Fixed a false positive that reported analytics and RUM endpoints (Datadog, Dynatrace, PerimeterX, AWS WAF and others) as card skimming. Card detection now requires a valid issuer prefix and the matching length, not just a Luhn check. The behavioural cryptominer rule no longer fires on WebAssembly applications such as WhatsApp Web; it now requires a WebSocket to a raw IP address.