{"report_id":"92e3ba98-144b-4d6f-8e16-51eaa4cc46a8","version":0,"status":"done","tags":[],"date":"2026-10-10T22:23:36Z","url":{"schema":"http","addr":"hillsmp.com/","fqdn":"hillsmp.com","domain":"hillsmp.com","tld":"com"},"ip":{"addr":"172.67.161.184","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"hillsmp.com/","fqdn":"hillsmp.com","domain":"hillsmp.com","tld":"com"},"title":"Hill SMP","dom":{"size":9444,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"91ee0ff734e8fc2e7e8b65d2aa6eaaa8","sha1":"ede456060cc09f719d32fbe670f31eb833ff4420","sha256":"182278d2b18907badfa9264d5272a9c17301d87e566d54c906062d9d8bfa47a7","sha512":"8986153be35a3498796b9d6f7094f912cfb189c2c99422e1b4c0b35bab655f6297c276c449ec002b8882af892c24b0205b37cd2605b22f54553ea139b0403264","ssdeep":"192:hRswVWraYNbqLLjjmqN4m98X+V9Fn4qFQePJD8Hqq/CWv:hRsrraYN2nHmqNP8XKp4RCJInPv","tlshash":"d41243a2a8f5153b8093d2dabb26ef0ebad1d503d50baa4472fc53884fd2d429c5359c","dom_hash":"domhashe21f7f69bc500df4f4c8d4443d692dee","first_seen":"2026-10-10T22:23:42.031865Z","last_seen":"2026-10-10T22:23:42.031865Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"hillsmp.com/","fqdn":"hillsmp.com","domain":"hillsmp.com","tld":"com"},"ip":{"addr":"172.67.161.184","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-14T22:23:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"hillsmp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"hillsmp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"hillsmp.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"hillsmp.com","ip":{"addr":"104.21.15.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":18,"request_count":6,"received_data":281969,"sent_data":3101,"comment":"","tags":null,"fingerprints":[{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:5.3.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-10-04T23:23:27.025218Z","alert_count":0,"request_count":2,"received_data":315101,"sent_data":1012,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.mcsrvstat.us","ip":{"addr":"104.26.15.225","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-08-31","domain_rank":3114476,"first_seen":"2018-02-02T14:29:44Z","last_seen":"2026-09-14T12:46:54.325444Z","alert_count":0,"request_count":1,"received_data":18937,"sent_data":469,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-10-04T22:47:33.985443Z","alert_count":0,"request_count":1,"received_data":541207,"sent_data":474,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"hillsmp.fun","ip":{"addr":"104.21.17.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-12","domain_rank":0,"first_seen":"2026-10-10T22:23:37.454251Z","last_seen":"2026-10-10T22:23:37.454251Z","alert_count":0,"request_count":1,"received_data":1051,"sent_data":565,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e477967e482f32e65d4ea9b2fd8e106","sha1":"ddc6e9ead6d16ae9237399ce41e8c1620cc59c36","sha256":"0833b2e9c3a26c258476c46266e6877fc75218625162e0460be9a3a098a61c6c","sha512":"ecf8bfa2d7656db091f8b9d6f85ecfc057120c93ae5090773b1b441db838bd232fcef26375ee0fa35bf8051f4675cf5a5cd50d155518f922b9d70593f161741a","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU078:HwORx3YCD45wZbDZTb0g8","tlshash":"ce73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","size":80721,"data":"","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-10-11T01:43:43.292768Z","times_seen":33058,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-04C5Z2VPT2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3916a0c213e85aff1fe62d0ad71336bb","sha1":"57b53e78d171a84bbcb39c3901784bd63adcbf4e","sha256":"8c89fbbc81a61d6b2c4961a4b0418a341f270694f1be6b198331f8244878d3f2","sha512":"addf39f969304403ebf5b72e6c8baf8556b5856dd1c7101410eaf932038d5124270b56b2ba372eae724e68e6433b9d7ba690bb2678445f726650fc984d11d3a1","ssdeep":"6144:QhsfCyqMnhImaVlQV+cfIb/EfD3ceiXmcw2rSGer/4p:aEKmWJmc/Wu","tlshash":"f5b408ceb3c6742293a6f578903f01cb657a29a2b45cc89af189dce02d3465a5173f7c","size":540603,"data":"","first_seen":"2026-10-10T22:23:42.043709Z","last_seen":"2026-10-10T22:23:42.043709Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hillsmp.com/","fqdn":"hillsmp.com","domain":"hillsmp.com","tld":"com"},"ip":{"addr":"104.21.15.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"44ee84a4d911edc66f2267c8dea9272b","sha1":"172dda4cb6bd9ab33c1ecfbb6be34d389833117f","sha256":"8afb3d2995c6dc9a3b8f052d9d3cd189c164702fa224aa5b89b9f417d44afc43","sha512":"5c0751f7f83703dbea6e5b073a14700ed9735afbe60bf917216a37b171da21adb58de958393bc9fb2a91ddc1156845004fc38f38af3bfc3a9c3080448b39a7ad","ssdeep":"","tlshash":"68c08c98210b0c7051aa2a411b7fa200b405320394d06921280a23044f20d039b44a54","size":155,"data":"","first_seen":"2026-10-10T22:23:42.050543Z","last_seen":"2026-10-10T22:23:42.050543Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hillsmp.com/","fqdn":"hillsmp.com","domain":"hillsmp.com","tld":"com"},"ip":{"addr":"104.21.15.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d4e6e188ea17a19bb8be64bde16a39d7","sha1":"8aabda2c84d521808472590574bd12030be47af5","sha256":"e24374dc8343e183db058aa826e59a3a5634f1d0fc5c42fb8488c841faeb88b2","sha512":"2561119a5c730c8aaaed5792f70b79f8faf118bf4737a5ae78bad24eb6ee3c87d0dd94ad3eb8dcc91c24632175b293d4fc35cb8058fac4d5f412608583a97e2e","ssdeep":"","tlshash":"86111f1e3227015d994fa6da6607b20c3430f8033907ce52b2cc96143fc872db895bf8","size":1066,"data":"","first_seen":"2026-10-10T22:23:42.05209Z","last_seen":"2026-10-10T22:23:42.05209Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hillsmp.com/","fqdn":"hillsmp.com","domain":"hillsmp.com","tld":"com"},"ip":{"addr":"104.21.15.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3e4805a843f3b268161dbece5d2c28f6","sha1":"e995fa65737c2e12c6bb81b6ef864ee9bef7ce1c","sha256":"a2a9534a2a4e19f60c04ff7bb745e0927ca6aec40811495f56e5f7f67182b1fc","sha512":"8e0cd4f24e7d4679959aa80207b73552e0924c98f1b6239cafba028a509cb127aacbd4401d9ebfbb624f8d2e9783f874cd20bc248cc1a6a1153739d646785a9e","ssdeep":"","tlshash":"85f0469bbdab097955fba8be457f8348313154074884d2097d3ca4215fa0f861ca67da","size":602,"data":"","first_seen":"2026-10-10T22:23:42.053356Z","last_seen":"2026-10-10T22:23:42.053356Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"hillsmp.com/","fqdn":"hillsmp.com","domain":"hillsmp.com","tld":"com"},"ip":{"addr":"104.21.15.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-10T22:23:05.488Z","timestamp":1791670985488,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hillsmp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 07:15:10 GMT","end":"Wed, 23 Dec 2026 08:12:44 GMT"},"fingerprint":{"sha1":"26:72:C4:10:29:CF:7A:9E:DB:23:0D:4D:3D:05:21:84:C7:C6:4F:FA","sha256":"38:E3:B2:8B:4B:D0:F2:B4:AF:59:8E:60:AF:F0:CB:76:67:83:1C:FA:2A:AC:ED:E2:27:40:39:59:30:56:5F:B5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: hillsmp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 22:23:05 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MewLpZNIGKnEddkfMF5FWhZj80JYqcc3cfkYBMcPcIq%2FOS3%2B6ngsynQmSX1mMA9YleH1XHdglOHzJ9nfqKKHSJfIz7CylLSeRIQASq4TxWWowpmNMLhXOp%2F7PGt6LA%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a489070b8ed5568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:5.3.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":9372,"size_decoded":3688,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"15f07444fa31f99aa60305f31af7cd87","sha1":"60c95ce66863f4beca36f0d797a57de968b63e46","sha256":"99612aedf57fa8c11c10b79002d6480cd36af7131bc9248d9dedbf8bd9c1b292","sha512":"c3a301d05e1c96656568255fef0154f3be8883c7709c72416a737db54aea236df532e3686f6edf27f493942c6e844c0bf47224d8c1694e2d4890e5022e77e800","ssdeep":"192:vRswVW+aYNbqLsj/mqN4m98X+V9Fn4qFQqPJD8Hqq/CWT:vRsr+aYN2I7mqNP8XKp4ReJInPT","tlshash":"a31254a2a4f5153b8093d2cabb36ef0ebac2d503d54ba64472fc53884fd2e429c5359c","first_seen":"2026-10-10T22:23:42.036348Z","last_seen":"2026-10-10T22:23:42.036348Z","times_seen":1,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":0,"dns":5,"connect":23,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"hillsmp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"hillsmp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"hillsmp.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hillsmp.com/","date":"2026-10-10T22:23:06.023Z","timestamp":1791670986023,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap@5.3.3/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hillsmp.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 5.3.3\r\nx-jsd-version-type: version\r\netag: W/\"38d63-xawd7pYctZoEUlbsID9p4xeHL3w\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 10 Oct 2026 22:23:06 GMT\r\nage: 1079347\r\nx-served-by: cache-fra-eddf8230218-FRA, cache-bma-essb1270026-BMA\r\nx-cache: MISS, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 33206\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":232803,"size_decoded":33988,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"a549af2a81cd9900ee897d8bc9c4b5e9","sha1":"c5ac1dee961cb59a045256ec203f69e317872f7c","sha256":"3c8f27e6009ccfd710a905e6dcf12d0ee3c6f2ac7da05b0572d3e0d12e736fc8","sha512":"8e74ae0384acd8f9248a448e2ed62cf0195821e7882b587df6dcb861fbd13c0973af7efbbebdc25c36fbb1bede1040588c3b5c623f808c11f714bbf9b9226e5e","ssdeep":"1536:O9YnIWbn98fdRfvO5wlP77k9P3EV98IsYRElV6V6pz600I41r:RnIw98fbV986I6V6pz600I41r","tlshash":"dc3482d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-10-11T01:43:43.487637Z","times_seen":28487,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":9,"receive":4,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hillsmp.com/assets/img/logo.png?v=24341714325606","fqdn":"hillsmp.com","domain":"hillsmp.com","tld":"com"},"ip":{"addr":"104.21.15.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hillsmp.com/","date":"2026-10-10T22:23:06.038Z","timestamp":1791670986038,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hillsmp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 07:15:10 GMT","end":"Wed, 23 Dec 2026 08:12:44 GMT"},"fingerprint":{"sha1":"26:72:C4:10:29:CF:7A:9E:DB:23:0D:4D:3D:05:21:84:C7:C6:4F:FA","sha256":"38:E3:B2:8B:4B:D0:F2:B4:AF:59:8E:60:AF:F0:CB:76:67:83:1C:FA:2A:AC:ED:E2:27:40:39:59:30:56:5F:B5"}}},"request":{"raw":"GET /assets/img/logo.png?v=24341714325606 HTTP/1.1\r\nHost: hillsmp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hillsmp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 22:23:06 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 10 Aug 2025 20:16:26 GMT\r\netag: \"154aa-63c087b483a80\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cUE4E81QMd4ltZNd4HLsCnzQnopgolLTHTf50e404jSP33nrIzYi1BPBy9OpjcazG16ACfuuGFOEn%2B0%2BcTONYG1Ckkc0bXzn6UmcoaNjExAQGSH2Uw3WdzDHam8RzA%3D%3D\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=120\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a489070ecf23568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 87210\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87210,"size_decoded":87899,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"72e631b6baa3464454357c8091a3e187","sha1":"42b8aa4c37657840e407b75d83b2f590309b938a","sha256":"5745cfadb40e0984bfb580b9faa3dbe0f3852e03341b98d961a495bf2abb2724","sha512":"d6da09fc305e0a640c8baecc11acd6e70f72505f36a474c2f25036527fe9790b565ba4b3e53e21c4e1c8c7dd7e3e25b6dc981a44645dc30765b27b036bdc81a5","ssdeep":"1536:v5LMBEKzlZWicMLqsBEUd8kNKsn7MZq4ohuhbLxHoxmr1Ny9DaZw28wHAw:v5LyEKzlQdMOsBEBkdKqVevxIc52aZYi","tlshash":"d68302c14866476e811e921be8cf94f26356b50ff1cf0992b7b1dd0a434e8e2bd9f861","first_seen":"2026-10-10T22:23:42.038878Z","last_seen":"2026-10-10T22:23:42.038878Z","times_seen":1,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"hillsmp.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"hillsmp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"hillsmp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hillsmp.com/assets/img/logo.png?v=20250808211839","fqdn":"hillsmp.com","domain":"hillsmp.com","tld":"com"},"ip":{"addr":"104.21.15.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hillsmp.com/","date":"2026-10-10T22:23:06.040Z","timestamp":1791670986040,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hillsmp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 07:15:10 GMT","end":"Wed, 23 Dec 2026 08:12:44 GMT"},"fingerprint":{"sha1":"26:72:C4:10:29:CF:7A:9E:DB:23:0D:4D:3D:05:21:84:C7:C6:4F:FA","sha256":"38:E3:B2:8B:4B:D0:F2:B4:AF:59:8E:60:AF:F0:CB:76:67:83:1C:FA:2A:AC:ED:E2:27:40:39:59:30:56:5F:B5"}}},"request":{"raw":"GET /assets/img/logo.png?v=20250808211839 HTTP/1.1\r\nHost: hillsmp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hillsmp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 22:23:06 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 10 Aug 2025 20:16:26 GMT\r\netag: \"154aa-63c087b483a80\"\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8zHXWr4VA3brl6kByF4rsH50gXAB9dqhpLdyZlwUiFlSGdV2jyyWbGt3ZQjLxXRkvUBTwUBtxwpRcDy9dBbZ%2F%2F9POrBjRZNMLnKnkNZ%2F6g4ROCqVDjuJ%2FAliCdkzFA%3D%3D\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=120\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a489070ecf24568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 87210\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87210,"size_decoded":87903,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"72e631b6baa3464454357c8091a3e187","sha1":"42b8aa4c37657840e407b75d83b2f590309b938a","sha256":"5745cfadb40e0984bfb580b9faa3dbe0f3852e03341b98d961a495bf2abb2724","sha512":"d6da09fc305e0a640c8baecc11acd6e70f72505f36a474c2f25036527fe9790b565ba4b3e53e21c4e1c8c7dd7e3e25b6dc981a44645dc30765b27b036bdc81a5","ssdeep":"1536:v5LMBEKzlZWicMLqsBEUd8kNKsn7MZq4ohuhbLxHoxmr1Ny9DaZw28wHAw:v5LyEKzlQdMOsBEBkdKqVevxIc52aZYi","tlshash":"d68302c14866476e811e921be8cf94f26356b50ff1cf0992b7b1dd0a434e8e2bd9f861","first_seen":"2026-10-10T22:23:42.038878Z","last_seen":"2026-10-10T22:23:42.038878Z","times_seen":1,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"hillsmp.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"hillsmp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"hillsmp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.mcsrvstat.us/3/play.hillsmp.fun","fqdn":"api.mcsrvstat.us","domain":"mcsrvstat.us","tld":"us"},"ip":{"addr":"104.26.15.225","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hillsmp.com/","date":"2026-10-10T22:23:06.199Z","timestamp":1791670986199,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mcsrvstat.us","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 09 Sep 2026 07:58:31 GMT","end":"Tue, 08 Dec 2026 08:58:19 GMT"},"fingerprint":{"sha1":"CC:D7:F7:AC:74:AA:06:AA:49:FA:49:A9:65:36:F6:86:76:15:AF:43","sha256":"E7:4C:08:20:46:71:39:C7:5F:E8:A5:06:F8:BB:27:E0:66:32:A4:97:1F:72:F4:91:B1:34:79:5F:88:80:CE:26"}}},"request":{"raw":"GET /3/play.hillsmp.fun HTTP/1.1\r\nHost: api.mcsrvstat.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://hillsmp.com/\r\nOrigin: https://hillsmp.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\naccess-control-request-method: GET\r\ncache-control: public,must-revalidate,max-age=159\r\ncontent-encoding: gzip\r\ncontent-security-policy: default-src 'none'; img-src 'self' data: https://mcsrvstat.us https://dev.mcsrvstat.us; font-src 'self' https://cdnjs.cloudflare.com; script-src 'self' 'nonce-8aa1bc46ca3d0d6a0de5bfef7cb3333760e8e440' https://cdnjs.cloudflare.com https://static.cloudflareinsights.com; style-src 'self' 'nonce-8aa1bc46ca3d0d6a0de5bfef7cb3333760e8e440' https://cdnjs.cloudflare.com; connect-src 'self' https://cloudflareinsights.com; form-action 'self'; frame-ancestors 'none'; upgrade-insecure-requests\r\ncontent-type: application/json\r\ndate: Sat, 10 Oct 2026 22:23:06 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-railway-request-id: YdHRw9teTSesvfMXvEOTxA\r\nx-railway-edge: cdg1\r\nx-hikari-trace: cdg1.8vsn\r\nreferrer-policy: strict-origin-when-cross-origin\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 10 Oct 2026 22:23:06 GMT\r\ncf-cache-status: EXPIRED\r\npermissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()\r\nx-frame-options: DENY\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S28cAsEYzfBdI7fZ1xgizdrF04Tqv26Dq5yaIbgqHoCWFAdsv2PYnEW295Kr8jazJfTcgtcs2DWVIbB7qqtCFVYnbeT1McmR6e3SDXa8uS5c8ndIMJk0uPToIyb33HYagT4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpect-ct: max-age=0\r\ncf-ray: a489070fdc0623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17158,"size_decoded":14102,"mime_type":"application/json","magic":"JSON text data","md5":"f77ea8839e279617669dc49a5534d25c","sha1":"db67c70420208a1f9bcc64e4d701203e8b1cfc03","sha256":"1e5a98e9be81179f00385af5bcb09ddec15ca4be978f409746e5599281f216f4","sha512":"ad0f10875b1404f82fa2f54289278af299b7a6f7579893fa388cf215c319d173a2078a5f11c5ca5ea2bd3b9b27ed7624d4ea4f68d36c9ad2dd947c43fd1bdbb1","ssdeep":"384:7KsCM6hvJ/DdL2fNSSL9eWtV083G0D2jHeUCTgWq/eyPtXtC:9C1hvlDdUNuWtK892jeUCTgam3C","tlshash":"6272bf3fd272c87e912688dd783b1eb48f80433d7638b65cda1dc73530ca8a425662d6","first_seen":"2026-10-10T22:23:42.040483Z","last_seen":"2026-10-10T22:23:42.040483Z","times_seen":1,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":5,"connect":9,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hillsmp.com/assets/css/styles.css?v=24341714325606","fqdn":"hillsmp.com","domain":"hillsmp.com","tld":"com"},"ip":{"addr":"104.21.15.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hillsmp.com/","date":"2026-10-10T22:23:06.025Z","timestamp":1791670986025,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hillsmp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 07:15:10 GMT","end":"Wed, 23 Dec 2026 08:12:44 GMT"},"fingerprint":{"sha1":"26:72:C4:10:29:CF:7A:9E:DB:23:0D:4D:3D:05:21:84:C7:C6:4F:FA","sha256":"38:E3:B2:8B:4B:D0:F2:B4:AF:59:8E:60:AF:F0:CB:76:67:83:1C:FA:2A:AC:ED:E2:27:40:39:59:30:56:5F:B5"}}},"request":{"raw":"GET /assets/css/styles.css?v=24341714325606 HTTP/1.1\r\nHost: hillsmp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hillsmp.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 22:23:06 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 22 Aug 2025 18:21:56 GMT\r\netag: \"1232-63cf847ee9be6-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=brliLsk2%2Ffi0f%2Fqy4dJ3wBOy0xwSi8nMX00bSSXqGiIumCaw739JtX5FGELgk96WgI%2FbiJU00VeZJd6SpO4O%2FDbl26jCgZW%2B0V7C5j4BdDw93%2FIGaOHrdW2%2B%2BZa6Yg%3D%3D\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=120\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a489070eaf1f568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1391\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4658,"size_decoded":2144,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"5e8013e717786b388407bdf8c30d5d27","sha1":"b3a8d4897e991ab5dafaa9a52b026a527411f846","sha256":"8daac13e8411032133c88e5b5c9ac24bf35dd9fb467e9d01e786df996aa21672","sha512":"b01d5171bf2102dff7dba8c719f59b986eac3802e91ed642583543cd2d8a3dfcacf378083449ab8c13e2fd0cd61e01d60428c0bf620f55b94bfb21f2ea95d4ed","ssdeep":"96:ye+8QE+5zOHjNFYLQ3U73PWQ+b+w1JwawYbmP:EzETjDYgU7OQ+bjEHYbmP","tlshash":"1ea1f11fe3523216301b816eb4d6e9299b3c12409a137f3c776e205c5e1e5ead3db968","first_seen":"2026-10-10T22:23:42.042042Z","last_seen":"2026-10-10T22:23:42.042042Z","times_seen":1,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"hillsmp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"hillsmp.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"hillsmp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-04C5Z2VPT2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hillsmp.com/","date":"2026-10-10T22:23:06.027Z","timestamp":1791670986027,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:18 GMT","end":"Fri, 11 Dec 2026 20:00:17 GMT"},"fingerprint":{"sha1":"28:B6:EA:A0:82:D0:48:3A:13:C3:DC:38:88:85:51:9B:B3:CB:89:B4","sha256":"80:50:66:22:4E:D0:C3:BC:40:94:CA:B1:AA:D1:DB:13:A9:E5:74:53:AA:EB:19:DE:D1:A8:AC:C9:B7:18:01:EF"}}},"request":{"raw":"GET /gtag/js?id=G-04C5Z2VPT2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hillsmp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sat, 10 Oct 2026 22:23:06 GMT\r\nexpires: Sat, 10 Oct 2026 22:23:06 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 180229\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":540603,"size_decoded":180833,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6696)","md5":"3916a0c213e85aff1fe62d0ad71336bb","sha1":"57b53e78d171a84bbcb39c3901784bd63adcbf4e","sha256":"8c89fbbc81a61d6b2c4961a4b0418a341f270694f1be6b198331f8244878d3f2","sha512":"addf39f969304403ebf5b72e6c8baf8556b5856dd1c7101410eaf932038d5124270b56b2ba372eae724e68e6433b9d7ba690bb2678445f726650fc984d11d3a1","ssdeep":"6144:QhsfCyqMnhImaVlQV+cfIb/EfD3ceiXmcw2rSGer/4p:aEKmWJmc/Wu","tlshash":"f5b408ceb3c6742293a6f578903f01cb657a29a2b45cc89af189dce02d3465a5173f7c","first_seen":"2026-10-10T22:23:42.043709Z","last_seen":"2026-10-10T22:23:42.043709Z","times_seen":1,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":45,"receive":58,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hillsmp.com/assets/style.css?v=24341714325606","fqdn":"hillsmp.com","domain":"hillsmp.com","tld":"com"},"ip":{"addr":"104.21.15.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hillsmp.com/","date":"2026-10-10T22:23:06.029Z","timestamp":1791670986029,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hillsmp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 07:15:10 GMT","end":"Wed, 23 Dec 2026 08:12:44 GMT"},"fingerprint":{"sha1":"26:72:C4:10:29:CF:7A:9E:DB:23:0D:4D:3D:05:21:84:C7:C6:4F:FA","sha256":"38:E3:B2:8B:4B:D0:F2:B4:AF:59:8E:60:AF:F0:CB:76:67:83:1C:FA:2A:AC:ED:E2:27:40:39:59:30:56:5F:B5"}}},"request":{"raw":"GET /assets/style.css?v=24341714325606 HTTP/1.1\r\nHost: hillsmp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hillsmp.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 22:23:06 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 10 Aug 2025 20:16:26 GMT\r\netag: \"848-63c087b483a80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YOxqSxj%2F69srOvYxxBEa3ITahQ3w8ckdygA7ELZuUbDocyVQrXrzkMEmoZDx0uMY5W6lw%2BOo1D2GwXOTJHBpV3SQVyE75XpW%2B%2BNcBGoMaAqD5eL11NVmDMBT2kfubw%3D%3D\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=120\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a489070ebf21568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 719\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2120,"size_decoded":1462,"mime_type":"text/css","magic":"ASCII text, with very long lines (1717)","md5":"065bf351246bc58d95350d7ebe074584","sha1":"21618e6c460da7dc9481505c9bc3c813966d3d97","sha256":"1f2f2e070331de9224ad7b222411783bb1b20efa25fa9782d9854b8964aeb123","sha512":"c5027004630541713f6fd1270be62fa9d9d600ebfc206f68823e3129b1978c3bf5ff5e47fa02ea1a91caad9112c7551496af915390ba48cf19485a0f21c3183c","ssdeep":"","tlshash":"7b414462d195320e3239d6a59501bfcc900c233bd3850bddb90173b84ec94de1b72aae","first_seen":"2026-10-10T22:23:42.045112Z","last_seen":"2026-10-10T22:23:42.045112Z","times_seen":1,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"hillsmp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"hillsmp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"hillsmp.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hillsmp.com/","date":"2026-10-10T22:23:06.032Z","timestamp":1791670986032,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hillsmp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 5.3.3\r\nx-jsd-version-type: version\r\netag: W/\"13b51-3cbp6tbRaukjc5nOQejBYgzFnDY\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sat, 10 Oct 2026 22:23:06 GMT\r\nage: 1025811\r\nx-served-by: cache-fra-eddf8230066-FRA, cache-bma-essb1270026-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 24464\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80721,"size_decoded":25259,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"2e477967e482f32e65d4ea9b2fd8e106","sha1":"ddc6e9ead6d16ae9237399ce41e8c1620cc59c36","sha256":"0833b2e9c3a26c258476c46266e6877fc75218625162e0460be9a3a098a61c6c","sha512":"ecf8bfa2d7656db091f8b9d6f85ecfc057120c93ae5090773b1b441db838bd232fcef26375ee0fa35bf8051f4675cf5a5cd50d155518f922b9d70593f161741a","ssdeep":"1536:WmwIiEEO+TBR2t4J9RirWDKsVA5y7fy3YJtC/r/45wZbfbXZTb0WU078:HwORx3YCD45wZbDZTb0g8","tlshash":"ce73c5593244b4730ade85b68037430bf2265998b24b812cb57cadde2a7dcc67277f78","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-10-11T01:43:43.292768Z","times_seen":33058,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":13,"receive":5,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hillsmp.fun/assets/img/hero-pattern.svg?v=20250808211839","fqdn":"hillsmp.fun","domain":"hillsmp.fun","tld":"fun"},"ip":{"addr":"104.21.17.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hillsmp.com/","date":"2026-10-10T22:23:06.180Z","timestamp":1791670986180,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hillsmp.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 30 Sep 2026 05:26:50 GMT","end":"Tue, 29 Dec 2026 06:26:47 GMT"},"fingerprint":{"sha1":"A0:48:6F:19:06:6F:55:1E:98:5C:53:66:0A:8F:FA:8A:02:02:E4:66","sha256":"A7:D4:6A:1D:ED:07:B2:92:D8:C4:7C:F0:10:32:F7:C1:52:45:A2:5A:3D:BB:5F:6E:11:F9:B3:0B:34:AF:3A:6B"}}},"request":{"raw":"GET /assets/img/hero-pattern.svg?v=20250808211839 HTTP/1.1\r\nHost: hillsmp.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hillsmp.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 22:23:06 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 10 Aug 2025 20:16:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"177-63c087b483a80\"\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=esQ8g3lXkDSmtV6m3TDrvm9lVIADVl%2Fki5qmAT9T5Cf7BHPt%2F8mj4yMSDSANayagxkK240uK7fRTU3oCRL3yFzeWVFDnmHNiB8xd0eFRuhx056bJDFeFxFPmy%2FuSRg%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a489070fdecc8be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":375,"size_decoded":912,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9ea0b2ee0795a7383316966c92e0d804","sha1":"455e564cccd5b0178166908f4739d66ef6d8fd19","sha256":"09c5c461b3564173f3f516b6b3030966ec2a302dd6fe74eabb79511fa2e62170","sha512":"8646f634c9a556ae2584cc979c10aa8f6e57a9326171f97acbb79cde4c4998cfbea00c04e7bc6810241d6f4c1e3dfba7ccd1edf1b16d1914df26757b2d5e4a86","ssdeep":"","tlshash":"0ee09a34e2985818c628070a9b589d5863b7a0aa83025106f68c37a45f098e7bdb22ed","first_seen":"2026-10-10T22:23:42.048147Z","last_seen":"2026-10-10T22:23:42.048147Z","times_seen":1,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":25,"connect":10,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hillsmp.com/assets/img/logo.png?v=24341714325606","fqdn":"hillsmp.com","domain":"hillsmp.com","tld":"com"},"ip":{"addr":"104.21.15.54","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hillsmp.com/","date":"2026-10-10T22:23:06.406Z","timestamp":1791670986406,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hillsmp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 24 Sep 2026 07:15:10 GMT","end":"Wed, 23 Dec 2026 08:12:44 GMT"},"fingerprint":{"sha1":"26:72:C4:10:29:CF:7A:9E:DB:23:0D:4D:3D:05:21:84:C7:C6:4F:FA","sha256":"38:E3:B2:8B:4B:D0:F2:B4:AF:59:8E:60:AF:F0:CB:76:67:83:1C:FA:2A:AC:ED:E2:27:40:39:59:30:56:5F:B5"}}},"request":{"raw":"GET /assets/img/logo.png?v=24341714325606 HTTP/1.1\r\nHost: hillsmp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://hillsmp.com/\r\nCookie: _ga_04C5Z2VPT2=GS2.1.s1791670986$o1$g0$t1791670986$j60$l0$h0; _ga=GA1.1.1270614178.1791670986\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_04C5Z2VPT2","value":"GS2.1.s1791670986$o1$g0$t1791670986$j60$l0$h0"},{"name":"_ga","value":"GA1.1.1270614178.1791670986"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 10 Oct 2026 22:23:06 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 10 Aug 2025 20:16:26 GMT\r\netag: \"154aa-63c087b483a80\"\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h8M4qX%2BjLNQi3DWRsB8akDd8w%2FT5atiwUMeah79cbigoFY%2FlEMt1XeF1pJWnRC8POfNQ9NFY7T3O1zRaBPfGKF1dCbR%2Bw9RwTb7UOAXnmqEWxJHardgsWH2IJtqc3Q%3D%3D\"}]}\r\ncontent-type: image/png\r\nage: 0\r\ncache-control: max-age=120\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a48907110f69568d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 87210\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87210,"size_decoded":87913,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"72e631b6baa3464454357c8091a3e187","sha1":"42b8aa4c37657840e407b75d83b2f590309b938a","sha256":"5745cfadb40e0984bfb580b9faa3dbe0f3852e03341b98d961a495bf2abb2724","sha512":"d6da09fc305e0a640c8baecc11acd6e70f72505f36a474c2f25036527fe9790b565ba4b3e53e21c4e1c8c7dd7e3e25b6dc981a44645dc30765b27b036bdc81a5","ssdeep":"1536:v5LMBEKzlZWicMLqsBEUd8kNKsn7MZq4ohuhbLxHoxmr1Ny9DaZw28wHAw:v5LyEKzlQdMOsBEBkdKqVevxIc52aZYi","tlshash":"d68302c14866476e811e921be8cf94f26356b50ff1cf0992b7b1dd0a434e8e2bd9f861","first_seen":"2026-10-10T22:23:42.038878Z","last_seen":"2026-10-10T22:23:42.038878Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"hillsmp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"hillsmp.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"hillsmp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}