Should be linking to https://tlstoy.com/about, no? The root of the domain seems to be the API endpoint (and consistently returns "verdict: fraud" to a standard Safari browser, so not sure what's up with that).

Detect proxy usage and request forgery.