58ec817349080d3a910ac95388c82dc483eb9","size":1000,"data":"","first_seen":"2025-04-21T10:18:53.559086Z","last_seen":"2026-04-17T21:28:43.435902Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlsec.cyou/frank_assets/custom.js","fqdn":"amlsec.cyou","domain":"amlsec.cyou","tld":"cyou"},"ip":{"addr":"104.21.29.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7aecb2f8bb98ca6a55623db3f60e03c","sha1":"e64f3566f132a3fb5e743bc81b9840ff5e19b3e6","sha256":"60473c3597e6a9890ea1763303a918dbd694bf465b10b98232b794585da3b276","sha512":"9fe5f839602e44c59122b61f7d9df82a055c65d430fb05db36d2424353fcb2a464633e410931d3891933631c78085028f407ed8ac32de25897217ebe0660636e","ssdeep":"192:8Bov6ve/AdsGFdo+B2pOIptlomlRtpaMVl2C2V/B1kRULprPevjiEtHaailCdcdk:8BG6vhdsGFdo+WtM/BK6IOfNGJSOvcQf","tlshash":"24b22b616bfe0135014b626bab5b6b1d3ba040177807ce147bbc5ba46f82f86c873dd9","size":24120,"data":"","first_seen":"2026-02-25T20:06:41.641589Z","last_seen":"2026-03-18T13:28:02.488705Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlsec.cyou/assets/js/index.js","fqdn":"amlsec.cyou","domain":"amlsec.cyou","tld":"cyou"},"ip":{"addr":"104.21.29.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f4a2378a72ef8227e1803e9ae0bb9f2f","sha1":"b73f6a6c8800ca5e0ebfdc2924c81742f398141e","sha256":"1d0131a7fc6ff71384fb46115d73228ba8546fa4d509d61602a2d55564916b8a","sha512":"5d69144c4eedde472ca47e270afec95061e5f30c20cbc85a1c1958b256db010cb8487f4d77489dc525876ac95d955505c33f77afd0a7506df7c3c71bfc0906b7","ssdeep":"","tlshash":"8ed022b732820c33caee66f652b003c83918034a24002001388c240a2133fc568fbefb","size":203,"data":"","first_seen":"2025-10-28T12:07:02.483803Z","last_seen":"2026-03-18T13:28:02.493874Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlsec.cyou/frank_assets/web3-provider/web3-alert.js","fqdn":"amlsec.cyou","domain":"amlsec.cyou","tld":"cyou"},"ip":{"addr":"104.21.29.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6309738593ca0c1bd04700c4f01bc3c","sha1":"50d56a5bed5242c3ff2cae3e3fbef5522c26cfea","sha256":"22becfcf833e51cc71faf4b3a99c596e5ef3879543f7007065c8a9730692b6ad","sha512":"f8d5374e47b6bc6d63f22bf9fc836ab4c7dfc4d015a02c229bcc801fc00af1fe843b1652eeafbfc830774293542902197012c3bfe1cd8ba10ee8316132c218af","ssdeep":"1536:etDaj7HoTsRY7OzoSXMg9pIDBgb89rp4qomjqfSTAFZmvxlZUJZoKOwqYfEQc7AA:aF+balAF8kDoXjD7","tlshash":"1be385692ef210a20dab64bc278ba005b6615117b609cd94bdacd7104fdff3486f27ed","size":145398,"data":"","first_seen":"2023-05-09T18:10:24Z","last_seen":"2026-08-03T12:41:36.361684Z","times_seen":395,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlsec.cyou/frank_assets/web3-provider/web3-modal.js","fqdn":"amlsec.cyou","domain":"amlsec.cyou","tld":"cyou"},"ip":{"addr":"104.21.29.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eed7d4b80780bb8adee3cbc67d7f98ff","sha1":"20f450d0eaf88312c005763e9036aeed80a225a0","sha256":"5e0ebe3158a15aba5a5e00e9bb2327769203ed6c28b6fd7aca2155d7e05cadc4","sha512":"66c43c8d29392d3e8435d8273fa23c2653e3cf4a36d875f97195100121e59ba73c1b8c7430c41a01a765893f4f0b97b3c153ede123d688ba3f00fcbe7fd74d96","ssdeep":"384:yuWDxb0OzbJ3vF/ll0blqHuCUCaDr/S1ziayMkrN21GecFZPtDQseaTrHyhfdsG2:KV39Nl08O/CaDbS1/k97rShZFc/","tlshash":"acf286f02bec12b4853f434376592d74bb1114fa9ebabf4575fe1a828f96e0c412a4d2","size":37639,"data":"","first_seen":"2024-05-02T20:25:27Z","last_seen":"2026-08-03T21:00:55.072731Z","times_seen":208,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlsec.cyou/frank_assets/web3-provider/web3-module.js","fqdn":"amlsec.cyou","domain":"amlsec.cyou","tld":"cyou"},"ip":{"addr":"104.21.29.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d03c4ad3e137ce6485f6b3be0e8c687d","sha1":"9758374b03658c41f7bc2a177ab32dbca0e673a0","sha256":"571b68cfb2c3208ba5bd8420dafc5827de5815a9c72718e2324711fbd3b00f12","sha512":"62ae8ea5cc8e7cc7849334fb9bea591dda0006fc03664a62061434bafa1b5b8c1eabfa971884863b26def3938216bb092773d0828e22199fb70f0293433c9776","ssdeep":"6144:srR7xwaDNbrkU6twbWCNvmsMMi3kXScvbKKLNehw8K0ZpV0aX0/g3Evi2Iyj+DOo:s97xwkk/CWamsM1U1bKC0/VukePg","tlshash":"8f45f9c47691b095c3a25ad1446fd00ae33dfd647c8c4169bb57ecf32ca8a89512bf3a","size":1181323,"data":"","first_seen":"2023-04-05T17:45:39Z","last_seen":"2026-08-03T12:41:36.367111Z","times_seen":347,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlsec.cyou/","fqdn":"amlsec.cyou","domain":"amlsec.cyou","tld":"cyou"},"ip":{"addr":"104.21.29.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"86586157c86869bfa256c49c62ac4a62","sha1":"e9767c176455ea4a7c5349039f6b3a9836d3e228","sha256":"4781a1e5716ffc7ecfc48e3e7499e65067a0d23e7170e6b647c37d82356c019c","sha512":"f464741ad4baec8131f572055c20c86eee28c5f4b8299314f846ad70a79401218d515e0d53b64de5eb25030d1c45dd03f681ea37d799900a65ff20b0e63cb7ee","ssdeep":"","tlshash":"9311f642256d10712477ed090dbe61019a6510435caf7c31b45c0f08df2f31ee0fbae8","size":861,"data":"","first_seen":"2025-10-28T12:07:02.490018Z","last_seen":"2026-03-18T13:26:12.104484Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"amlsec.cyou/assets/img/badge/2.svg","fqdn":"amlsec.cyou","domain":"amlsec.cyou","tld":"cyou"},"ip":{"addr":"104.21.29.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlsec.cyou/","date":"2026-03-13T02:10:04.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlsec.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 18:59:55 GMT","end":"Fri, 29 May 2026 18:59:54 GMT"},"fingerprint":{"sha1":"66:B5:7F:B9:DB:BE:19:67:F4:05:F0:0E:CD:7E:6B:1E:CC:D4:D1:DC","sha256":"D4:A2:10:67:1F:72:5B:FA:E5:C3:96:79:68:EB:3A:CF:5D:62:03:7A:73:9D:44:78:C9:5B:38:04:2B:35:E0:F6"}}},"request":{"raw":"GET /assets/img/badge/2.svg HTTP/1.1\r\nHost: amlsec.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlsec.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 02:10:05 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=icg7PwwhOKpElchX1OPLdg3nYgzEQ1G79FNoRbAdqY9uh9qd8hyAQcQ5p1hheNSVY4iRI74RSsr4H6WW93BNPFSS7ksuIixrGTrH\"}]}\r\nlast-modified: Mon, 23 Feb 2026 15:55:43 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699c787f-1041\"\r\ncf-ray: 9db7800c891d35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4161,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"610d275379463c14847963bd7894ba43","sha1":"ae3efff2d45c9d10b5958d7e025a16c8a0d97439","sha256":"c20b4ba91df290713eb3d395b4b7a79cdaf41d56c296b9c9b992ae5b32e77b59","sha512":"09dcd35f4e0ee6fd75caa4e9ff7a548141e069b08fea61a18a0b543e878c9b981a013705e6310b77b0b75f9dabde647927b4fbac5bd0eb159df5fc173f73f68d","ssdeep":"96:w8LwOWdEdWajEeR6Eik6Kr+oj4XWbZJ3cq5vQH2M+Va:w4WdEVjRRoKr3dJ3F5oH2la","tlshash":"158185fe619882d05d838f50fd339d79655f3cfb6fa9c3d405a6daa8e2642d48d88c04","first_seen":"2025-10-28T12:07:02.477691Z","last_seen":"2026-03-18T13:28:02.47906Z","times_seen":12,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"amlsec.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"amlsec.cyou/assets/img/logo-title-large.svg","fqdn":"amlsec.cyou","domain":"amlsec.cyou","tld":"cyou"},"ip":{"addr":"104.21.29.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlsec.cyou/","date":"2026-03-13T02:10:04.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlsec.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 18:59:55 GMT","end":"Fri, 29 May 2026 18:59:54 GMT"},"fingerprint":{"sha1":"66:B5:7F:B9:DB:BE:19:67:F4:05:F0:0E:CD:7E:6B:1E:CC:D4:D1:DC","sha256":"D4:A2:10:67:1F:72:5B:FA:E5:C3:96:79:68:EB:3A:CF:5D:62:03:7A:73:9D:44:78:C9:5B:38:04:2B:35:E0:F6"}}},"request":{"raw":"GET /assets/img/logo-title-large.svg HTTP/1.1\r\nHost: amlsec.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlsec.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 02:10:05 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=61R1GQHdmUoO0oWzIc0DblPRFMbzyPCOcIjUFN5uogURILgsYXVQqPoDNHYPb2tfi3M5dRnEk16hjf27zd1yJZ09q1FmSNWOpVd0\"}]}\r\nlast-modified: Mon, 23 Feb 2026 15:55:43 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699c787f-21ee\"\r\ncf-ray: 9db7800c892935a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8686,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c9dae18eb4cc4886a6e4f0244f1d3dff","sha1":"12f050d7240dc818466764422c418e3bf61e65a5","sha256":"f9cef530b30baa0fd796da71e06f09922aed937b49c00f633c79e2738fd33979","sha512":"2806a18cea78db217e57ff7d16b87ac6d8ecdd2f8803c98c273a0354a9e1baaa05520801330b772af7c9705c307718eba99955bf0fcede1c656c4f7c36bbc27f","ssdeep":"192:luVHDvNEq5zUyEQE49fV0ER34sOtztwyC0QQfPE79:+vVx9fd6sOtB3BQkk9","tlshash":"1102f7cc3b34a2d9b5d8e7fa6f2284b92e57e6df7841c840c3d4dd0900821991e2e9d7","first_seen":"2025-10-28T12:07:02.482986Z","last_seen":"2026-03-18T13:28:02.491072Z","times_seen":12,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"amlsec.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"amlsec.cyou/frank_assets/web3-provider/ethereum-tx.js","fqdn":"amlsec.cyou","domain":"amlsec.cyou","tld":"cyou"},"ip":{"addr":"104.21.29.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlsec.cyou/","date":"2026-03-13T02:10:04.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlsec.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 18:59:55 GMT","end":"Fri, 29 May 2026 18:59:54 GMT"},"fingerprint":{"sha1":"66:B5:7F:B9:DB:BE:19:67:F4:05:F0:0E:CD:7E:6B:1E:CC:D4:D1:DC","sha256":"D4:A2:10:67:1F:72:5B:FA:E5:C3:96:79:68:EB:3A:CF:5D:62:03:7A:73:9D:44:78:C9:5B:38:04:2B:35:E0:F6"}}},"request":{"raw":"GET /frank_assets/web3-provider/ethereum-tx.js HTTP/1.1\r\nHost: amlsec.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlsec.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 02:10:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HRlNX5bR9VGrOUJbL4J24EYjC8Tefp5c4W6CcnCNJdKbjQP7nKjb76OE%2Bw9%2FHkkJ6A7eFKyLIS37kPrJGwtjEVyyYkkiUoZP7wpJ\"}]}\r\nlast-modified: Mon, 23 Feb 2026 15:55:44 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699c7880-4f556\"\r\ncf-ray: 9db7800c993835a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":324950,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (43042), with CRLF line terminators","md5":"75df8d29cd9c96b0f29edf2b940da23b","sha1":"de4e9f213eb0b0c77ed78e54f35c093800499301","sha256":"5c9805c397f6744b6bf1aafdc22980094c41e659c636aa453981659fdf873eaf","sha512":"eb8600f68e6da8d03479718ac024d83cc377b6caffb82c7e3806e1cf7cd21d8056e7ffd1db65a5af1624a3c00b6e96571a8460da7dff79f861e7962030f05ef9","ssdeep":"3072:FRpgpHv8o3GVhs8YgHbGpLsev6nshcn1v41C7d8WrB33Tw+8nbdJ7b53Q:FkGVBfCNvmsg1vQcKdQ","tlshash":"26642a89f6607451436671a4012f640ff67afa2e5949006cf258e8fb3df89c9963bf38","first_seen":"2023-04-05T17:45:39Z","last_seen":"2026-08-03T12:41:36.357102Z","times_seen":377,"resource_available":true,"data":null}},"time_used":437,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":292,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"amlsec.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"amlsec.cyou/frank_assets/web3-provider.js","fqdn":"amlsec.cyou","domain":"amlsec.cyou","tld":"cyou"},"ip":{"addr":"104.21.29.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlsec.cyou/","date":"2026-03-13T02:10:04.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlsec.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 18:59:55 GMT","end":"Fri, 29 May 2026 18:59:54 GMT"},"fingerprint":{"sha1":"66:B5:7F:B9:DB:BE:19:67:F4:05:F0:0E:CD:7E:6B:1E:CC:D4:D1:DC","sha256":"D4:A2:10:67:1F:72:5B:FA:E5:C3:96:79:68:EB:3A:CF:5D:62:03:7A:73:9D:44:78:C9:5B:38:04:2B:35:E0:F6"}}},"request":{"raw":"GET /frank_assets/web3-provider.js HTTP/1.1\r\nHost: amlsec.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlsec.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 02:10:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M1OEMIifiE2hltjDLPM%2B3diyyh9t4Uyl%2Bs7jgoezSpQL2P17XJRyVelkRWx%2BBjnx%2BKngnjCWSSIlRVzXQuuphJH108Eb3cvk1fY4\"}]}\r\nlast-modified: Mon, 23 Feb 2026 15:55:44 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699c7880-184c21\"\r\ncf-ray: 9db7800c993935a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1592353,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"220f31de34a050de0cfd3db4b4414be0","sha1":"1a47790f678a80e422ffa3e656a1b3a702b78aa7","sha256":"6ef8742a05fc0c4c894b474d9413d5cd682ebabe1cc6013b4511d70976169e96","sha512":"2ddfea32661ce737246987bbd98f5f6982c4b285c98e668e6cba1ec10cbd475c8ddc84f2248022418fa30038eca5ff70af874b506e23d367780b70b8f6af3e40","ssdeep":"24576:mbLhfBKOq+4jH3PRjrGTxdEgPVMOcISSVfDxC3fcyqyB5OV7n0Ng1j2A2nC0Js4Q:aLhfBWH5wxfVhmofdCYnEyj2A2n1hV2B","tlshash":"1d25c44437d4b882220767777316b1f5f97aad99b288c49ef480bc5ce0add22fae0571","first_seen":"2026-02-25T20:06:41.647911Z","last_seen":"2026-03-18T13:28:02.486372Z","times_seen":6,"resource_available":false,"data":null}},"time_used":752,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":609,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"amlsec.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"amlsec.cyou/assets/img/span/1.svg","fqdn":"amlsec.cyou","domain":"amlsec.cyou","tld":"cyou"},"ip":{"addr":"104.21.29.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlsec.cyou/","date":"2026-03-13T02:10:04.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlsec.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 18:59:55 GMT","end":"Fri, 29 May 2026 18:59:54 GMT"},"fingerprint":{"sha1":"66:B5:7F:B9:DB:BE:19:67:F4:05:F0:0E:CD:7E:6B:1E:CC:D4:D1:DC","sha256":"D4:A2:10:67:1F:72:5B:FA:E5:C3:96:79:68:EB:3A:CF:5D:62:03:7A:73:9D:44:78:C9:5B:38:04:2B:35:E0:F6"}}},"request":{"raw":"GET /assets/img/span/1.svg HTTP/1.1\r\nHost: amlsec.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlsec.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 02:10:04 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dYAGMn8HVPq4dCNBO3ArCKvuXfCzPukLLwbIyrBJa8ECVPk1bntParm%2FK3zI2z5XxpzHHeStuQSR4jPVZwy1ecCr9CLif9Ccc8tY\"}]}\r\nlast-modified: Mon, 23 Feb 2026 15:55:43 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699c787f-10c1\"\r\ncf-ray: 9db7800c892835a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4289,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f2396a14c6766804f5a886c53f7d77f3","sha1":"bc5cf834955d57874b5c41f5a97ebc0d65dc7ba5","sha256":"b591235f64de7b537a120b262ee1b0cb7f938e0c263915f9e82140589bf63075","sha512":"944ed9b777bab574ee3c28aae00f912d3238be9195a9d79e3e8ddba81246463a02e8426106aeffd92ecf141327aa9fecd61e8d2cd88412c9fd244dff043d560a","ssdeep":"48:/e7LKkLHO2rkLoO2rkLxO2dZNYbrMLktsZNYbrMLkWrHOzDY7vxqjCjHtC+CHIlZ:mytsosb6fYbKktsfYbKkWrZ1yaiIFP","tlshash":"c29125b5b3d95d3ee044d384df60c428326a52a9bbd5840189bd3b2b9635dcf983f2d8","first_seen":"2025-10-28T12:07:02.487535Z","last_seen":"2026-03-18T13:28:02.481863Z","times_seen":12,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"amlsec.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"amlsec.cyou/assets/img/partners/3.svg","fqdn":"amlsec.cyou","domain":"amlsec.cyou","tld":"cyou"},"ip":{"addr":"104.21.29.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlsec.cyou/","date":"2026-03-13T02:10:04.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlsec.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 18:59:55 GMT","end":"Fri, 29 May 2026 18:59:54 GMT"},"fingerprint":{"sha1":"66:B5:7F:B9:DB:BE:19:67:F4:05:F0:0E:CD:7E:6B:1E:CC:D4:D1:DC","sha256":"D4:A2:10:67:1F:72:5B:FA:E5:C3:96:79:68:EB:3A:CF:5D:62:03:7A:73:9D:44:78:C9:5B:38:04:2B:35:E0:F6"}}},"request":{"raw":"GET /assets/img/partners/3.svg HTTP/1.1\r\nHost: amlsec.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlsec.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 02:10:05 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ypMNeyC7X4n53LdEA7JX3OwHTolCGMG0lX4O67akIEzxgTyKTSJbZ%2F8V70CQylEaQqynVxWPVXg1Fq6EkCH0Raq3k%2BAAMWed2Q0T\"}]}\r\nlast-modified: Mon, 23 Feb 2026 15:55:43 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699c787f-19ee\"\r\ncf-ray: 9db7800c892335a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6638,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6f3b3ed8343fb65f0ad4a9ae7bae3b82","sha1":"5934ea88014dd36f3d9399e62bc476f1752e8f5f","sha256":"adbb559a10b2790727929e195bd253cdc53e62cf535e3fef155b3fce2033c4a9","sha512":"27647a18b71814960c733efbf74306d2f462f1b6b7d5aeb3addfbb447cc9095aa7ae6348351f69cb13634ba5685782bbe554fb5981ab9dd569434c5e35fa4928","ssdeep":"192:JeUQ0/Ykejp29Fu/1pbcgh+V8Ksk1/j5qf:YE609F43yzhW","tlshash":"66d1b6ee2bb895e8f500d6d6a601557a3806a4ff7c17c91fc271dd286586ccc8eb8c93","first_seen":"2025-10-28T12:07:02.489114Z","last_seen":"2026-03-18T13:28:02.481127Z","times_seen":12,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"amlsec.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"amlsec.cyou/favicon.ico","fqdn":"amlsec.cyou","domain":"amlsec.cyou","tld":"cyou"},"ip":{"addr":"104.21.29.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlsec.cyou/","date":"2026-03-13T02:10:07.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlsec.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 18:59:55 GMT","end":"Fri, 29 May 2026 18:59:54 GMT"},"fingerprint":{"sha1":"66:B5:7F:B9:DB:BE:19:67:F4:05:F0:0E:CD:7E:6B:1E:CC:D4:D1:DC","sha256":"D4:A2:10:67:1F:72:5B:FA:E5:C3:96:79:68:EB:3A:CF:5D:62:03:7A:73:9D:44:78:C9:5B:38:04:2B:35:E0:F6"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: amlsec.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlsec.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 02:10:07 GMT\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VeXKLBMR5k0mmZzBudesMAVJXpfsa0WG4zljWgozjsskA21E2gyUN6EvChErJMezVdWhz9d5g3SLCl8Rh%2Bj8K6UfqxrcODtUp6tX\"}]}\r\nlast-modified: Mon, 23 Feb 2026 15:55:43 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699c787f-45a6\"\r\ncf-ray: 9db7801c0a4035a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17830,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"18f30613e935386e67b0cbe9c31c5153","sha1":"60d8cfcc9ad8763adabc433af218f268a168ea86","sha256":"fe9878c67ca4e0a26614cb3e34e438c7d697b77602c5e7286145149881b5c436","sha512":"73aced69f81b848dc96896d516e9f4bcbb8e4538accd6694dff3015e4592eda995141a80d88714519e5e7f51b7ec3a48bf2a21519ba63d30f9919c2acaa9e793","ssdeep":"384:qR78pvaYCvFnfUXrEicGGt0PECqNzGRJeJ8aHylN8sYAn0aOi6:qR789atvFfUmGGiyLJ8aSlNVYiD6","tlshash":"6882e0b8ddc7db09c1c9796e152e40ba71f35aa26ed42463c3774a1b0c92d86bd814d3","first_seen":"2025-10-28T12:07:02.469173Z","last_seen":"2026-03-18T13:28:02.499958Z","times_seen":12,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"amlsec.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"amlsec.cyou/assets/img/logo-title.svg","fqdn":"amlsec.cyou","domain":"amlsec.cyou","tld":"cyou"},"ip":{"addr":"104.21.29.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlsec.cyou/","date":"2026-03-13T02:10:04.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlsec.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 18:59:55 GMT","end":"Fri, 29 May 2026 18:59:54 GMT"},"fingerprint":{"sha1":"66:B5:7F:B9:DB:BE:19:67:F4:05:F0:0E:CD:7E:6B:1E:CC:D4:D1:DC","sha256":"D4:A2:10:67:1F:72:5B:FA:E5:C3:96:79:68:EB:3A:CF:5D:62:03:7A:73:9D:44:78:C9:5B:38:04:2B:35:E0:F6"}}},"request":{"raw":"GET /assets/img/logo-title.svg HTTP/1.1\r\nHost: amlsec.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlsec.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 02:10:05 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Go%2BVbRj10LcvVG9PiK%2BXVDsOYexBTHy3Rua4uhL5AoqTEv67CEzAf4oGCb3T3y%2BclGwyZ1a5IqlSONDLPNaK1QNtLrnK8kAp103A\"}]}\r\nlast-modified: Mon, 23 Feb 2026 15:55:43 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699c787f-21f1\"\r\ncf-ray: 9db7800c791b35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8689,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3e5cc1bf6c0a8510d702d4f0755a01e3","sha1":"013ad17b29b28c2dac397d8e06d9ef5c8c277ed7","sha256":"879f515775aa1e7a66705991403108e3e3a45264e5044b01e6f8579fb5d12e4b","sha512":"f0a88a6f9e30f0ba1ce18caa9a03616b6b767d530102010f22d48c5a838dd2332126e2d9c0fd3559181b685c825a4e8ecc13307637f2ecd2f55dc362c1aa67b5","ssdeep":"192:DRq6PRzR6PRzstwL6YlVloge5Ljs+p9lSM82g/C9XKpDc4ZgJ688sLqr:DRdPRzsPRzkwL6Yxoge5DzlS8XwDN6PM","tlshash":"44024eeeb39066e0e583d7e0de0a84b5795f20fe7aa6cf748374ae4521110ecc84dc85","first_seen":"2025-10-28T12:07:02.470087Z","last_seen":"2026-03-18T13:28:02.497664Z","times_seen":12,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"amlsec.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"amlsec.cyou/assets/img/fact.svg","fqdn":"amlsec.cyou","domain":"amlsec.cyou","tld":"cyou"},"ip":{"addr":"104.21.29.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlsec.cyou/","date":"2026-03-13T02:10:04.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlsec.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 18:59:55 GMT","end":"Fri, 29 May 2026 18:59:54 GMT"},"fingerprint":{"sha1":"66:B5:7F:B9:DB:BE:19:67:F4:05:F0:0E:CD:7E:6B:1E:CC:D4:D1:DC","sha256":"D4:A2:10:67:1F:72:5B:FA:E5:C3:96:79:68:EB:3A:CF:5D:62:03:7A:73:9D:44:78:C9:5B:38:04:2B:35:E0:F6"}}},"request":{"raw":"GET /assets/img/fact.svg HTTP/1.1\r\nHost: amlsec.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlsec.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 02:10:05 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UaglaISpXiDI6zNDBdRseppjyQ8fltREkwcunzWXSOEULRsT3vO%2FqP%2FxK%2FAcK%2F3A54EEnIeGmuU2XUsY%2FPaJmEyt2i%2BfHGc9%2FD6x\"}]}\r\nlast-modified: Mon, 23 Feb 2026 15:55:43 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699c787f-785\"\r\ncf-ray: 9db7800c892735a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1925,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f541ad380323a7da44fb144638f973d8","sha1":"b0afdfc052d2017aedc092dfe5dbffb5d5599af5","sha256":"e3e065833e0dcc5adba597cc380fa7817398f5b4d7c5b2b81a346ab8a700d464","sha512":"b1988a23eef32eadd80ea886878fb0df87a767f55f84edda91b93e613790a5fba8eab0347a5092386ccca51aa42a8dda7c0279ca2f9c87b57bdd19cdb2f1d621","ssdeep":"","tlshash":"3f4131757388ac1ce9658698f7b4c410226e52b7f58001858e8fb72f9126dc2dd2f3d8","first_seen":"2025-10-28T12:07:02.471037Z","last_seen":"2026-03-18T13:28:02.498777Z","times_seen":12,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"amlsec.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"amlsec.cyou/frank_assets/web3-provider/web3-alert.js","fqdn":"amlsec.cyou","domain":"amlsec.cyou","tld":"cyou"},"ip":{"addr":"104.21.29.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlsec.cyou/","date":"2026-03-13T02:10:04.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlsec.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 18:59:55 GMT","end":"Fri, 29 May 2026 18:59:54 GMT"},"fingerprint":{"sha1":"66:B5:7F:B9:DB:BE:19:67:F4:05:F0:0E:CD:7E:6B:1E:CC:D4:D1:DC","sha256":"D4:A2:10:67:1F:72:5B:FA:E5:C3:96:79:68:EB:3A:CF:5D:62:03:7A:73:9D:44:78:C9:5B:38:04:2B:35:E0:F6"}}},"request":{"raw":"GET /frank_assets/web3-provider/web3-alert.js HTTP/1.1\r\nHost: amlsec.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlsec.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 02:10:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9NISH2xF9fXQwusEgNZwlYF0kfwsPaag%2BaOngPrFj0ZrHXaGKZKSmaeVXz8xJQnXmS1kV89vNK%2BTlYxIQumZn2nl5J5mXWUIXoj7\"}]}\r\nlast-modified: Mon, 23 Feb 2026 15:55:44 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699c7880-237f6\"\r\ncf-ray: 9db7800c993435a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":145398,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (949)","md5":"f6309738593ca0c1bd04700c4f01bc3c","sha1":"50d56a5bed5242c3ff2cae3e3fbef5522c26cfea","sha256":"22becfcf833e51cc71faf4b3a99c596e5ef3879543f7007065c8a9730692b6ad","sha512":"f8d5374e47b6bc6d63f22bf9fc836ab4c7dfc4d015a02c229bcc801fc00af1fe843b1652eeafbfc830774293542902197012c3bfe1cd8ba10ee8316132c218af","ssdeep":"1536:etDaj7HoTsRY7OzoSXMg9pIDBgb89rp4qomjqfSTAFZmvxlZUJZoKOwqYfEQc7AA:aF+balAF8kDoXjD7","tlshash":"1be385692ef210a20dab64bc278ba005b6615117b609cd94bdacd7104fdff3486f27ed","first_seen":"2023-05-09T18:10:24Z","last_seen":"2026-08-03T12:41:36.361684Z","times_seen":395,"resource_available":true,"data":null}},"time_used":547,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":395,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"amlsec.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"amlsec.cyou/frank_assets/web3-provider/ethers.js","fqdn":"amlsec.cyou","domain":"amlsec.cyou","tld":"cyou"},"ip":{"addr":"104.21.29.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlsec.cyou/","date":"2026-03-13T02:10:04.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlsec.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 18:59:55 GMT","end":"Fri, 29 May 2026 18:59:54 GMT"},"fingerprint":{"sha1":"66:B5:7F:B9:DB:BE:19:67:F4:05:F0:0E:CD:7E:6B:1E:CC:D4:D1:DC","sha256":"D4:A2:10:67:1F:72:5B:FA:E5:C3:96:79:68:EB:3A:CF:5D:62:03:7A:73:9D:44:78:C9:5B:38:04:2B:35:E0:F6"}}},"request":{"raw":"GET /frank_assets/web3-provider/ethers.js HTTP/1.1\r\nHost: amlsec.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlsec.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 02:10:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HuSzccMwt92nd22QGSKswWBYegQRQIOrHG9DaGCwqoZP8dj7F%2BWjbyu6sMV8FspvCvt8xu3b34suCxoH3Qenfd3F4AqArPCg%2FQoO\"}]}\r\nlast-modified: Mon, 23 Feb 2026 15:55:44 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699c7880-b996b\"\r\ncf-ray: 9db7800c993735a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":760171,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"71f8c498e792c6179d4e2840228f777a","sha1":"b651545587f6257345dc3de9ddaa444b10dedf3e","sha256":"a66293a6a2bb4dee061a68612be0be3c5c0ab7e4068ab8d98a4a357baf664c73","sha512":"14371563e83bbdce425c035bad34a0d4ae6a2f2ae20ac183602134d8b8b5b5711874d40fbcb3c7344fab4f63237a2f0dedf65b7b458b870dbb8f64ab191a5d32","ssdeep":"12288:TfamYTKkkAJs8P+H8Xb2F/nNuwEYtnob6qQr:TfjkhPaNnN9EYtwo","tlshash":"35f43b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","first_seen":"2023-03-13T00:48:53Z","last_seen":"2026-08-07T03:19:10.736124Z","times_seen":3771,"resource_available":true,"data":null}},"time_used":610,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":465,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"amlsec.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"amlsec.cyou/frank_assets/vendors.js","fqdn":"amlsec.cyou","domain":"amlsec.cyou","tld":"cyou"},"ip":{"addr":"104.21.29.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlsec.cyou/","date":"2026-03-13T02:10:04.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlsec.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 18:59:55 GMT","end":"Fri, 29 May 2026 18:59:54 GMT"},"fingerprint":{"sha1":"66:B5:7F:B9:DB:BE:19:67:F4:05:F0:0E:CD:7E:6B:1E:CC:D4:D1:DC","sha256":"D4:A2:10:67:1F:72:5B:FA:E5:C3:96:79:68:EB:3A:CF:5D:62:03:7A:73:9D:44:78:C9:5B:38:04:2B:35:E0:F6"}}},"request":{"raw":"GET /frank_assets/vendors.js HTTP/1.1\r\nHost: amlsec.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlsec.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 02:10:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rQzRFPW4MsKVmfcUfkWSspR2vzb%2FZwjlnXrB2UdgRqMm32DElj4lYl%2B6FtB67tv%2FoBvoSsX1mxrqqZkTOm6ok5lDhY2egpuTF0pV\"}]}\r\nlast-modified: Mon, 23 Feb 2026 15:55:44 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699c7880-28cc2a\"\r\ncf-ray: 9db7800ca93b35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2673706,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65471), with escape sequences","md5":"129d33177498ebfbf2bc2d9fa4856beb","sha1":"e9f0d5ef79170337b8798a57d3b30e4704e7e1c8","sha256":"8d6aea858e5d11f08b2b83bc2ed5e3caf61dd1d7f6484bd90552a574a076f0ca","sha512":"cde89adbd251578cd4010cce42ea1b131441aab817a56cd3979d8d0f86a2808b2406ba33f8cc4ea020437944efbd14527d1b22a18356efb4332b2615286b809c","ssdeep":"6144:2/N+l9MVD6sXPviVRQ4piQtoOIKz8rBSK14PICXjGhwtkHj1k++TP+7NC4G8QXr0:YftqfixihVMKh+1SxV6b","tlshash":"2f25f848b6c2f476479120e0153b540ef23d6b5ce04d9594f3a8e4e3bdf89da862bb78","first_seen":"2026-03-13T02:10:38.875154Z","last_seen":"2026-03-13T02:10:38.875154Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1864,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":1718,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"amlsec.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"amlsec.cyou/assets/img/badge/3.svg","fqdn":"amlsec.cyou","domain":"amlsec.cyou","tld":"cyou"},"ip":{"addr":"104.21.29.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlsec.cyou/","date":"2026-03-13T02:10:04.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlsec.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 18:59:55 GMT","end":"Fri, 29 May 2026 18:59:54 GMT"},"fingerprint":{"sha1":"66:B5:7F:B9:DB:BE:19:67:F4:05:F0:0E:CD:7E:6B:1E:CC:D4:D1:DC","sha256":"D4:A2:10:67:1F:72:5B:FA:E5:C3:96:79:68:EB:3A:CF:5D:62:03:7A:73:9D:44:78:C9:5B:38:04:2B:35:E0:F6"}}},"request":{"raw":"GET /assets/img/badge/3.svg HTTP/1.1\r\nHost: amlsec.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlsec.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 02:10:05 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x2%2FaulfUn8780mKuDBvbP0wmwe%2FntGL26uLgHgDMVjev3sUjl4O3B%2F%2BjP%2FfPKu3Jiz3LVazAX7rTF9huMyp9DPVGkKyjDGfx97eM\"}]}\r\nlast-modified: Mon, 23 Feb 2026 15:55:43 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699c787f-8f1\"\r\ncf-ray: 9db7800c891e35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2289,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8474585d3758ae18f2ac7f4c525c1e0d","sha1":"accf0c95d10e3199ab2551ecbcbdea259f46712b","sha256":"663f620e6f28d7d4dd195fec003266a3b5e1f7f23eb56eeeaf6e180306189f2b","sha512":"b3c015de41af35c7985e2e4d6c38f5261f30da0759b9f8962ab5d418bb3b6ecfee3c12654fddd2f389968894c501939aff78d821ef4ef2c2c96682c244b8f582","ssdeep":"","tlshash":"b441dff6219d4380b383df21ee3e9cb3b15bb0f77ec486cd455de3046951294899aac1","first_seen":"2025-10-28T12:07:02.48036Z","last_seen":"2026-03-18T13:28:02.498213Z","times_seen":12,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"amlsec.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"amlsec.cyou/assets/img/partners/1.svg","fqdn":"amlsec.cyou","domain":"amlsec.cyou","tld":"cyou"},"ip":{"addr":"104.21.29.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlsec.cyou/","date":"2026-03-13T02:10:04.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlsec.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 18:59:55 GMT","end":"Fri, 29 May 2026 18:59:54 GMT"},"fingerprint":{"sha1":"66:B5:7F:B9:DB:BE:19:67:F4:05:F0:0E:CD:7E:6B:1E:CC:D4:D1:DC","sha256":"D4:A2:10:67:1F:72:5B:FA:E5:C3:96:79:68:EB:3A:CF:5D:62:03:7A:73:9D:44:78:C9:5B:38:04:2B:35:E0:F6"}}},"request":{"raw":"GET /assets/img/partners/1.svg HTTP/1.1\r\nHost: amlsec.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlsec.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 02:10:04 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XzsHqpjRQV4qhz6eKsaKoWLz3BcFDze0hXfjqmn9DQ%2Bcou%2BCrrxnV2cXik7fRG30XG0F6CtHeccLeaIAa9gqdTKjD14bwbwGuaac\"}]}\r\nlast-modified: Mon, 23 Feb 2026 15:55:43 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699c787f-17a8\"\r\ncf-ray: 9db7800c892135a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6056,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8b39bd15e518389585fba8f348906c08","sha1":"4f6314bdbc51c57aea37bc077c121accf1d2c80a","sha256":"99957197ea767627ae8ca3768c2872badb584ab210062dfa1766d33c3316ac6b","sha512":"22541f16f271d0a94d309cc0e07c974f7e239b2e60bb437b291c8f6af9aecf7ae9115d154cda534bfe6ca299572983172ff393da9ca249d61f00d06343e544db","ssdeep":"96:mR+u2PrxRLtbp/W2Vr3VAV96eQOSkIIGMrBVQEpAsgIsWMuQcmlc/2QO81qezoeM:mR+HTLtb42VSHzII1rhT2WM3cJzvfgfp","tlshash":"76c175cd2ba94afcf94087fbff05155c284956fe5c03ce94da545d0eb49a8ac08a4ed3","first_seen":"2025-10-28T12:07:02.482019Z","last_seen":"2026-03-18T13:28:02.480162Z","times_seen":12,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"amlsec.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlsec.cyou/","date":"2026-03-13T02:10:04.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/swiper@11/swiper-bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlsec.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 02:10:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 44022\r\ncf-ray: 9db7800c8bd1c272-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 11.2.10\r\nx-jsd-version-type: version\r\netag: W/\"25be5-n7vuhWVYfwo6iXqEBF16IW76OmQ\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230063-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 41681\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=xIQy6rCMo%2BSP8JC%2FASaHutXy67D1ntaUeIBdd7gg%2Fo%2BJPlJYC9iYO6unwgMoaGqv7sQDU3poPg%2BQ%2BV7i8aKD1Zmz%2FrdOtAjIVFMt%2FNaOkLySuUpJGvjB51zEKZKInyz8R2U%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":154597,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65281)","md5":"6cf353c3b8738cded0ecaf2100e7da1e","sha1":"9fbbee8565587f0a3a897a84045d7a216efa3a64","sha256":"985f1224c0eeec99d367a9db35e58e44b21e7eb9ce45831b15b4c108e41fd97f","sha512":"b9d13adaf4af1e21d923ac1ab3e69f8bdd755c9b984c4018c660470c7b7dd079f100c72f7b8215f64cdbe632990cc416e88542b4f170194610b5e685b4678da5","ssdeep":"1536:iKJqLfGmNQ2X8NFb4uvEOUjF3j7MtOBlxvHlik3+AkNk7yGCdmFiBnyOlV/TDQr/:nJebsNy1ikuGeBnR/TDQ9chHdN+ui","tlshash":"dbe3e789a221b67646e3169b93e4c211b3b50544b80ac4e470fd4c9f597ec9c13feefa","first_seen":"2025-06-28T19:00:56.686116Z","last_seen":"2026-08-07T10:47:32.804127Z","times_seen":26697,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlsec.cyou/frank_assets/web3-provider/web3-loader.js","fqdn":"amlsec.cyou","domain":"amlsec.cyou","tld":"cyou"},"ip":{"addr":"104.21.29.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlsec.cyou/","date":"2026-03-13T02:10:04.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlsec.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 18:59:55 GMT","end":"Fri, 29 May 2026 18:59:54 GMT"},"fingerprint":{"sha1":"66:B5:7F:B9:DB:BE:19:67:F4:05:F0:0E:CD:7E:6B:1E:CC:D4:D1:DC","sha256":"D4:A2:10:67:1F:72:5B:FA:E5:C3:96:79:68:EB:3A:CF:5D:62:03:7A:73:9D:44:78:C9:5B:38:04:2B:35:E0:F6"}}},"request":{"raw":"GET /frank_assets/web3-provider/web3-loader.js HTTP/1.1\r\nHost: amlsec.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlsec.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 02:10:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w7Kw7z8dMx%2FNKD%2BKMm35P3Yxj8OD4ZjvZfA2l6%2BYV6eoDJIKayjPRiYaE%2BZ%2BiAkESou5ATjmjU%2BQp2D6%2BAAcqdd15EA7i6ruj78o\"}]}\r\nlast-modified: Mon, 23 Feb 2026 15:55:44 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699c7880-a2f4\"\r\ncf-ray: 9db7800c893035a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41716,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2342), with CRLF line terminators","md5":"4b64ec349c7eeb4324f4e7c20eb7fc98","sha1":"c09046d05daa28ef73e4bf3b58bd6518ce98a271","sha256":"801d62fc02f89e7c1b414392e066dcda139ea3154cb3a48da721ff9a9df49f1f","sha512":"e92c61f409b0a56e41654c1f867089473bed649bf3a8d7167fd1a179993295863f20d0a63b20c5e2c20ba6ee55dab82802c06591cd39d188489a479deefc8b23","ssdeep":"768:sCoOXPhfU4Ui8YG7uOFQgauwF4ifTSQoc8S:SOXXwYG7XQTd4irgS","tlshash":"5b13b8f957a0a8f089a787d5aa131e09fa159c77c7624315f2bc274dbfd2e0cc806e91","first_seen":"2023-10-17T15:07:19Z","last_seen":"2026-08-03T21:00:55.094799Z","times_seen":405,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"amlsec.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"amlsec.cyou/frank_assets/web3-provider/web3-module.js","fqdn":"amlsec.cyou","domain":"amlsec.cyou","tld":"cyou"},"ip":{"addr":"104.21.29.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlsec.cyou/","date":"2026-03-13T02:10:04.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlsec.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 18:59:55 GMT","end":"Fri, 29 May 2026 18:59:54 GMT"},"fingerprint":{"sha1":"66:B5:7F:B9:DB:BE:19:67:F4:05:F0:0E:CD:7E:6B:1E:CC:D4:D1:DC","sha256":"D4:A2:10:67:1F:72:5B:FA:E5:C3:96:79:68:EB:3A:CF:5D:62:03:7A:73:9D:44:78:C9:5B:38:04:2B:35:E0:F6"}}},"request":{"raw":"GET /frank_assets/web3-provider/web3-module.js HTTP/1.1\r\nHost: amlsec.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlsec.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 02:10:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PL4lb0B6s8UoJa12mnePSRSlGrPWajN0VxIHUJd8ifJkIvcRinipu1h4d3M6A8pVw1ZeH5QhgSKtcwUsFWEArOk66kdxJG2L8IOu\"}]}\r\nlast-modified: Mon, 23 Feb 2026 15:55:44 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699c7880-12068b\"\r\ncf-ray: 9db7800c993335a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1181323,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65469), with CRLF line terminators","md5":"fdb972d39af555620a8b6a4bc9c77756","sha1":"c7b28e6f71c0c2888cf400ad380849d028caf7ea","sha256":"f9efb2b2619efa4e6864977644f8a3da8bfab3d5d7b2432c5517b2309076eca4","sha512":"de79599f7d8c8caaef30c5ccbadc8647711d5332a723d49df3618073323a8245bf436f165e588584ee91e7b5332457d26d628c7e23c7a2e83e30d3e77f8e37b9","ssdeep":"6144:srR7xwaDNbrkU6twbWCNvmsMMi3kXScvbKKLNehw8K0ZpV0aX0/g3Evi2Iyj+R:s97xwkk/CWamsM1U1bKC0/Vuy","tlshash":"7225e9d47291b065c2a25ed5402fd00ae33dfd687c4c5169bb17ecf72ca8a89512bf3a","first_seen":"2025-08-09T16:19:25.275935Z","last_seen":"2026-08-03T12:41:36.360791Z","times_seen":65,"resource_available":false,"data":null}},"time_used":753,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":636,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"amlsec.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"amlsec.cyou/frank_assets/web3-provider/web3-data.js","fqdn":"amlsec.cyou","domain":"amlsec.cyou","tld":"cyou"},"ip":{"addr":"104.21.29.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlsec.cyou/","date":"2026-03-13T02:10:04.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlsec.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 18:59:55 GMT","end":"Fri, 29 May 2026 18:59:54 GMT"},"fingerprint":{"sha1":"66:B5:7F:B9:DB:BE:19:67:F4:05:F0:0E:CD:7E:6B:1E:CC:D4:D1:DC","sha256":"D4:A2:10:67:1F:72:5B:FA:E5:C3:96:79:68:EB:3A:CF:5D:62:03:7A:73:9D:44:78:C9:5B:38:04:2B:35:E0:F6"}}},"request":{"raw":"GET /frank_assets/web3-provider/web3-data.js HTTP/1.1\r\nHost: amlsec.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlsec.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 02:10:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qCSqyL6uNTvMHj%2BDUFwhknjfB3TS5BOq%2ByJW17q%2BGo%2B%2FFm1ZVggudiDHeF2XL981dH%2BK0hiK4zu%2FkVIOyKfUJ%2FE9oLXnygyCuSkH\"}]}\r\nlast-modified: Mon, 23 Feb 2026 15:55:44 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699c7880-14ec22\"\r\ncf-ray: 9db7800c993635a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1371170,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (50156), with CRLF line terminators","md5":"593fe112236e6db2f6b5de107a784c84","sha1":"3f4f7741358e4db02a665fafb479415260797ef8","sha256":"ca6fccf55e9e90bbe35a4ece74355fc1485c2a6d00bf7af0a4f2b11bfacbc18d","sha512":"43077452a37a755f742821c95c42567be6fa9c8cb50a5926068bf8bef5885b0b2e886ee7b5921f7b8a315ccd5430f5c9eb608cc5aede934b5a84fffe8afb487c","ssdeep":"24576:x+39dH71t7GgETJvUUSr2Xi58jbmpgA7qa:K","tlshash":"b6258ca557d05cf029ebc3a2f780ddf80706913265ce1ccbd1e7ba8052a7fa5e76640a","first_seen":"2025-08-06T14:19:38.880602Z","last_seen":"2026-08-03T12:41:36.35519Z","times_seen":66,"resource_available":false,"data":null}},"time_used":761,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":614,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"amlsec.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Rubik:ital,wght@0,300..900;1,300..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amlsec.cyou/","date":"2026-03-13T02:10:05.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"6B:DB:3B:B8:9F:A1:8E:49:35:74:D9:D8:24:91:F2:5E:42:56:2F:58","sha256":"37:ED:DF:C4:FB:A3:96:16:9E:47:69:CE:86:A5:35:8E:B5:3A:0B:0B:6A:A1:08:A2:DF:DE:6C:7C:31:BE:94:B1"}}},"request":{"raw":"GET /css2?family=Rubik:ital,wght@0,300..900;1,300..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlsec.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 13 Mar 2026 02:10:05 GMT\r\ndate: Fri, 13 Mar 2026 02:10:05 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5313,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (649)","md5":"d23c245db387dad561e166fe2cea137e","sha1":"48001732790c4e182848658fe1c833d05ec49066","sha256":"c81ea5686e94374f23dd7065b79ea600176e6d1cf215ce9386b729e424c86870","sha512":"64e48d866d1c0036af33eb83fd6c84117154e39871e7061427a6faff5790c79f8bfc1b86852207c6e90a11b2765bb910d3acb8a42363d37fec0499632a41fe8e","ssdeep":"96:dQYgiamA0Zl8DCK9cHoQYgiaiwQYgiaeBFZSQYgiawJQYgiafJc+uJQYgiacNUQV:jINClkIisIvIQI7GIDhClasCs/Aop","tlshash":"dab1bde5481e5044ff472c8263ce6d27de0ea3553494856dabfd0a9aacabc2232647cd","first_seen":"2025-09-12T13:02:42.56913Z","last_seen":"2026-08-07T04:40:52.949486Z","times_seen":2184,"resource_available":false,"data":null}},"time_used":449,"timings":{"blocked":201,"dns":1,"connect":27,"send":0,"wait":47,"receive":0,"ssl":171},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.204.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://amlsec.cyou/","date":"2026-03-13T02:10:05.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://amlsec.cyou\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35348\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 10 Mar 2026 08:04:07 GMT\r\nexpires: Wed, 10 Mar 2027 08:04:07 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:39:37 GMT\r\ncontent-type: font/woff2\r\nage: 237958\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35348,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35348, version 1.0","md5":"6e192bc03c1ec5b2ba6b1281ae4f4a71","sha1":"54dd8ad0f73f88eb7c28888d5582380a978f6571","sha256":"8fb387ef4c02189952d5644187a217863e71db410f9dfb3b0afd0ebc4447bec6","sha512":"412aec2aa07af44d4f5e889ddddb9af73b89cccb793aabbb1161583f3d13ff0adc2053edb329a039fa5bc7c9f5b4a69170365e3ad29cd95a8b81fe9997ae1f7d","ssdeep":"768:Dbm/Jw6U5CNNTG4IwnW0kpZ/NXBeh58pFpS0Lz6fihG4iW3lpsii3AYNb:umF5CN5GVwnONBV20Lz6fihGs33siiQk","tlshash":"97f2f1817ff58f13286ab078b5bf8f5b4778a348509674af92c3e7b48c851c85f12891","first_seen":"2025-06-02T19:11:03.283598Z","last_seen":"2026-08-07T10:47:32.794254Z","times_seen":32638,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":158,"dns":1,"connect":40,"send":0,"wait":42,"receive":47,"ssl":116},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlsec.cyou/assets/img/badge/4.svg","fqdn":"amlsec.cyou","domain":"amlsec.cyou","tld":"cyou"},"ip":{"addr":"104.21.29.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlsec.cyou/","date":"2026-03-13T02:10:04.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlsec.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 18:59:55 GMT","end":"Fri, 29 May 2026 18:59:54 GMT"},"fingerprint":{"sha1":"66:B5:7F:B9:DB:BE:19:67:F4:05:F0:0E:CD:7E:6B:1E:CC:D4:D1:DC","sha256":"D4:A2:10:67:1F:72:5B:FA:E5:C3:96:79:68:EB:3A:CF:5D:62:03:7A:73:9D:44:78:C9:5B:38:04:2B:35:E0:F6"}}},"request":{"raw":"GET /assets/img/badge/4.svg HTTP/1.1\r\nHost: amlsec.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlsec.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 02:10:05 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ftWl2taonUTEWKjeanKRis3y2528j%2FZuVrUMhXFTMEbohIl5Q2nSVHGX9AveasNYcxffnTjeMJ7Kh5UmDOG57F7SPGBjcaB2bIv7\"}]}\r\nlast-modified: Mon, 23 Feb 2026 15:55:43 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699c787f-28b\"\r\ncf-ray: 9db7800c891f35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":651,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dbf93870fc8c1c36d22c0e032f584e02","sha1":"bc85ed50e6f651107449b8bafc6fc93f0d6faf9d","sha256":"ee2e43ffe0c3f48b7bca8c4a4a1a850b0228d4e2bc7de2d6326bda388767467c","sha512":"0318d5aea38a4d03b25d02d0a7a179cac117f6741bdbd71fa6394bda2cd609072a728c1988b13b4fd8d5943539a4e093205f901d1585c3d7cf793f92bee33dcf","ssdeep":"","tlshash":"11f0d3fb1390d3c17b8ecb25e9384e13364f70e3788582c826b9c758dd219c50510bc2","first_seen":"2025-10-28T12:07:02.481185Z","last_seen":"2026-03-18T13:28:02.479614Z","times_seen":12,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"amlsec.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"amlsec.cyou/assets/js/index.js","fqdn":"amlsec.cyou","domain":"amlsec.cyou","tld":"cyou"},"ip":{"addr":"104.21.29.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlsec.cyou/","date":"2026-03-13T02:10:04.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlsec.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 18:59:55 GMT","end":"Fri, 29 May 2026 18:59:54 GMT"},"fingerprint":{"sha1":"66:B5:7F:B9:DB:BE:19:67:F4:05:F0:0E:CD:7E:6B:1E:CC:D4:D1:DC","sha256":"D4:A2:10:67:1F:72:5B:FA:E5:C3:96:79:68:EB:3A:CF:5D:62:03:7A:73:9D:44:78:C9:5B:38:04:2B:35:E0:F6"}}},"request":{"raw":"GET /assets/js/index.js HTTP/1.1\r\nHost: amlsec.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlsec.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 02:10:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t%2FGUtSv9Wy%2F9GLZ2Hilc7aX1Z1YgLUbenW3IRksfk7p5Li3L%2FP2AV4W2y%2FI4KPAkN2cykTwYSg%2F5Sg8inV6CAB7zgd0M7MtGJOEt\"}]}\r\nlast-modified: Mon, 23 Feb 2026 15:55:43 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699c787f-cb\"\r\ncf-ray: 9db7800c892d35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":203,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"f4a2378a72ef8227e1803e9ae0bb9f2f","sha1":"b73f6a6c8800ca5e0ebfdc2924c81742f398141e","sha256":"1d0131a7fc6ff71384fb46115d73228ba8546fa4d509d61602a2d55564916b8a","sha512":"5d69144c4eedde472ca47e270afec95061e5f30c20cbc85a1c1958b256db010cb8487f4d77489dc525876ac95d955505c33f77afd0a7506df7c3c71bfc0906b7","ssdeep":"","tlshash":"8ed022b732820c33caee66f652b003c83918034a24002001388c240a2133fc568fbefb","first_seen":"2025-10-28T12:07:02.483803Z","last_seen":"2026-03-18T13:28:02.493874Z","times_seen":12,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"amlsec.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amlsec.cyou/","date":"2026-03-13T02:10:04.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/swiper@11/swiper-bundle.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlsec.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 02:10:04 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 4774\r\ncf-ray: 9db7800c8bcdc272-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 11.2.10\r\nx-jsd-version-type: version\r\netag: W/\"4816-00NTceTFOXSCfuleSHYg+tVGAkA\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220161-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 37786\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Pse6tCFhxZt3%2FkGtPfPxHFw1yWzmUJm%2FES3EL3AQcX9QKSIpX6Ehjuefs%2Btt61fwrgepaLrehxEe1MgqnQO8pE7P%2F3jtrYyyjIxqcxMJEiFPFhGmN1le4FEz4%2FZEk3hapxg%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18454,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (18199)","md5":"6408a7c2033ed72b31f850268bfa9a0a","sha1":"d3435371e4c53974827ee95e487620fad5460240","sha256":"74ca6aae5468dbc924790c3b4d219a089b90a34bad53a0f7ca3a73e73b6f5ab8","sha512":"b74b551224b5abe662f4380393eab59b8f9481d8aff978af27d66d0e4b4b6eaaa4271f0aedb97c6298b3245915136f52dbc15135b46c04841b8214ea9397cbf4","ssdeep":"192:CzmUJbiKne5JTLdKSme+jeF474nQ7p/l2GZb0Q5RfufKDvAYfg5faeesedOJxbpy:CSUbe5JndKW+Sa0ni24tnWfz4eNi","tlshash":"ce8256a45350182753274f374bb1cbb9e97444c20f9389ae91c0ee58d7facb9132f2a9","first_seen":"2025-06-28T16:11:53.618794Z","last_seen":"2026-08-07T10:14:24.010004Z","times_seen":25754,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":19,"receive":1,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"amlsec.cyou/assets/img/badge/5.svg","fqdn":"amlsec.cyou","domain":"amlsec.cyou","tld":"cyou"},"ip":{"addr":"104.21.29.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlsec.cyou/","date":"2026-03-13T02:10:04.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlsec.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 18:59:55 GMT","end":"Fri, 29 May 2026 18:59:54 GMT"},"fingerprint":{"sha1":"66:B5:7F:B9:DB:BE:19:67:F4:05:F0:0E:CD:7E:6B:1E:CC:D4:D1:DC","sha256":"D4:A2:10:67:1F:72:5B:FA:E5:C3:96:79:68:EB:3A:CF:5D:62:03:7A:73:9D:44:78:C9:5B:38:04:2B:35:E0:F6"}}},"request":{"raw":"GET /assets/img/badge/5.svg HTTP/1.1\r\nHost: amlsec.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlsec.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 02:10:04 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FSCzrcCjOG8rnCikaF6fieUo4WsWTcvFDKNLG08deATY5n6esVa0lUZOncsXlB9c1yBnDTG4FPWZ%2FFdt3uxWaAe1N8QRKaDW4PKp\"}]}\r\nlast-modified: Mon, 23 Feb 2026 15:55:43 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699c787f-2bb\"\r\ncf-ray: 9db7800c892035a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":699,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4a1f129220c876dade5cb4ae9d3a3e23","sha1":"2856cbfc3fd4c658dc2f11b751f729d592c26ffc","sha256":"2dbcbf318ece41421dce8dfbcfd95e03675de4ebe100d1d7d01d2630f22a2f86","sha512":"cfdee404e46998ff4fbb55dfcfa32677121a77d408c0d18bcc0596cfb8521f761b502131ce2ac5a7ccab453e301fcd524a8afaacf0f8b170c6c9639538b9c6cb","ssdeep":"","tlshash":"6a01c0df514a26c0bc164ba0e63a4cb130df30fb31c5e7c532e4c7d8e80158108949c2","first_seen":"2025-10-28T12:07:02.478522Z","last_seen":"2026-03-18T13:28:02.487095Z","times_seen":12,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"amlsec.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"amlsec.cyou/assets/img/partners/2.svg","fqdn":"amlsec.cyou","domain":"amlsec.cyou","tld":"cyou"},"ip":{"addr":"104.21.29.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlsec.cyou/","date":"2026-03-13T02:10:04.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlsec.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 18:59:55 GMT","end":"Fri, 29 May 2026 18:59:54 GMT"},"fingerprint":{"sha1":"66:B5:7F:B9:DB:BE:19:67:F4:05:F0:0E:CD:7E:6B:1E:CC:D4:D1:DC","sha256":"D4:A2:10:67:1F:72:5B:FA:E5:C3:96:79:68:EB:3A:CF:5D:62:03:7A:73:9D:44:78:C9:5B:38:04:2B:35:E0:F6"}}},"request":{"raw":"GET /assets/img/partners/2.svg HTTP/1.1\r\nHost: amlsec.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlsec.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 02:10:04 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ublS6vh1FNPxMd4LjIa971KHTNHgeIBWHUaV5To4e%2BMJX27oFbLnPysq%2BiVBQP218e3l%2FuZdO%2FyTtLVxEoS4sQxRN2NUj%2FdJazep\"}]}\r\nlast-modified: Mon, 23 Feb 2026 15:55:43 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699c787f-104e\"\r\ncf-ray: 9db7800c892235a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4174,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"32d49c58813a98fb54ab43bf05c52130","sha1":"477f42df1eaa93ac41402c3956737819a5978fbf","sha256":"816c09a521d454fd5471c5922254de6c8dce0eda4e37e2877f5cc8b9c50b0d7e","sha512":"b567fc86264057482a6b6b5a68a1e01b576c34e40d5cf26448b02bb6cdeea1df52edbff700f429f163bde30fe999401684e9f66b08adf6a55f8a5f1c245a545d","ssdeep":"96:N02LN99nfjAKeJ8C8zQaRx48nNqfZiow5noCwhKo:NPx9NslWsaYrfZ8noCwhr","tlshash":"c881b7e82be851ed6c8437db8b0b464435f229a669a6c771c3e86c7dd0f640c4db08c7","first_seen":"2025-10-28T12:07:02.479399Z","last_seen":"2026-03-18T13:28:02.483481Z","times_seen":12,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"amlsec.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"amlsec.cyou/assets/img/span/2.svg","fqdn":"amlsec.cyou","domain":"amlsec.cyou","tld":"cyou"},"ip":{"addr":"104.21.29.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlsec.cyou/","date":"2026-03-13T02:10:04.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlsec.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 18:59:55 GMT","end":"Fri, 29 May 2026 18:59:54 GMT"},"fingerprint":{"sha1":"66:B5:7F:B9:DB:BE:19:67:F4:05:F0:0E:CD:7E:6B:1E:CC:D4:D1:DC","sha256":"D4:A2:10:67:1F:72:5B:FA:E5:C3:96:79:68:EB:3A:CF:5D:62:03:7A:73:9D:44:78:C9:5B:38:04:2B:35:E0:F6"}}},"request":{"raw":"GET /assets/img/span/2.svg HTTP/1.1\r\nHost: amlsec.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlsec.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 02:10:04 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IFwdgH2Vq8Heu0iFGR6GDDoSeECG%2Bpnwu7gsGnjOg9I4FUx%2FgXwf0S59ma1QCmeiS2kFYgwxHtScz3DX5DB0z0QdsdkI%2FrZY%2BQq1\"}]}\r\nlast-modified: Mon, 23 Feb 2026 15:55:43 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699c787f-ed3\"\r\ncf-ray: 9db7800c892635a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3795,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ebf5d0980727b22168b0f11d66ce5e3f","sha1":"7867665d203ac685643801a009561315c745b710","sha256":"c3e9ce4b473128b96d80f728f5ef59bb2a747420c5a0133399ce75c0ea985288","sha512":"c54089edddca9157eced09840af835c3c939bfe6b42a61dc36ee33256225202017edcb91415d95f3b0641fd6992b727d90b23de68f9585a4944819cfe9c3f354","ssdeep":"","tlshash":"127155b4b7e9ac2ef154d3acdb518864126ed6a576c08100c6dd7f1b9075cc2993f1cb","first_seen":"2025-10-28T12:07:02.473176Z","last_seen":"2026-03-18T13:28:02.487896Z","times_seen":12,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"amlsec.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"amlsec.cyou/frank_assets/custom.js","fqdn":"amlsec.cyou","domain":"amlsec.cyou","tld":"cyou"},"ip":{"addr":"104.21.29.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlsec.cyou/","date":"2026-03-13T02:10:04.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlsec.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 18:59:55 GMT","end":"Fri, 29 May 2026 18:59:54 GMT"},"fingerprint":{"sha1":"66:B5:7F:B9:DB:BE:19:67:F4:05:F0:0E:CD:7E:6B:1E:CC:D4:D1:DC","sha256":"D4:A2:10:67:1F:72:5B:FA:E5:C3:96:79:68:EB:3A:CF:5D:62:03:7A:73:9D:44:78:C9:5B:38:04:2B:35:E0:F6"}}},"request":{"raw":"GET /frank_assets/custom.js HTTP/1.1\r\nHost: amlsec.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlsec.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 02:10:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5dtq34tQ8z9CQ%2BluErEzX8mP86ANBO52Dd9kU6JBS3bEnJ9tdjch5QBDrQvm4%2FxAMLCS2m7lCKKhQ%2BPDgiEMFRDC%2BHT65JYbKV0x\"}]}\r\nlast-modified: Sat, 28 Feb 2026 19:59:25 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69a3491d-5e39\"\r\ncf-ray: 9db7800c892e35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24121,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2081), with LF, NEL line terminators","md5":"c5cd081ab184ee7ae2233caa4497dbf4","sha1":"e15c6718457c9643acd566a95b3dcf9ecf5bbae9","sha256":"171c405036b0880d90662cba5e16e99c624a45ff8b54375397bc5305bf6f3ca8","sha512":"53eb286d481e97eb34177cf9af14a514b4f4ce044b52713ff3b86449d0d9d582df0cce5069d4a7620605766514ecfb68c0576f8baaf33280b83b18e0b4c607e9","ssdeep":"192:8Bov6ve/AdsGFdo+B2pOIptlomlRtpaMVl2C2V/BSR1pBVjiEtJaaiOCdcdjad0D:8BG6vhdsGFdo+WtM/BSD4qIKJSOvcQf","tlshash":"fdb217616afe0025019b52a7bb6b5b593e60c007784ecd157b7c4ba45f82fc6c873dd8","first_seen":"2026-03-13T02:10:38.885632Z","last_seen":"2026-03-13T02:10:38.885632Z","times_seen":1,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"amlsec.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"amlsec.cyou/frank_assets/web3-provider/web3-modal.js","fqdn":"amlsec.cyou","domain":"amlsec.cyou","tld":"cyou"},"ip":{"addr":"104.21.29.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlsec.cyou/","date":"2026-03-13T02:10:04.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlsec.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 18:59:55 GMT","end":"Fri, 29 May 2026 18:59:54 GMT"},"fingerprint":{"sha1":"66:B5:7F:B9:DB:BE:19:67:F4:05:F0:0E:CD:7E:6B:1E:CC:D4:D1:DC","sha256":"D4:A2:10:67:1F:72:5B:FA:E5:C3:96:79:68:EB:3A:CF:5D:62:03:7A:73:9D:44:78:C9:5B:38:04:2B:35:E0:F6"}}},"request":{"raw":"GET /frank_assets/web3-provider/web3-modal.js HTTP/1.1\r\nHost: amlsec.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlsec.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 02:10:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=42RFauzp20z1eNGKCgsqiITMMlkHjW%2F08S5tCjsd2ZYx%2Fo91RT76ZnPxdKQVkFZNQLklY1UQv9TI2X%2F47krFlFFwPvMmVh1U5aAy\"}]}\r\nlast-modified: Mon, 23 Feb 2026 15:55:44 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699c7880-9307\"\r\ncf-ray: 9db7800c892f35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37639,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (2304), with CRLF line terminators","md5":"eed7d4b80780bb8adee3cbc67d7f98ff","sha1":"20f450d0eaf88312c005763e9036aeed80a225a0","sha256":"5e0ebe3158a15aba5a5e00e9bb2327769203ed6c28b6fd7aca2155d7e05cadc4","sha512":"66c43c8d29392d3e8435d8273fa23c2653e3cf4a36d875f97195100121e59ba73c1b8c7430c41a01a765893f4f0b97b3c153ede123d688ba3f00fcbe7fd74d96","ssdeep":"384:yuWDxb0OzbJ3vF/ll0blqHuCUCaDr/S1ziayMkrN21GecFZPtDQseaTrHyhfdsG2:KV39Nl08O/CaDbS1/k97rShZFc/","tlshash":"acf286f02bec12b4853f434376592d74bb1114fa9ebabf4575fe1a828f96e0c412a4d2","first_seen":"2024-05-02T20:25:27Z","last_seen":"2026-08-03T21:00:55.072731Z","times_seen":208,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"amlsec.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"amlsec.cyou/assets/img/partners/5.svg","fqdn":"amlsec.cyou","domain":"amlsec.cyou","tld":"cyou"},"ip":{"addr":"104.21.29.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlsec.cyou/","date":"2026-03-13T02:10:04.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlsec.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 18:59:55 GMT","end":"Fri, 29 May 2026 18:59:54 GMT"},"fingerprint":{"sha1":"66:B5:7F:B9:DB:BE:19:67:F4:05:F0:0E:CD:7E:6B:1E:CC:D4:D1:DC","sha256":"D4:A2:10:67:1F:72:5B:FA:E5:C3:96:79:68:EB:3A:CF:5D:62:03:7A:73:9D:44:78:C9:5B:38:04:2B:35:E0:F6"}}},"request":{"raw":"GET /assets/img/partners/5.svg HTTP/1.1\r\nHost: amlsec.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlsec.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 02:10:05 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bm0xrOZ%2BgvS0kq6g2ktIy%2BQwMAzVhpy1UchsIRjaOERK9Q8kXvAMUuz9CNiCtC5MuQYdKRw9rKTSVfrxvYyqcEqCeiVE3E5gH66G\"}]}\r\nlast-modified: Mon, 23 Feb 2026 15:55:43 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699c787f-fda\"\r\ncf-ray: 9db7800c892535a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4058,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a4fb65d149057b109549fc1e3dcf169c","sha1":"a0743c86c4147a37436769d634aa5d601a11fb46","sha256":"4807540e848a2bdf900289a178c6d7c179462e5823d01f48539b77abbf10c48a","sha512":"429de24b6abeb9e35f59d63789e9cf5d238da71b4ae1b81bd163e537fe417da67c78e50ac8a13c9def973702569c0bbd4fdd1dc3dce380e8ccb65c2cba9c85b5","ssdeep":"","tlshash":"7581964c6bbe99dcba48d7feab4051ec344826ff202254e7ca4e1e2e504644d4c92ec3","first_seen":"2025-10-28T12:07:02.476192Z","last_seen":"2026-03-18T13:28:02.493062Z","times_seen":12,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"amlsec.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"amlsec.cyou/frank_assets/web3-provider/web3-connect.js","fqdn":"amlsec.cyou","domain":"amlsec.cyou","tld":"cyou"},"ip":{"addr":"104.21.29.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlsec.cyou/","date":"2026-03-13T02:10:04.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlsec.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 18:59:55 GMT","end":"Fri, 29 May 2026 18:59:54 GMT"},"fingerprint":{"sha1":"66:B5:7F:B9:DB:BE:19:67:F4:05:F0:0E:CD:7E:6B:1E:CC:D4:D1:DC","sha256":"D4:A2:10:67:1F:72:5B:FA:E5:C3:96:79:68:EB:3A:CF:5D:62:03:7A:73:9D:44:78:C9:5B:38:04:2B:35:E0:F6"}}},"request":{"raw":"GET /frank_assets/web3-provider/web3-connect.js HTTP/1.1\r\nHost: amlsec.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlsec.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 02:10:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Ya7oJMncmrNafgCv%2FHLJWYKxMnMvyUrKybigk5jtzypMtEyq%2BWi9wr7F6IXt81llGp%2FaMfR8NA6L69rxQ0b%2BNDQMGB%2FXshAweZ1\"}]}\r\nlast-modified: Mon, 23 Feb 2026 15:55:44 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699c7880-b676a\"\r\ncf-ray: 9db7800c993135a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":747370,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (50824)","md5":"47f795b848c217887b6b777101941080","sha1":"e35aedb35e68be3a777324fd92adf7396132b7b2","sha256":"39f201db3b9481261cc1660c3c2f9880fb09ef44c1e5fe5d9e2fd9deb818bd10","sha512":"ec7124aea23a2262ca514584d77395d39f27134ed5938b4dee942ef87170067e4195b2e9feb595b68deb412cd1916d539c658f06a36543fe54708ef7869ff93c","ssdeep":"6144:Nyk4F3cPmw7kM9YTIPAIhKVlbolFdQMPjqUY2OoGHFiRlQIiH+O3+2zrbwRbCNvr:0SY0zGliQIipDwRbamsjEmLR","tlshash":"e7f4f984b6a4b061439765a4003f540ff27aba2d780a44bcf654d8f6bcbc98d653bf39","first_seen":"2023-03-07T14:37:40Z","last_seen":"2026-08-07T08:59:16.710547Z","times_seen":651,"resource_available":true,"data":null}},"time_used":465,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":346,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"amlsec.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"amlsec.cyou/frank_assets/web3-provider/web3-seaport.js","fqdn":"amlsec.cyou","domain":"amlsec.cyou","tld":"cyou"},"ip":{"addr":"104.21.29.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlsec.cyou/","date":"2026-03-13T02:10:04.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlsec.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 18:59:55 GMT","end":"Fri, 29 May 2026 18:59:54 GMT"},"fingerprint":{"sha1":"66:B5:7F:B9:DB:BE:19:67:F4:05:F0:0E:CD:7E:6B:1E:CC:D4:D1:DC","sha256":"D4:A2:10:67:1F:72:5B:FA:E5:C3:96:79:68:EB:3A:CF:5D:62:03:7A:73:9D:44:78:C9:5B:38:04:2B:35:E0:F6"}}},"request":{"raw":"GET /frank_assets/web3-provider/web3-seaport.js HTTP/1.1\r\nHost: amlsec.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlsec.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 02:10:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qgYVBt12krt65IgEJP8u9KTWsU8Fb5dfhEm%2FSaj4q1vcIilIFqtfqzV0irBhaXUSfwTKf2UYKCXifXAJTSK3uOIyPrqbQwl9bXtj\"}]}\r\nlast-modified: Mon, 23 Feb 2026 15:55:44 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699c7880-1545e1\"\r\ncf-ray: 9db7800c993535a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1394145,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8409bd44cc9607a1785103eeca0bab1b","sha1":"7bc230c316a5464261b9d0d104efd0e96b869152","sha256":"69c0a23d91d9b2d73b8b466b70c69d4aac96a9a295d742bf0cf8559de356a38d","sha512":"34ad01e3b4d07eced34b8cbd7d6e7f1529d0f0e88a6d7b01dbe2c572bdae6ded9cf62046f00334af4e6a4e6a82e75f0db1962586932c753fcf79436ce544d07b","ssdeep":"24576:VYxEUUAXPiSSwILi93wZcevwrr1LGxaxHxJ4y6:VYxEUUKW","tlshash":"5625a540e2d1ac99179b8b76b717b0f6e44f19aa38c84c4fe040bc60569c727f9e5af4","first_seen":"2025-07-30T19:56:55.442463Z","last_seen":"2026-07-27T11:44:45.123493Z","times_seen":52,"resource_available":false,"data":null}},"time_used":1466,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":1315,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"amlsec.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"amlsec.cyou/frank_assets/main.js","fqdn":"amlsec.cyou","domain":"amlsec.cyou","tld":"cyou"},"ip":{"addr":"104.21.29.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlsec.cyou/","date":"2026-03-13T02:10:04.945Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlsec.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 18:59:55 GMT","end":"Fri, 29 May 2026 18:59:54 GMT"},"fingerprint":{"sha1":"66:B5:7F:B9:DB:BE:19:67:F4:05:F0:0E:CD:7E:6B:1E:CC:D4:D1:DC","sha256":"D4:A2:10:67:1F:72:5B:FA:E5:C3:96:79:68:EB:3A:CF:5D:62:03:7A:73:9D:44:78:C9:5B:38:04:2B:35:E0:F6"}}},"request":{"raw":"GET /frank_assets/main.js HTTP/1.1\r\nHost: amlsec.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlsec.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 02:10:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PQt8csmrF3cwr85HxfOvrHykIA%2BR9oALiJJA6CUUEKRx5xz2XU5Aeljo%2FX3TG7CZvGv6vXRUJhmbbVGVjgnDdXyeMUBgMuX7RkyU\"}]}\r\nlast-modified: Mon, 23 Feb 2026 15:55:44 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699c7880-aed5\"\r\ncf-ray: 9db7800ca93c35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44757,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44483), with no line terminators","md5":"86a3e3e81c5c17fa523b77d840191f20","sha1":"c56885d0686c612e06714902a96b1307ce8a03b3","sha256":"4f0991493dbdcecc0605c0945c6c77ccb12a649c44a5c21a17c26ddb5e1052f9","sha512":"b59933abac4ff1c2970c1cb3ace5cfd786d2b8ee5db64f2444099275a2ba5a71c368b0c9c7166bafb9c19461814a3c0c3780f4747b25ca6bf3ad45a81b45f8e2","ssdeep":"768:XkRthpdmKF2LZAzA02SB+J6201phRDjLt6jZsAWpDx6wbYLIKZexahoejFVSRSru:mVzdyzNcyCt5","tlshash":"c613a590a3d2a9dd03f38e73b61ba0dde45b1dad358c4867d141fea02db4725d8e22b0","first_seen":"2026-02-25T20:06:41.63366Z","last_seen":"2026-03-18T13:28:02.495757Z","times_seen":6,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"amlsec.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"amlsec.cyou/assets/css/index.css","fqdn":"amlsec.cyou","domain":"amlsec.cyou","tld":"cyou"},"ip":{"addr":"104.21.29.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://amlsec.cyou/","date":"2026-03-13T02:10:04.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlsec.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 18:59:55 GMT","end":"Fri, 29 May 2026 18:59:54 GMT"},"fingerprint":{"sha1":"66:B5:7F:B9:DB:BE:19:67:F4:05:F0:0E:CD:7E:6B:1E:CC:D4:D1:DC","sha256":"D4:A2:10:67:1F:72:5B:FA:E5:C3:96:79:68:EB:3A:CF:5D:62:03:7A:73:9D:44:78:C9:5B:38:04:2B:35:E0:F6"}}},"request":{"raw":"GET /assets/css/index.css HTTP/1.1\r\nHost: amlsec.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlsec.cyou/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 02:10:04 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uJuimpopp6NhmMVbF8l%2BdS0gyZrjARCP9n3dFMQvQLWAyYF3A7C4VedKU95UlmltRHNEBiY7QLWy26nOFHkGprmNnHOoVOjsfiO9\"}]}\r\nlast-modified: Mon, 23 Feb 2026 15:55:43 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699c787f-7c6a\"\r\ncf-ray: 9db7800c791a35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31850,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (331)","md5":"f2fec01aa960fb6705f4b1534c79a06d","sha1":"264b016b518a0c98be24703a6441663c1b732305","sha256":"ce3a77ba418de8a3e20a6db02aa5a727d7f6d0591d47b8b8942acad2bb77d8f0","sha512":"557a324db1441b0d0c9bc4888e240578585522dfc1fd657ff1962f3aee33079cde75de16994c1dcc2bfc9535c85b0b8994a69e8ef0c2d27645ed60ba9105f447","ssdeep":"768:+6GZnPHRpPcshWxuoS4xDUlIVx6+l2+8Uw3m0tnH+AXxsVswH/gpH4qQbHdhbMCz:tGZnPxpPcshWxuoSKDUlIX6+l2+8Uw3y","tlshash":"87e2509a66b41244641bc8b87ca39b44b7ac4403825ee5bd7df6104c8fce1cad6f6bcd","first_seen":"2025-10-28T12:07:02.488312Z","last_seen":"2026-03-18T13:28:02.492391Z","times_seen":12,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"amlsec.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"amlsec.cyou/assets/img/partners/4.svg","fqdn":"amlsec.cyou","domain":"amlsec.cyou","tld":"cyou"},"ip":{"addr":"104.21.29.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlsec.cyou/","date":"2026-03-13T02:10:04.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlsec.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 18:59:55 GMT","end":"Fri, 29 May 2026 18:59:54 GMT"},"fingerprint":{"sha1":"66:B5:7F:B9:DB:BE:19:67:F4:05:F0:0E:CD:7E:6B:1E:CC:D4:D1:DC","sha256":"D4:A2:10:67:1F:72:5B:FA:E5:C3:96:79:68:EB:3A:CF:5D:62:03:7A:73:9D:44:78:C9:5B:38:04:2B:35:E0:F6"}}},"request":{"raw":"GET /assets/img/partners/4.svg HTTP/1.1\r\nHost: amlsec.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlsec.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 02:10:05 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aNPC9nDkDFxZQtkuaPmLGI77X%2FkZNRaImE2gkvR4qq%2BsEvX4mNIhSi3cMsduBCcS3daRT%2F0tWe5VO6RNME1wmmO49mXamNzHarH3\"}]}\r\nlast-modified: Mon, 23 Feb 2026 15:55:43 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699c787f-28ce\"\r\ncf-ray: 9db7800c892435a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10446,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"419b486704dd42a0a9dc2ea4ac4c535b","sha1":"ec77d44130605958a55a36dcb5115d55d63544ca","sha256":"2db862132f97a576667839bf9afd44856d75c9a3de8a14b849d7acdc99b93b2a","sha512":"110af03383f3de450ff7337814b5d0a242534b412dd1ce54ebbc6c8038d09bd34eb5258596a37d925c927a96789a049cb99228ad7f72543ea62432cd1a307be8","ssdeep":"192:qC69bybfEWbbydZ2K67iGSIMa1ecks9hh4rPz/JUiri:qLybffmdZYSXa1/T8Pz+Si","tlshash":"ce22f7dcab700df4e988e3feeb81442c3816a9fb6d91ca19c76d4d38599284d8814ccb","first_seen":"2025-10-28T12:07:02.484615Z","last_seen":"2026-03-18T13:28:02.502988Z","times_seen":12,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"amlsec.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"amlsec.cyou/assets/img/start.svg","fqdn":"amlsec.cyou","domain":"amlsec.cyou","tld":"cyou"},"ip":{"addr":"104.21.29.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlsec.cyou/","date":"2026-03-13T02:10:04.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlsec.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 18:59:55 GMT","end":"Fri, 29 May 2026 18:59:54 GMT"},"fingerprint":{"sha1":"66:B5:7F:B9:DB:BE:19:67:F4:05:F0:0E:CD:7E:6B:1E:CC:D4:D1:DC","sha256":"D4:A2:10:67:1F:72:5B:FA:E5:C3:96:79:68:EB:3A:CF:5D:62:03:7A:73:9D:44:78:C9:5B:38:04:2B:35:E0:F6"}}},"request":{"raw":"GET /assets/img/start.svg HTTP/1.1\r\nHost: amlsec.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlsec.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 02:10:05 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FsQNNxNDhO08vObE25X2JvrKzFtJ4V106GHP0bVpACjGw1yQJZUv6H7%2FGMiWK0lWwtoU1S3Bx3LLzWoYzZdttSRh8biy%2Fw9YnM1U\"}]}\r\nlast-modified: Mon, 23 Feb 2026 15:55:43 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699c787f-da9eb\"\r\ncf-ray: 9db7800c892b35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":895467,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"68a76b4a3992bb1e0fc422a1293f0b53","sha1":"86d0f96620ff2a1bd00d73704a6914fcb554766a","sha256":"ceb1bc1b857bd7ef669598db0f88043b5e6a1012326c85e9c44b55cc05bc6be3","sha512":"03fa6fc33297627e508ae494f9b7067d8a11bac892840927f40c3c16e8d8f9582bdecb8329ef59dd41e96908ba06ec957003b05c7d82cf86e1d15576360cdf48","ssdeep":"12288:ngunPi15Xa+RcxfigKfQxK/3Nn/R4lMYmp86do:lP/aNfQxQN/R+U0","tlshash":"a5156cde2bb16ddc0ad88bdbbf4250ec2d2a90b7ad5cce19c09d5f4d1085d1c9e0a6d2","first_seen":"2025-10-28T12:07:02.467811Z","last_seen":"2026-03-18T13:28:02.484848Z","times_seen":12,"resource_available":false,"data":null}},"time_used":1264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":1105,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"amlsec.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"amlsec.cyou/frank_assets/web3-provider/web3-router.js","fqdn":"amlsec.cyou","domain":"amlsec.cyou","tld":"cyou"},"ip":{"addr":"104.21.29.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://amlsec.cyou/","date":"2026-03-13T02:10:04.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlsec.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 18:59:55 GMT","end":"Fri, 29 May 2026 18:59:54 GMT"},"fingerprint":{"sha1":"66:B5:7F:B9:DB:BE:19:67:F4:05:F0:0E:CD:7E:6B:1E:CC:D4:D1:DC","sha256":"D4:A2:10:67:1F:72:5B:FA:E5:C3:96:79:68:EB:3A:CF:5D:62:03:7A:73:9D:44:78:C9:5B:38:04:2B:35:E0:F6"}}},"request":{"raw":"GET /frank_assets/web3-provider/web3-router.js HTTP/1.1\r\nHost: amlsec.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlsec.cyou/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 02:10:05 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hyVR4rQuzpp0U6dvsDP9ASmH768S2qQhe1elw1%2FTmPTvNlQXeiWifITG%2Bh%2BHvvGAg2PSWb9joXcXa5nEv%2FXb7KeXl076W%2FH2wb%2FD\"}]}\r\nlast-modified: Mon, 23 Feb 2026 15:55:44 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699c7880-9881f\"\r\ncf-ray: 9db7800c993235a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":624671,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (58483)","md5":"85a56c216646e3aa7ae57bab1b834845","sha1":"2a2cd889995e1d2a2c469afca8e7605034afd2d6","sha256":"c259624218132a2cd36ad673de1ef15631307c4c491c3c63b5e930084b6308ef","sha512":"268f515873f0160d2a49020afdf40a9b2b4a9243df2fce5ba7cad114a8f6771d987573c65688889472c0bc6853a41cc61a42e09457fb5971b61703e540b1be80","ssdeep":"12288:7KY9J6iZolXNgr1uogYc86/O/B1rQnRIwhFhAWsfpD2LeQE8mq:7KY9poNyhdcxWBVQnAVfgLeg","tlshash":"e4d439d472a6f039439753a8547f0186f33d6854700c806cf7acf9eaa8a9599c67bf38","first_seen":"2023-06-30T00:51:10Z","last_seen":"2026-08-03T12:41:36.358004Z","times_seen":327,"resource_available":true,"data":null}},"time_used":464,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":345,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"amlsec.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"amlsec.cyou/","fqdn":"amlsec.cyou","domain":"amlsec.cyou","tld":"cyou"},"ip":{"addr":"104.21.29.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-13T02:10:04.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlsec.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 18:59:55 GMT","end":"Fri, 29 May 2026 18:59:54 GMT"},"fingerprint":{"sha1":"66:B5:7F:B9:DB:BE:19:67:F4:05:F0:0E:CD:7E:6B:1E:CC:D4:D1:DC","sha256":"D4:A2:10:67:1F:72:5B:FA:E5:C3:96:79:68:EB:3A:CF:5D:62:03:7A:73:9D:44:78:C9:5B:38:04:2B:35:E0:F6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: amlsec.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Mar 2026 02:10:04 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nlast-modified: Sat, 28 Feb 2026 19:59:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NQVDsg2xn5O%2F3VESKhaz4d9o%2FQ6wEenFXqIi3n2y4QO5tejbPszvTZy%2BU%2Fq8d9rtUGuDFvPUJjFUEdnTYmCN%2BIf4fCK4N0sSZeTB\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9db7800a7dda8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":32375,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"98ab6d09498e49eef106ff3f17fc84b9","sha1":"9a780ed0f16a751dbc59bfc1c5d4d3e61b3309a0","sha256":"7296e9ec02695f5bf360369689e7ed38c970e1b26de3014761ac50f4c8803cbb","sha512":"6457492148ee3ec0c5b24067f7860c91b0b4f193c5f766c4800eb6cf5ca2d8dbfe1e7771894c61ad2e3e4cb9dd24821d1513fc48e42934fca33a89ca68cbd6f9","ssdeep":"192:gMRkrF/9wOxLuLSML5LsLuLYL5LXg4dAzandAzHgD9OMLUxrNNdM:VRuFXESKVqEmVByzanyzocrPdM","tlshash":"18e2363068f651330097a2d0aaa14b6b7ed09703cbb6460533fd4be69f93ed9ce0b815","first_seen":"2026-02-25T20:06:41.63535Z","last_seen":"2026-03-18T13:28:02.502421Z","times_seen":6,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":64,"dns":48,"connect":1,"send":0,"wait":126,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"amlsec.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}},{"url":{"schema":"https","addr":"amlsec.cyou/assets/img/badge/1.svg","fqdn":"amlsec.cyou","domain":"amlsec.cyou","tld":"cyou"},"ip":{"addr":"104.21.29.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://amlsec.cyou/","date":"2026-03-13T02:10:04.909Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"amlsec.cyou","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 18:59:55 GMT","end":"Fri, 29 May 2026 18:59:54 GMT"},"fingerprint":{"sha1":"66:B5:7F:B9:DB:BE:19:67:F4:05:F0:0E:CD:7E:6B:1E:CC:D4:D1:DC","sha256":"D4:A2:10:67:1F:72:5B:FA:E5:C3:96:79:68:EB:3A:CF:5D:62:03:7A:73:9D:44:78:C9:5B:38:04:2B:35:E0:F6"}}},"request":{"raw":"GET /assets/img/badge/1.svg HTTP/1.1\r\nHost: amlsec.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://amlsec.cyou/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 13 Mar 2026 02:10:05 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yKChUrIBIjBEBxgdwzvTqmLWKr5FrtT1CXAIuyczJIVfwnLmF%2BaLWW9zhB4uKtMHCNYKVrly098Nmx9sSS1%2FPJg3WV5u1sos3wPK\"}]}\r\nlast-modified: Mon, 23 Feb 2026 15:55:43 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"699c787f-e72\"\r\ncf-ray: 9db7800c891c35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3698,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b64c93567545cac617a4e3bfe4f08ab5","sha1":"296c0459b849f9ae9adc3519dc06664b91f2a4a4","sha256":"2f32a7720a714672ce9786416137dc624b4e434c66924ea80807e5580c570cba","sha512":"eaf1ad9958218ff9a450129955885dc65a7260cc80a99b675ded6850ffad2fbb579f53067aeef202ea7135c4578e2e85d414ae6991195b359fb77aec7d59d577","ssdeep":"","tlshash":"90712ff861d5d7c09a87cf34de3359e29d032dfa9fd5a68d8160d8e4f3a01a8c947889","first_seen":"2025-10-28T12:07:02.476925Z","last_seen":"2026-03-18T13:28:02.482729Z","times_seen":12,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-13","alert":"Sinkholed","trigger":"amlsec.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Scam - Fraudulent Crypto Site","verdict":"scam","severity":"medium","comment":"","tags":["scam","fraud","crypto"],"meta":null}]}}]}