{"report_id":"c1e4166e-5428-4f94-8091-4b27a86f0723","version":6,"status":"done","tags":[],"date":"2026-03-08T12:17:40Z","url":{"schema":"https","addr":"ility-ility.xyz","fqdn":"ility-ility.xyz","domain":"ility-ility.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.222","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ility-ility.xyz/","fqdn":"ility-ility.xyz","domain":"ility-ility.xyz","tld":"xyz"},"title":"ILITY - The Blockchain for ZK Cross-Chain Data Verification","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T05:57:28.976551Z","times_seen":17831158,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"ility-ility.xyz","fqdn":"ility-ility.xyz","domain":"ility-ility.xyz","tld":"xyz"},"ip":{"addr":"172.67.200.222","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-12T12:17:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-08T12:17:16Z","timestamp":1772972236,"ip_dst":{"addr":"172.67.204.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":35718,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI","source":"{\"timestamp\":\"2026-03-08T12:17:16.038688+0000\",\"flow_id\":1901235603773334,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.51\",\"src_port\":35718,\"dest_ip\":\"172.67.204.221\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2051768,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_03_22\"],\"deployment\":[\"Perimeter\"],\"malware_family\":[\"Cloudflare_Workers\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Cloudflare_Workers\"],\"updated_at\":[\"2024_03_22\"]}},\"tls\":{\"sni\":\"quick-hub-fd6.cf-oushe8lu.workers.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":2644,\"start\":\"2026-03-08T12:17:16.006038+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-08T12:17:16Z","timestamp":1772972236,"ip_dst":{"addr":"172.67.204.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":35706,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI","source":"{\"timestamp\":\"2026-03-08T12:17:16.042422+0000\",\"flow_id\":446835123295754,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.51\",\"src_port\":35706,\"dest_ip\":\"172.67.204.221\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2051768,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_03_22\"],\"deployment\":[\"Perimeter\"],\"malware_family\":[\"Cloudflare_Workers\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Cloudflare_Workers\"],\"updated_at\":[\"2024_03_22\"]}},\"tls\":{\"sni\":\"quick-hub-fd6.cf-oushe8lu.workers.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":939,\"bytes_toclient\":2720,\"start\":\"2026-03-08T12:17:16.005642+0000\"}}"}],"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ility-ility.xyz","ip":{"addr":"104.21.13.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":54,"request_count":27,"received_data":16337923,"sent_data":12278,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"dc.js","description":"A multi-dimensional charting library built to work natively with crossfilter and rendered using d3.js","website":"https://dc-js.github.io/dc.js/","common_platform_enumeration":"","icon":"dc.js.png","categories":["JavaScript graphics","JavaScript libraries"]}]},{"fqdn":"base.publicnode.com","ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-08-16","domain_rank":2170347,"first_seen":"2023-10-18T22:23:56Z","last_seen":"2026-03-05T13:52:59.789539Z","alert_count":0,"request_count":2,"received_data":2007,"sent_data":1015,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"base.drpc.org","ip":{"addr":"104.18.10.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2005-01-09","domain_rank":3183586,"first_seen":"2023-10-27T13:07:58Z","last_seen":"2026-03-05T13:52:59.768375Z","alert_count":0,"request_count":2,"received_data":1823,"sent_data":1003,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"quick-hub-fd6.cf-oushe8lu.workers.dev","ip":{"addr":"172.67.204.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-02-08","domain_rank":0,"first_seen":"2026-03-08T11:55:52.60774Z","last_seen":"2026-03-08T11:55:54.025723Z","alert_count":0,"request_count":2,"received_data":3343252,"sent_data":1104,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"base.llamarpc.com","ip":{"addr":"172.67.68.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-02-07","domain_rank":2856799,"first_seen":"2025-06-28T18:40:21.321537Z","last_seen":"2026-03-05T13:52:59.941826Z","alert_count":0,"request_count":2,"received_data":1341,"sent_data":1011,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"mainnet.base.org","ip":{"addr":"172.64.147.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1996-11-11","domain_rank":835121,"first_seen":"2023-08-03T23:07:22Z","last_seen":"2026-03-04T16:20:42.125021Z","alert_count":0,"request_count":2,"received_data":2885,"sent_data":1009,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ility-ility.xyz/","fqdn":"ility-ility.xyz","domain":"ility-ility.xyz","tld":"xyz"},"ip":{"addr":"104.21.13.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"59a13eef9e5e0ec7844e58e8b47d54a0","sha1":"0fb2b2059a878b87f8524284d448dd46a4351953","sha256":"c890c150b008d069bfddb86ee2c2e3fe979515939053b4c53fd6853b68e4fe35","sha512":"7fcdb614d30b1141e9a1e134a98e2888007f786f866c24e6383106d3e003f094e72901aa295e7d3450fccf5a249b25b436401a5b9439205da6b0eec8d72cfc80","ssdeep":"","tlshash":"33f0beaf336126ca23ae6ad20796c01d1e72e4ab3002163c575a36ca0cb6f52521b07e","size":494,"data":"","first_seen":"2025-08-01T04:17:54.874483Z","last_seen":"2026-08-10T18:12:06.64719Z","times_seen":3237,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ility-ility.xyz/","fqdn":"ility-ility.xyz","domain":"ility-ility.xyz","tld":"xyz"},"ip":{"addr":"104.21.13.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0e1ee9f442371606d9a13b41a0dbeaff","sha1":"a05c25c8ad9127fe7d45319ce13e8b4a485d2e01","sha256":"713285cbc0cb910dfd2e7a86c604d191a27789ae50964ab1c674507ff4a20c45","sha512":"1dbac9fa1e0b338e780a3600f1a3da140a6c83a961a1d0c6c80fe3dc5a9041c346c471d264a07ccc87457cdccc2a28b768d02283512ba9cee0fc2e2b7124e42d","ssdeep":"","tlshash":"0221fedeb2826488526794d742cd8dceb8e617a919008c20452ef299225c3e8fb6ad54","size":1177,"data":"","first_seen":"2025-08-01T04:16:24.218288Z","last_seen":"2026-08-10T18:12:06.593474Z","times_seen":3342,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ility-ility.xyz/","fqdn":"ility-ility.xyz","domain":"ility-ility.xyz","tld":"xyz"},"ip":{"addr":"104.21.13.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"042f9d354f87f9741f457edeb4eb4bb6","sha1":"53aa111d2d8325e2ec38b360b5539a54de77bd87","sha256":"20d4fa2dcf93757391f529cce145232d20dc72c2716cfed87199aa3c2e783517","sha512":"ad92961a7ef21c201f6472b870da9ece448c0901174a0b0ede8d12ad1cfcf0a66f10ce63b022fed7c3a059e0683dd8f31b9be6fe62f1662c148a820b294e59be","ssdeep":"1536:g6EXfJuZlDxrCHwoEGlNn6SeaZ/Khl6GlVBPTRbOa8zQJeqEOGbhD:7EXfJOlDxrMmGlNyaZG5TB8cJ+b5","tlshash":"fe5430d5db5b80ed8ea121cec473f905e1184923de6cf593aa2ddec17629f23818317a","size":279592,"data":"","first_seen":"2026-03-08T12:17:49.386687Z","last_seen":"2026-03-08T12:17:49.386687Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ility-ility.xyz/","fqdn":"ility-ility.xyz","domain":"ility-ility.xyz","tld":"xyz"},"ip":{"addr":"104.21.13.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f278e1582a6b32d6a9a05328bba73b0f","sha1":"02780b645a044990e49787663d3dba06626b1e3d","sha256":"07317dc90130ec69ed8e07a8362168074f9067473354101f361449cff37110aa","sha512":"08463b63ba1654bf203117d8f0c0a2ce4b5d92914ffba7c8ac3d942ff1a812c86cc61d9e840e5f3422c2b22d1b71b1a06b9a6d40d4e4259b32fd8cd40cc8357f","ssdeep":"","tlshash":"55319948a43216904242e8f1c676abeeabe774080574446d349cbec7eff8447e521678","size":1529,"data":"","first_seen":"2025-08-01T04:16:24.221852Z","last_seen":"2026-08-10T18:12:06.653143Z","times_seen":3449,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ility-ility.xyz/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"ility-ility.xyz","domain":"ility-ility.xyz","tld":"xyz"},"ip":{"addr":"104.21.13.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-11T05:54:05.45579Z","times_seen":417896,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ility-ility.xyz/","fqdn":"ility-ility.xyz","domain":"ility-ility.xyz","tld":"xyz"},"ip":{"addr":"104.21.13.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2380d391cf784bce2f77e0e16fa2268b","sha1":"2b88cb08e3d7f56772d46fe1a10d84774e8728d5","sha256":"e65fcff70fe965f3d1878fe515a7ebcd265dfe61b15461521450c882e8d081d7","sha512":"0f3264af3a045928be20d2ee1ef3af905571d07e3fc25eaeda22199baca89b8c9bff94d90d81124ff45b16c5e40df291c2f49d9464ba901d2d961f6fd1196f1f","ssdeep":"","tlshash":"e6411b1e00aa0aa31ba3054333ce846d0956c2cedcc73534d3b27f8134c67832a93bea","size":2254,"data":"","first_seen":"2025-08-01T04:17:54.882582Z","last_seen":"2026-08-10T18:12:06.643592Z","times_seen":3275,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ility-ility.xyz/","fqdn":"ility-ility.xyz","domain":"ility-ility.xyz","tld":"xyz"},"ip":{"addr":"104.21.13.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3433c9d3e9b7e8e5b34ed72e309db572","sha1":"d53d7df082088749c1df6b08330ee9b9e4076932","sha256":"1d96fa9904e3743570bccd5be90e83fd91975299f374093cc6f723673d582dd1","sha512":"ffd0e047331871f21738643968b7eb7fa045ee0e45346a9ea986c4b8a3e745dd310542c6b2734f6d244408bba6548ec66f5cd7662c69485b5e59e3b9432cdff2","ssdeep":"","tlshash":"06f04245bd825a24d35670ddc41f978cc53690dd91491c4cbb64ece1de94c2cdfc6534","size":585,"data":"","first_seen":"2025-08-01T04:16:24.219641Z","last_seen":"2026-08-10T18:12:06.59839Z","times_seen":3491,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ility-ility.xyz/","fqdn":"ility-ility.xyz","domain":"ility-ility.xyz","tld":"xyz"},"ip":{"addr":"104.21.13.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"70791d51276f5844776449629fffb85c","sha1":"d4b243cba41fc74b0cc590dcb966735210048fd5","sha256":"0eb52a6975e22fc5f2e02c778d563b69e3e71d73f518711d4cd205aa821bda6d","sha512":"a29d08933c45b629606216c05fc52930db625980ed593a5502c078e96dc41957898d916f902356a75294f6ed510154baa0af46b3292652c4d5281261b50b5d16","ssdeep":"49152:ZJGkwdNZngkWWUpGwW2QUSvhjG+EyY4bfO3xrQanJfCpszVtUkhz:Zx","tlshash":"f8f523836d5b78b6cf5843a5b0a71d0e19990d23645da1daf394f8c2387dfa080eb83d","size":3339607,"data":"","first_seen":"2026-03-08T12:17:49.391755Z","last_seen":"2026-03-08T12:17:49.391755Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ility-ility.xyz/f105811a-f09e-464d-996d-8818877de49d","fqdn":"ility-ility.xyz","domain":"ility-ility.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f473ccef6abbcd382c60c8e90be212d0","sha1":"50acc70042c3d0fbde380f4d0d59730ddc023cd5","sha256":"06dd85f49cb175d6c7d334f3a204e2e054026e49f56532d06569c2464c37dfb9","sha512":"fd00d87cc2e9a4f627c676f6b1ec61e2642f976d7bb71bff0196fbb7bfddbd469f64af82b4d3e91b551208f678a965f3d51fd0898e4fbcac07c6030ccbdf73d0","ssdeep":"","tlshash":"c61154b9b446d058d1860e3937f26d207c6bf02c82eb9cbabbc4df6134d4c3810d2605","size":1000,"data":"","first_seen":"2026-03-08T12:17:49.394077Z","last_seen":"2026-03-08T12:17:49.394077Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ility-ility.xyz/chunk.23.eql3hhdc.js","fqdn":"ility-ility.xyz","domain":"ility-ility.xyz","tld":"xyz"},"ip":{"addr":"104.21.13.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"70b860a1180210dca96ecbf50bca5294","sha1":"085e690edfbd5eee2326f9fa016ae30ecec833da","sha256":"30febecbf617deb2a844ff6edcd55b67bc19b98dcfe6ff51770b374b77f9d3ce","sha512":"01b0266836348ce53643d093d8391851dcb9803016aa1bd6ee4961fd5fbba77b68f1ef4e7b35ce530b2cd9f0629c2116c66010103d09027d5da3f759e81c6d35","ssdeep":"1536:HYCLx2kCLx2P8IaAdDE5pd8pSYY5T2q+OCeuNkIoAZMjN5cA4s7lIRruwJCk/uy8:7SkMmq+TvNky+jNis7KvhsS8rnJ","tlshash":"de7432d5599680e9be56518ecc73ee05e0184d13bdacf053a6edfed47029f22808b37a","size":343861,"data":"","first_seen":"2026-03-08T12:17:49.33807Z","last_seen":"2026-03-08T12:17:49.33807Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ility-ility.xyz/","fqdn":"ility-ility.xyz","domain":"ility-ility.xyz","tld":"xyz"},"ip":{"addr":"104.21.13.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a82d7a6bc9c7b85f9a5a5fa21b785f46","sha1":"9d7750f2861bffb2488391f8241fe23ed67fd1c9","sha256":"eb79a58bf5a62f215f485094cff1b3ecac10be20155337df6a4ccf635166c8b9","sha512":"9196dff64ce999886c2612194d476f1d7abe9b13bfd655c0c02b248ad91e15927f37d260bb4f6c39636705a243913cfa9b870a611711f5431a965aa3f934bdcd","ssdeep":"","tlshash":"c8e02678a1b906328a7302585269638a3f6408a3bd8b220334acce454fc63e61d60ca3","size":347,"data":"","first_seen":"2026-03-08T12:17:49.396101Z","last_seen":"2026-03-08T12:17:49.396101Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ility-ility.xyz/","fqdn":"ility-ility.xyz","domain":"ility-ility.xyz","tld":"xyz"},"ip":{"addr":"104.21.13.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8de04e3dc63af7585af0e827672eb149","sha1":"02ee5e4b4e73e430d629744c4b7a3e38c36ed06d","sha256":"123e2a4c9c65ad62ea2b0992b1f80073e18a341a810f9ba40d1c4cdc31f1e759","sha512":"a42fcbfd4fc45305b75c0093524abafcf73f7d10f3bbe8cf573f3ea87803f672ae7fd293a116e7c24aeb0ef9fb24b9ea32e48200a56243187d5b550407631184","ssdeep":"","tlshash":"a911cce0aa6c599781c2095034894b02b13cb020203d9fd0bf75f0ce7c7c7ec96d262a","size":1000,"data":"","first_seen":"2025-12-20T20:03:49.143914Z","last_seen":"2026-06-07T00:08:21.702938Z","times_seen":1701,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ility-ility.xyz/","fqdn":"ility-ility.xyz","domain":"ility-ility.xyz","tld":"xyz"},"ip":{"addr":"104.21.13.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1e21743cd2ee2004cd56bfc5c29e3609","sha1":"bf516634ffbcfd3186b71dafc0ecdcc47894c439","sha256":"0e428980439e794b176e0ee3cd84e4878510b1d52c1efc1c00f4af9729a17029","sha512":"4264e5ce5b4f3acb24046582388132a5915398c9266c18c6349d75fb94bd74bac990dc6ebd12e1e118a3a24752a3e4badae2faabd69b9827d1f223a0750da4c2","ssdeep":"48:atoyTqSsM+c69M+c69M+c69M+c60778KK7NaaM//M+A:atlDNDNDNDl778KKw//M+A","tlshash":"25913f32165427da63ce8fd45a85751d01d2c89a383e60bdff3279eded3a683c031612","size":4506,"data":"","first_seen":"2025-08-01T04:16:24.215618Z","last_seen":"2026-08-10T18:12:06.590327Z","times_seen":3406,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ility-ility.xyz/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2","fqdn":"ility-ility.xyz","domain":"ility-ility.xyz","tld":"xyz"},"ip":{"addr":"104.21.13.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ility-ility.xyz/","date":"2026-03-08T12:17:15.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ility-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 10:18:23 GMT","end":"Fri, 29 May 2026 10:18:22 GMT"},"fingerprint":{"sha1":"A9:01:82:E8:68:F9:5C:FC:B9:6B:69:00:1F:82:02:38:FA:AF:56:D1","sha256":"5B:4D:CF:ED:6F:64:33:67:40:30:21:51:8A:F0:6D:BC:AE:EA:CC:AC:AD:85:2A:9E:B2:3C:01:6E:B1:CC:F9:4D"}}},"request":{"raw":"GET /JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2 HTTP/1.1\r\nHost: ility-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ility-ility.xyz/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 08 Mar 2026 12:17:15 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 18780\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 10:49:23 GMT\r\netag: \"69a2c833-495c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hd%2BrSqqXqKvbiVhQ2RKRnBjn83d1BgjLuj5M2wHEClOq5B4egVlJ4tQEmLPNUCGT1j6C84pzv7EJvXWEev3NRzUtuEbOAN4vJ1N3gi076w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d91c694fd734651-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18780,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 18780, version 1.0","md5":"e7198b2dcb57c0193b0e9765353994ba","sha1":"6e2658ad73dda183d4fa2979809a73a0c29d21c9","sha256":"e66bcd2761ab6924b25ce70dafe10e57a39193c4fea1516730bd9cb5240af6c8","sha512":"01054290f69d0e4232687f67e5d2522f186f87fe833bd1b13016d0e79a1159c49e767a5c6e9c61f9b3fea0c27df2194011bf46d6f6c1ee46d1f4313ac1950f9c","ssdeep":"384:pJOL4DxNfzRV4g4Miv8HlK3z114ow92D4bH7CxPhdWS6UJ836u8K+ylyr:p5P8Mq8Hlqo92D4vOPhdWSL+qu8Kqr","tlshash":"ef82d0ec209846f9fc0a6e97dfc49bd522430cbd87166e3093ab0dc84b875a4d667693","first_seen":"2025-09-05T00:54:05.741935Z","last_seen":"2026-08-11T05:14:39.832588Z","times_seen":41426,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ility-ility.xyz/chunk.23.eql3hhdc.js","fqdn":"ility-ility.xyz","domain":"ility-ility.xyz","tld":"xyz"},"ip":{"addr":"104.21.13.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ility-ility.xyz/","date":"2026-03-08T12:17:14.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ility-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 10:18:23 GMT","end":"Fri, 29 May 2026 10:18:22 GMT"},"fingerprint":{"sha1":"A9:01:82:E8:68:F9:5C:FC:B9:6B:69:00:1F:82:02:38:FA:AF:56:D1","sha256":"5B:4D:CF:ED:6F:64:33:67:40:30:21:51:8A:F0:6D:BC:AE:EA:CC:AC:AD:85:2A:9E:B2:3C:01:6E:B1:CC:F9:4D"}}},"request":{"raw":"GET /chunk.23.eql3hhdc.js HTTP/1.1\r\nHost: ility-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ility-ility.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 08 Mar 2026 12:17:14 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 10:49:23 GMT\r\netag: W/\"69a2c833-53f35\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e0E125Gyx1JiQlRbZsj9H6F9R%2FvuNwqtMBDnRp8AQzynkJXbNjZAExie%2B1qzDvxDyYRy7yhPLtRcks%2F2D5wFtnZgePcqdxjfNzJotRb3Bg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d91c6910d0b4651-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":343861,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"70b860a1180210dca96ecbf50bca5294","sha1":"085e690edfbd5eee2326f9fa016ae30ecec833da","sha256":"30febecbf617deb2a844ff6edcd55b67bc19b98dcfe6ff51770b374b77f9d3ce","sha512":"01b0266836348ce53643d093d8391851dcb9803016aa1bd6ee4961fd5fbba77b68f1ef4e7b35ce530b2cd9f0629c2116c66010103d09027d5da3f759e81c6d35","ssdeep":"1536:HYCLx2kCLx2P8IaAdDE5pd8pSYY5T2q+OCeuNkIoAZMjN5cA4s7lIRruwJCk/uy8:7SkMmq+TvNky+jNis7KvhsS8rnJ","tlshash":"de7432d5599680e9be56518ecc73ee05e0184d13bdacf053a6edfed47029f22808b37a","first_seen":"2026-03-08T12:17:49.33807Z","last_seen":"2026-03-08T12:17:49.33807Z","times_seen":1,"resource_available":true,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ility-ility.xyz/05_Pools_Promotion.png","fqdn":"ility-ility.xyz","domain":"ility-ility.xyz","tld":"xyz"},"ip":{"addr":"104.21.13.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ility-ility.xyz/","date":"2026-03-08T12:17:14.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ility-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 10:18:23 GMT","end":"Fri, 29 May 2026 10:18:22 GMT"},"fingerprint":{"sha1":"A9:01:82:E8:68:F9:5C:FC:B9:6B:69:00:1F:82:02:38:FA:AF:56:D1","sha256":"5B:4D:CF:ED:6F:64:33:67:40:30:21:51:8A:F0:6D:BC:AE:EA:CC:AC:AD:85:2A:9E:B2:3C:01:6E:B1:CC:F9:4D"}}},"request":{"raw":"GET /05_Pools_Promotion.png HTTP/1.1\r\nHost: ility-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ility-ility.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 08 Mar 2026 12:17:14 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 10:49:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 0\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KwUO9Rwsi17lSeSPeeJiWHSOiG0qhZeIbwbeafxFqIgZJ127FLsuQ6bP4aZRoIoS6h1kXlBo1bBqhP8ZW9V8%2Bu%2FXRAAp0wY6iVIg8jre%2FA%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9d91c6948d644651-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"dc.js","description":"A multi-dimensional charting library built to work natively with crossfilter and rendered using d3.js","website":"https://dc-js.github.io/dc.js/","common_platform_enumeration":"","icon":"dc.js.png","categories":["JavaScript graphics","JavaScript libraries"]}],"data":{"size":62369,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1250)","md5":"03df9f9a2f33b0c61c167b9a233a9b11","sha1":"121918b101f8c49b5b9d9d30984ea453122cd9ec","sha256":"aecbf8ba5340070d03b40b2004144157cea3441b16573f8c4c05b69363f631be","sha512":"353943f42e2188025b1ab5d01558e0509306fac65753db14a7e1949497a182fdf5d86edee5a885f0e91428820f842caaf0911a3d68866760963772d0500b4987","ssdeep":"768:oPyhFK8yhFKoyhFKwyhFKRAiOLbdZRGUVysxnv5fCcg:oSk5klktkRkDIUVywh1g","tlshash":"b953f7b993f415b6514783d5eb22ab267e61d067ca4e4110f2bc07a82fc3cc9dc27a9d","first_seen":"2026-03-08T12:17:49.34129Z","last_seen":"2026-03-08T12:17:49.34129Z","times_seen":1,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"base.publicnode.com/","fqdn":"base.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ility-ility.xyz/","date":"2026-03-08T12:17:15.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:40:15 GMT","end":"Mon, 11 May 2026 21:40:09 GMT"},"fingerprint":{"sha1":"02:33:4E:80:56:8A:88:B0:A0:32:C7:FD:BB:EA:AD:56:66:32:7F:9E","sha256":"25:6C:D0:C9:8E:E0:89:64:BF:49:7D:80:0C:31:46:0A:5B:1D:05:0B:79:60:DB:A7:27:2E:C9:40:85:64:DA:1E"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: base.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://ility-ility.xyz/\r\nOrigin: https://ility-ility.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 08 Mar 2026 12:17:15 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 172800\r\nallow: OPTIONS, POST\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\nx-envoy-upstream-service-time: 0\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: 9d91c695e8d1958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T05:57:28.976551Z","times_seen":17831158,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":55,"dns":1,"connect":8,"send":0,"wait":49,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"base.drpc.org/","fqdn":"base.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.10.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ility-ility.xyz/","date":"2026-03-08T12:17:15.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 16:14:00 GMT","end":"Sun, 17 May 2026 17:13:51 GMT"},"fingerprint":{"sha1":"6E:2D:5A:72:A1:75:4A:F0:C7:96:F2:E8:26:78:F5:FC:54:0C:73:93","sha256":"18:E9:96:29:98:D2:5D:4E:19:CD:75:98:36:ED:EB:40:40:C4:23:2C:76:E1:95:F1:4C:85:59:D2:48:CB:AF:4A"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: base.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ility-ility.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://ility-ility.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0xEeB513144490B88366616606382BD2A9f1d2cA37\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 08 Mar 2026 12:17:15 GMT\r\ncontent-type: application/json\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nx-drpc-owner-id: cb501251-31a8-4028-8b0a-54679f15c385\r\nx-drpc-owner-tier: free\r\nx-drpc-provider-id: drpc-core-free\r\nx-drpc-trace-id: d4eb93c7b547281a58d3d15f7c90ba3f\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9d91c6975f532efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":870,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0a808ff65422bd6f369ff2720463ac46","sha1":"18aca933658c1b9d652a9c06c1bff644a948692e","sha256":"58bb2944486cba4ca710e7c5eb208f41453173a96395862f2b7c88aaf327692a","sha512":"8ac9bc1a6f763fd6a9e4dd3aba78555c04bd26ee1722d556b57d550317f401ce057671aecad650090fa4b5a667409210c6391570ec3f9b403c87673962945dc0","ssdeep":"","tlshash":"b311dcf09901dad1f6241f57a2fd32cb60343443eede5f8e821a36851aa6202fe0d5ce","first_seen":"2026-03-07T01:42:36.665366Z","last_seen":"2026-03-08T12:24:34.451908Z","times_seen":4,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ility-ility.xyz/favicon.png","fqdn":"ility-ility.xyz","domain":"ility-ility.xyz","tld":"xyz"},"ip":{"addr":"104.21.13.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ility-ility.xyz/","date":"2026-03-08T12:17:15.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ility-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 10:18:23 GMT","end":"Fri, 29 May 2026 10:18:22 GMT"},"fingerprint":{"sha1":"A9:01:82:E8:68:F9:5C:FC:B9:6B:69:00:1F:82:02:38:FA:AF:56:D1","sha256":"5B:4D:CF:ED:6F:64:33:67:40:30:21:51:8A:F0:6D:BC:AE:EA:CC:AC:AD:85:2A:9E:B2:3C:01:6E:B1:CC:F9:4D"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: ility-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ility-ility.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 08 Mar 2026 12:17:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 3833\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 10:49:23 GMT\r\netag: \"69a2c833-ef9\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U2RG4ME73klFTHeJLfReV9DXfGZj9BD4PpRDO2q1lnc%2BOgSYdpxiRAuJ%2BXav1auMP3VLzH0pveHYL9F%2BXG7LQyLqIKNdgUmkB0hO8RDaUQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9d91c69adddc4651-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3833,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGB, non-interlaced","md5":"9957d85020b35bcc2a023d24146a0832","sha1":"f9001145bd807859c40acb0da4b4f2b303c1fe8e","sha256":"4f4c75695624906fb84baa4124d44c4ea1a07f52bf560240d70c9e3dac6120d8","sha512":"7ed28467976ea4ff953024dbc8d9fd53d6e5fd633566de8fa4a7136fc8de1efdb979c7368e7bdaa51b719668531c9dedfc3c4ebd06c7debe9dbeaecaf58e3c98","ssdeep":"","tlshash":"f0814ce90279d9df740ccb8578116f019db7cf62a1e9d39578420ba5f9cea9220bda04","first_seen":"2026-03-02T13:22:55.700915Z","last_seen":"2026-03-08T12:24:34.44966Z","times_seen":5,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":185,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"quick-hub-fd6.cf-oushe8lu.workers.dev/secureproxy?e=jscdn/getFile","fqdn":"quick-hub-fd6.cf-oushe8lu.workers.dev","domain":"cf-oushe8lu.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.204.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ility-ility.xyz/","date":"2026-03-08T12:17:16.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cf-oushe8lu.workers.dev","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 19:09:11 GMT","end":"Thu, 04 Jun 2026 19:09:10 GMT"},"fingerprint":{"sha1":"41:8A:19:74:12:5B:86:92:1B:EA:46:9E:4D:62:2C:AD:6B:A9:46:02","sha256":"EF:76:EE:44:4D:5D:A5:47:31:83:1C:57:01:53:82:2F:16:7A:F1:19:D5:B9:67:DB:8C:C6:30:50:44:41:B5:FE"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: quick-hub-fd6.cf-oushe8lu.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ility-ility.xyz/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://ility-ility.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"05pi8btx07nsd0i7roya\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 08 Mar 2026 12:17:16 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FI0mihTSdhdxmzDO8P%2FrfTIywl50nN5TZxzkKcofUgI84RqxUUZJwJyE%2BKcEwM4agZU1NIW9LB8aypHdLBaOwf8f%2BHPvhFoZV50WSe8%2B%2Fgb0HWE%2Bld8xrjmnXjdn5gZuSZ32rNk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d91c69bbff9e0de-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3341939,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"a21aad1b90b2bf61ed60ccdd3b0d9e6a","sha1":"0176fc62871c52fc64067acec67a9caa7670573f","sha256":"db5c5f027dbbb905710f9bfaaf8c03fa0f724904915571415b112d4d08dca560","sha512":"93473b8636eb89f9e3611ee44801368d72ce2758538898c77b1a2d6bd18ab7daf45ff6ef5a7761c9257245a416c7eda18054890655203671a824c351f1b4f3b9","ssdeep":"24576:2Xb/YWmLkwsOukzMSPbg+lsVo5/Cr0OSzcfUjeVWnUa87OxT:2rGkwdNZngkWWUpk","tlshash":"572523f36f5b982c8f5c1e95a2ff2d0f3d444c26204966b6f695e48726a87b040e7c39","first_seen":"2026-03-08T12:17:49.34889Z","last_seen":"2026-03-08T12:17:49.34889Z","times_seen":1,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ility-ility.xyz/second3x.png","fqdn":"ility-ility.xyz","domain":"ility-ility.xyz","tld":"xyz"},"ip":{"addr":"104.21.13.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://ility-ility.xyz/","date":"2026-03-08T12:17:14.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ility-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 10:18:23 GMT","end":"Fri, 29 May 2026 10:18:22 GMT"},"fingerprint":{"sha1":"A9:01:82:E8:68:F9:5C:FC:B9:6B:69:00:1F:82:02:38:FA:AF:56:D1","sha256":"5B:4D:CF:ED:6F:64:33:67:40:30:21:51:8A:F0:6D:BC:AE:EA:CC:AC:AD:85:2A:9E:B2:3C:01:6E:B1:CC:F9:4D"}}},"request":{"raw":"GET /second3x.png HTTP/1.1\r\nHost: ility-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ility-ility.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 08 Mar 2026 12:17:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 103841\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 10:49:23 GMT\r\netag: \"69a2c833-195a1\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H%2Fq6iO4hbsWLwQjFr4FowDiGTNDLAj4L%2BKs3bMF4lPabHJeF%2FNI4trte6w7ECnptu0zbzxe8NGsXEoBATKXBIxEY6UydzS8jEFcPBlnkDQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d91c6910d114651-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":103841,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1005 x 1644, 8-bit/color RGBA, non-interlaced","md5":"cd17b563def08d64b21db30e25a74ddf","sha1":"a7327d41d8da715a8688c3f770e765130cc246cf","sha256":"f656f5820b58076274dc4f334c300ceff99ef3802590ac3049d19d4f6defa48e","sha512":"baa2be515536110f7dade1a739e4fc2bb67fb8f2064d52c8a4f72e86abdb74b528ef901f755bd067fd347364396256f8d2ee055330ddfd1e38e0bbb7c13e8395","ssdeep":"3072:/WuWWqWzRsxw7mbIIzWWWiFNWWWWWWWcNwWFQRaPu5WrE4a9:/WuWWqWzRlK8IzWWWinWWWWWWWROu5Ww","tlshash":"7ea3e17172221d0ec39d72f4890a6bac5bb30d5933b50f2b2764af75658f25338e35a8","first_seen":"2026-03-02T13:22:55.663041Z","last_seen":"2026-03-08T12:24:34.4439Z","times_seen":5,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ility-ility.xyz/third3x.png","fqdn":"ility-ility.xyz","domain":"ility-ility.xyz","tld":"xyz"},"ip":{"addr":"104.21.13.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://ility-ility.xyz/","date":"2026-03-08T12:17:14.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ility-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 10:18:23 GMT","end":"Fri, 29 May 2026 10:18:22 GMT"},"fingerprint":{"sha1":"A9:01:82:E8:68:F9:5C:FC:B9:6B:69:00:1F:82:02:38:FA:AF:56:D1","sha256":"5B:4D:CF:ED:6F:64:33:67:40:30:21:51:8A:F0:6D:BC:AE:EA:CC:AC:AD:85:2A:9E:B2:3C:01:6E:B1:CC:F9:4D"}}},"request":{"raw":"GET /third3x.png HTTP/1.1\r\nHost: ility-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ility-ility.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 08 Mar 2026 12:17:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 230415\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 10:49:23 GMT\r\netag: \"69a2c833-3840f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LyinvAg75WSMortZTwe7%2BuMe5SSNo1Nct22ZXN%2BDvKn0NEMiw%2B1PvIesVJJdBa2PW67tQ7NfIRZDv3eshY1hkabu5lqhkxZ1XPOHe6BRaw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d91c6911d124651-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":230415,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1005 x 1644, 8-bit/color RGBA, non-interlaced","md5":"f85d8fd76c8615d8ee8132366b1da7b2","sha1":"cfa4634f850a9621cc4bdf5987a062137efe6f05","sha256":"eb46c0db45d75e4fb4619b1d1e79f7b115b307847f6c4991f76b3114f6cb7956","sha512":"d32edf074d20a9b820c9bed54bd8e46d9f2fcc57127473fc9a171b96c3a62b72e341bb7b2a5ab9365673670789633988b66d3ee08d09d10d0b50ee95d7e0d487","ssdeep":"3072:PZvKviGiyj9Ql1F0YR5k68XXdKjw4wxZpRSEbE3M23dsCMoMfumpqbrHlAfff/Nu:hvKviG+l70MG68XX5pdbySCQrporHY4t","tlshash":"d8341375922588ccfb50d63ca127cb055e026b2dfbcb8e4b1a356f5689cf501b1e728d","first_seen":"2026-03-02T13:22:55.704403Z","last_seen":"2026-03-08T12:24:34.45089Z","times_seen":5,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ility-ility.xyz/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtZ6Hw5aXo.woff2","fqdn":"ility-ility.xyz","domain":"ility-ility.xyz","tld":"xyz"},"ip":{"addr":"104.21.13.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ility-ility.xyz/","date":"2026-03-08T12:17:15.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ility-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 10:18:23 GMT","end":"Fri, 29 May 2026 10:18:22 GMT"},"fingerprint":{"sha1":"A9:01:82:E8:68:F9:5C:FC:B9:6B:69:00:1F:82:02:38:FA:AF:56:D1","sha256":"5B:4D:CF:ED:6F:64:33:67:40:30:21:51:8A:F0:6D:BC:AE:EA:CC:AC:AD:85:2A:9E:B2:3C:01:6E:B1:CC:F9:4D"}}},"request":{"raw":"GET /JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtZ6Hw5aXo.woff2 HTTP/1.1\r\nHost: ility-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ility-ility.xyz/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 08 Mar 2026 12:17:15 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 18748\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 10:49:23 GMT\r\netag: \"69a2c833-493c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D1HT0ZSBKLvdzFV3KaebISOXFV7dH8UkjfdDWYmiCJV%2BZHga5OAOXZx%2FMaAlocrWbIiDeckX%2F5HX12geG8TPCdyxD6yUfTIZmo4WswrkiA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d91c694fd744651-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18748,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 18748, version 1.0","md5":"f96e8aab37e850db0b633bd321d2a144","sha1":"12a7d81d936e58ab5d77288100fa447e81321201","sha256":"2b53300fb9471520df2f4905847fb7a209879b2029ae893c05c6ee346b1320cd","sha512":"d9d1b5650947bd367dc20ce9a39a8ccd620af2a03c67372c552cfbfc2ac6ebfdb9628e863a8dbfb77f8c235a0d60195578138861655605dbaf5e7147f2801760","ssdeep":"384:66hGqEmAQ5pMQHNpApEcusuhY/sWhx3fCO/Wb8/E9o+v7d7RNB:625IQ5pM+pAyesWhxPd/Wb8/Eb7d7Rz","tlshash":"f782d07e461ba8c0fd1c3238444b0726be6b9d3ee61e5867804e4813da1b39d98f79d0","first_seen":"2025-09-06T11:38:59.870048Z","last_seen":"2026-08-10T14:03:01.768608Z","times_seen":3266,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ility-ility.xyz/","fqdn":"ility-ility.xyz","domain":"ility-ility.xyz","tld":"xyz"},"ip":{"addr":"104.21.13.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-08T12:17:14.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ility-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 10:18:23 GMT","end":"Fri, 29 May 2026 10:18:22 GMT"},"fingerprint":{"sha1":"A9:01:82:E8:68:F9:5C:FC:B9:6B:69:00:1F:82:02:38:FA:AF:56:D1","sha256":"5B:4D:CF:ED:6F:64:33:67:40:30:21:51:8A:F0:6D:BC:AE:EA:CC:AC:AD:85:2A:9E:B2:3C:01:6E:B1:CC:F9:4D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ility-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 08 Mar 2026 12:17:14 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 10:49:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zWQCU9V34Cf4jVT3lSyLlpfULVncIkyKBzBBH05TgaaHbU69y3TZ3xPdJVfpv6H6fm6BgYBaWHpDbKCIb2StC8CTdeFs2sc2YHyMcgIXKA%3D%3D\"}]}\r\nage: 694331\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9d91c68f9b61481e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"dc.js","description":"A multi-dimensional charting library built to work natively with crossfilter and rendered using d3.js","website":"https://dc-js.github.io/dc.js/","common_platform_enumeration":"","icon":"dc.js.png","categories":["JavaScript graphics","JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62369,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1250)","md5":"b8870284de9fe45366ac7c6ab037f856","sha1":"693ec90b35906e5f9d7770881e3681d92c3182b3","sha256":"a3d3b3fff796f207938f75de4e1d10b6784d4659b4e87c06db72cfa3521995eb","sha512":"34e9d30cc41120cb020eb19dc9b5323766c59c1f80c11579e398d139da8d6a17658bd191f46012785e96814087b316309b28042a943cb272135f398dc24ce9d1","ssdeep":"768:oPyhFK8yhFKoyhFKwyhFKRAiOLbdhRGUVysxnv5fCcN:oSk5klktkRkLIUVywh1N","tlshash":"cc53f8b993f415b6514783d5eb62ab267e61d067ca4e4100f2bc07a82fc3cc9dc27a9d","first_seen":"2026-03-08T12:17:49.355394Z","last_seen":"2026-03-08T12:17:49.355394Z","times_seen":1,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":84,"dns":59,"connect":8,"send":0,"wait":22,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ility-ility.xyz/css2.css","fqdn":"ility-ility.xyz","domain":"ility-ility.xyz","tld":"xyz"},"ip":{"addr":"104.21.13.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ility-ility.xyz/","date":"2026-03-08T12:17:14.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ility-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 10:18:23 GMT","end":"Fri, 29 May 2026 10:18:22 GMT"},"fingerprint":{"sha1":"A9:01:82:E8:68:F9:5C:FC:B9:6B:69:00:1F:82:02:38:FA:AF:56:D1","sha256":"5B:4D:CF:ED:6F:64:33:67:40:30:21:51:8A:F0:6D:BC:AE:EA:CC:AC:AD:85:2A:9E:B2:3C:01:6E:B1:CC:F9:4D"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: ility-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ility-ility.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 08 Mar 2026 12:17:14 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 10:49:23 GMT\r\netag: W/\"69a2c833-382b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lvM%2FvOu8QOyX7bBrx3%2F070thT%2FfYBtbi47HYHQIfIRJmErugKuXQkU02bktuLdCS%2BAonTY9fcHiYaJ%2FUDuCoUbYmoc7MYvRvdk%2Bz5c85aA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d91c6910d0d4651-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14379,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"768d6ec67dee52c27d255b67960a3670","sha1":"5ee48dfbc2071e97e4d665f9e9245ec25cec505a","sha256":"26a4ff2c29cbf024e3a25b54e71d0499631158f511c8bb3dd928496e3cd72865","sha512":"6eeb4deff1a14837290a6ddb34afb15673b151d7b8f70e3de2283396df0d767857ebbe6c0fc2369a57f2287c4096931fb49239b994efe072a52b43dfb9037f68","ssdeep":"192:zFDpl3WwEm9bO8/K31Ac+soo6TKIm4gvSMxQFJgSS1YQcaMBeWD0jhIkdCZHQRm9:hjOr6/qqgZGgO","tlshash":"9452db90046ba600eb871cc627cf3f26ad4db2526450da386ffe0458bdebc652372b5d","first_seen":"2026-03-02T13:22:55.696334Z","last_seen":"2026-03-08T12:24:34.433742Z","times_seen":5,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ility-ility.xyz/xn7_YHE41ni1AdIRqAuZuw1Bx9mbZk79FN_C-bk.woff2","fqdn":"ility-ility.xyz","domain":"ility-ility.xyz","tld":"xyz"},"ip":{"addr":"104.21.13.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ility-ility.xyz/","date":"2026-03-08T12:17:15.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ility-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 10:18:23 GMT","end":"Fri, 29 May 2026 10:18:22 GMT"},"fingerprint":{"sha1":"A9:01:82:E8:68:F9:5C:FC:B9:6B:69:00:1F:82:02:38:FA:AF:56:D1","sha256":"5B:4D:CF:ED:6F:64:33:67:40:30:21:51:8A:F0:6D:BC:AE:EA:CC:AC:AD:85:2A:9E:B2:3C:01:6E:B1:CC:F9:4D"}}},"request":{"raw":"GET /xn7_YHE41ni1AdIRqAuZuw1Bx9mbZk79FN_C-bk.woff2 HTTP/1.1\r\nHost: ility-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ility-ility.xyz/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 08 Mar 2026 12:17:15 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 14108\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 10:49:23 GMT\r\netag: \"69a2c833-371c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5iW5T4u9VcjdMzgTrIuYa%2FW4jCFbpqsMzcMRA%2BCLaXn0NuWiM2IGN2S0MUdJJ1sZbcDm%2Fwx74I9Q4Ngw64b0Wsbo3uQAnVKn2mRRqK2JfQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d91c6950d764651-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14108,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 14108, version 1.0","md5":"1589a53d0b0e81b757201b56ec289d92","sha1":"5296100bf92a9df9aa9cf8b820fa75e474e8917e","sha256":"849290ef12a2eeb9af5c11924120d11aa4ae8b435ed3347d7fc8bc240c293ca3","sha512":"08de38ebe938a9036ce4a02d50810117cd339169f0ea8a55350d22b373fed7f58999eb41c51f969eac1726dda7bc28f92bc5b0e6579c27046f6dda93d45fd1b4","ssdeep":"384:9fW/LcVxKHhaPKTjaRjtcyV1sKDKka/wNu04jP0T:9fW/Lo4RHkcyV1p+ka/wNu03","tlshash":"4152cf95830d8a564bec68b0563a92d912ecc7f0940d93443f8c3da1687eabd935b3fc","first_seen":"2025-06-04T22:07:03.561923Z","last_seen":"2026-08-11T00:25:32.69562Z","times_seen":1521,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"base.llamarpc.com/","fqdn":"base.llamarpc.com","domain":"llamarpc.com","tld":"com"},"ip":{"addr":"172.67.68.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ility-ility.xyz/","date":"2026-03-08T12:17:15.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"llamarpc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 09:44:32 GMT","end":"Sun, 03 May 2026 10:44:28 GMT"},"fingerprint":{"sha1":"D0:0D:78:A5:95:3F:EE:B1:9C:2A:1F:52:4A:80:91:B4:70:2F:62:2F","sha256":"57:E9:A3:F8:8A:14:5D:5F:14:F1:B9:7B:F8:E7:0C:23:1F:5B:04:3F:9B:EB:77:8D:14:7E:BA:1D:A3:35:A5:C6"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: base.llamarpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://ility-ility.xyz/\r\nOrigin: https://ility-ility.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 08 Mar 2026 12:17:15 GMT\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,POST,HEAD,PUT,DELETE,PATCH\r\naccess-control-allow-origin: *\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers, Origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nisHbEPzr96bzWS9JI%2BQIeONWSmv7rh2biA0Zb8wvgrfl20SmfR%2BnpBZpYIbiIP9qg3HGZR1%2BLEtsPUz8nISWBwAGNhzKUTv5r2J8pBfZ40%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d91c695f8529a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T05:57:28.976551Z","times_seen":17831158,"resource_available":true,"data":null}},"time_used":745,"timings":{"blocked":70,"dns":7,"connect":13,"send":0,"wait":582,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ility-ility.xyz/style.css","fqdn":"ility-ility.xyz","domain":"ility-ility.xyz","tld":"xyz"},"ip":{"addr":"104.21.13.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ility-ility.xyz/","date":"2026-03-08T12:17:14.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ility-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 10:18:23 GMT","end":"Fri, 29 May 2026 10:18:22 GMT"},"fingerprint":{"sha1":"A9:01:82:E8:68:F9:5C:FC:B9:6B:69:00:1F:82:02:38:FA:AF:56:D1","sha256":"5B:4D:CF:ED:6F:64:33:67:40:30:21:51:8A:F0:6D:BC:AE:EA:CC:AC:AD:85:2A:9E:B2:3C:01:6E:B1:CC:F9:4D"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: ility-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ility-ility.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 08 Mar 2026 12:17:14 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 10:49:23 GMT\r\netag: W/\"69a2c833-844f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=08JK6R%2BeM9C%2FzIQm9OIwG2GBDSifnENWCzrtGMGgWu48FPB46FzRSmWrkIXnwPc0tGhFepsVNdGPtZ3uhANaFyXdbF39wlBSDBnTRsvW7g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d91c6910d0c4651-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33871,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"95aa6c2ad0fdb1b535f5d6c77ca7e95e","sha1":"08577d97276788eebd31989ea4375b91fffa897f","sha256":"199e4b32f70a7a15fe377a8ce847563db9923dc2129293eaf90f90405eec2f43","sha512":"352eed9e6e9f9f813958286c7f5a02b41d3b4b1a1408bda9d240d86ef00b77ae1a89603dd0483a1ccf1632800b325a954eb04607057f88b9992e3d62959c2b46","ssdeep":"768:XPMKKJ9Y4vGolLx5unnfWX3hnxBgthzNb5wFG1:/MKKJ9XvGg8eXxxBgRu01","tlshash":"afe271a66ba52104b91fd1f839e39b597338c443d10eccbc67e1305cef892d994a3b99","first_seen":"2026-03-02T13:22:55.69442Z","last_seen":"2026-03-08T12:24:34.433088Z","times_seen":5,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ility-ility.xyz/logo.svg","fqdn":"ility-ility.xyz","domain":"ility-ility.xyz","tld":"xyz"},"ip":{"addr":"104.21.13.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ility-ility.xyz/","date":"2026-03-08T12:17:14.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ility-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 10:18:23 GMT","end":"Fri, 29 May 2026 10:18:22 GMT"},"fingerprint":{"sha1":"A9:01:82:E8:68:F9:5C:FC:B9:6B:69:00:1F:82:02:38:FA:AF:56:D1","sha256":"5B:4D:CF:ED:6F:64:33:67:40:30:21:51:8A:F0:6D:BC:AE:EA:CC:AC:AD:85:2A:9E:B2:3C:01:6E:B1:CC:F9:4D"}}},"request":{"raw":"GET /logo.svg HTTP/1.1\r\nHost: ility-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ility-ility.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 08 Mar 2026 12:17:14 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 10:49:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"69a2c833-4ca\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HRoKz0dnYpxXyC5AX3b%2Fq3qMYPzC4juX9i7rvUIC55HVgcaPaIWm6cpx5TQROBOj%2F2NTIznq18jdDFvF%2F7ulVbebCI0cuISl4EhVhnqLGQ%3D%3D\"}]}\r\ncf-ray: 9d91c6910d0f4651-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1226,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1ac248a772639d022d6e6aab033be741","sha1":"9df76961caa9ac4f5004f21d9d7f6514cd4b708b","sha256":"84d02ca299e78af4caf317481ab2064810382badc7ca108ed6204e1f7f54c17c","sha512":"67e19401e6bd0baf0e0f90a1c0e416b59e5f551e0477c9096991d70fe536fad7e371ab7be4ce78bfc412e530200d7706e0d167cd6275219833c3e230a085efdb","ssdeep":"","tlshash":"4c21c1f054ac9284760ad73d426c643b9d7994f7cbbdd5897780068e7b6409f4cde9c0","first_seen":"2026-03-02T13:22:55.703249Z","last_seen":"2026-03-08T12:24:34.450279Z","times_seen":5,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ility-ility.xyz/01_Leader%20Board.png","fqdn":"ility-ility.xyz","domain":"ility-ility.xyz","tld":"xyz"},"ip":{"addr":"104.21.13.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ility-ility.xyz/","date":"2026-03-08T12:17:14.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ility-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 10:18:23 GMT","end":"Fri, 29 May 2026 10:18:22 GMT"},"fingerprint":{"sha1":"A9:01:82:E8:68:F9:5C:FC:B9:6B:69:00:1F:82:02:38:FA:AF:56:D1","sha256":"5B:4D:CF:ED:6F:64:33:67:40:30:21:51:8A:F0:6D:BC:AE:EA:CC:AC:AD:85:2A:9E:B2:3C:01:6E:B1:CC:F9:4D"}}},"request":{"raw":"GET /01_Leader%20Board.png HTTP/1.1\r\nHost: ility-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ility-ility.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 08 Mar 2026 12:17:14 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 10:49:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 0\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u7ckSONnJMs2AG843o9iCjyYPB%2Bgm3qMox3Sck%2FbFiqVZq0RGv3z0xiuO8uIhPXVmJnpwO8r%2FwdwkpTGTI90CG%2F%2FNFVOWpTYhzXleLlMxg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9d91c6946d5f4651-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"dc.js","description":"A multi-dimensional charting library built to work natively with crossfilter and rendered using d3.js","website":"https://dc-js.github.io/dc.js/","common_platform_enumeration":"","icon":"dc.js.png","categories":["JavaScript graphics","JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62369,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1250)","md5":"cda6f388902c78f861b29d5c00989bef","sha1":"e36c87f6cca616d3e6c774df383c08c16c712a2a","sha256":"4561229685fe8c09b4240b70fbe3e2b16d0563dad7fdff1f75ee82a73b4f4fff","sha512":"5d35f2ae6bfdecc82b3896581ea963da8e2522bfccfb3dc2ea40336c261f16661bf989927e163a655f6e70c15d108bf573d418a4ad9d883fbd092d3cd0115c9b","ssdeep":"768:oPyhFK8yhFKoyhFKwyhFKRAiOLbdFRGUVysxnv5fCc+:oSk5klktkRkjIUVywh1+","tlshash":"df53f7b993f415b6514783d5eb22ab267e61d067ca4e4110f2bc07a82fc3cc9dc27a9d","first_seen":"2026-03-08T12:17:49.360656Z","last_seen":"2026-03-08T12:17:49.360656Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ility-ility.xyz/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"ility-ility.xyz","domain":"ility-ility.xyz","tld":"xyz"},"ip":{"addr":"104.21.13.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ility-ility.xyz/","date":"2026-03-08T12:17:15.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ility-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 10:18:23 GMT","end":"Fri, 29 May 2026 10:18:22 GMT"},"fingerprint":{"sha1":"A9:01:82:E8:68:F9:5C:FC:B9:6B:69:00:1F:82:02:38:FA:AF:56:D1","sha256":"5B:4D:CF:ED:6F:64:33:67:40:30:21:51:8A:F0:6D:BC:AE:EA:CC:AC:AD:85:2A:9E:B2:3C:01:6E:B1:CC:F9:4D"}}},"request":{"raw":"GET /pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: ility-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ility-ility.xyz/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 08 Mar 2026 12:17:15 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 7884\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 10:49:23 GMT\r\netag: \"69a2c833-1ecc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nk1f3t%2FsCvBJOQSVoZabYnCYfcKTlmOC4vOqJ7ZGB0sQra%2FQypZ29g%2BCfmSa2zzYv%2BufVi3QSiR%2F1RNWpDG7TvOEvB2xhazHJnwBP%2FP0OA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d91c694fd704651-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7884,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-08-11T05:51:05.307727Z","times_seen":390291,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ility-ility.xyz/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2","fqdn":"ility-ility.xyz","domain":"ility-ility.xyz","tld":"xyz"},"ip":{"addr":"104.21.13.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ility-ility.xyz/","date":"2026-03-08T12:17:15.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ility-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 10:18:23 GMT","end":"Fri, 29 May 2026 10:18:22 GMT"},"fingerprint":{"sha1":"A9:01:82:E8:68:F9:5C:FC:B9:6B:69:00:1F:82:02:38:FA:AF:56:D1","sha256":"5B:4D:CF:ED:6F:64:33:67:40:30:21:51:8A:F0:6D:BC:AE:EA:CC:AC:AD:85:2A:9E:B2:3C:01:6E:B1:CC:F9:4D"}}},"request":{"raw":"GET /pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2 HTTP/1.1\r\nHost: ility-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ility-ility.xyz/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 08 Mar 2026 12:17:15 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 7840\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 10:49:23 GMT\r\netag: \"69a2c833-1ea0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7oYJduztRvjTZjQ2wtZYWEti9JrL76vQguSVS2YLf6%2Fy7NlOrDRxng54bAzjC6apYHH5bMu0G8yLT8gpbL6NZrpNbpfgpZUKNdaoM6x77w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d91c6950d774651-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7840,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 7840, version 1.0","md5":"8d91ec1ca2d8b56640a47117e313a3e9","sha1":"a9e9bafe64666f4595051a0e895b47a5fa39e67e","sha256":"78bc3aa78faec288bbb3bf26c9a0fa4eb67b1e69da94a17233c5cab60525efdb","sha512":"bd3a864bd45f39ee83ee79ba4469a156ad8ff3dd33d8aae11e3edd97b29c2ef7f610ac851726041251e34b0108f618a2f945038bf6c0de9a7982e0d643cdfcfb","ssdeep":"192:S5upwnqrBHPLA3J73KAQDPh50uFdXrnpjDS7LjvQnRb:S5ELrBvLA3J76AIPhi+vXwzQnRb","tlshash":"68f19de0200937e4f73d5feee6276b7f2e2edb05e25305aa7556014c69de39310d21a2","first_seen":"2023-04-06T21:42:41Z","last_seen":"2026-08-11T05:43:59.303492Z","times_seen":81170,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":299,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ility-ility.xyz/aos.css","fqdn":"ility-ility.xyz","domain":"ility-ility.xyz","tld":"xyz"},"ip":{"addr":"104.21.13.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ility-ility.xyz/","date":"2026-03-08T12:17:14.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ility-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 10:18:23 GMT","end":"Fri, 29 May 2026 10:18:22 GMT"},"fingerprint":{"sha1":"A9:01:82:E8:68:F9:5C:FC:B9:6B:69:00:1F:82:02:38:FA:AF:56:D1","sha256":"5B:4D:CF:ED:6F:64:33:67:40:30:21:51:8A:F0:6D:BC:AE:EA:CC:AC:AD:85:2A:9E:B2:3C:01:6E:B1:CC:F9:4D"}}},"request":{"raw":"GET /aos.css HTTP/1.1\r\nHost: ility-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ility-ility.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 08 Mar 2026 12:17:14 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 10:49:23 GMT\r\netag: W/\"69a2c833-65c5\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J1uN99R44xXQbOmX4dQCZdpYRLGpmI383ldP3asYqrGsJbdHACSKiP0%2FLuw81jvnuahyQc9wmA2W%2B5NmPORmvjhBxcsixtab2eLCHFZU4A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d91c6910d0e4651-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26053,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (26053), with no line terminators","md5":"847da8fca8060ca1a70f976aab1210b9","sha1":"0557d37454b67f42f2cb101e57e5070fb1193570","sha256":"1aa8845fd06e475aefe733d4e55b36a92fcd487975049c8172341827ac9cc03e","sha512":"d5c2bbf1ad68fa1b7625c696ea0f0e5d8c2aa5ebfdfba1aa3a4cfdc6604df625148489dd2adc7020b19660e4a26ce2a32ec11d8f28d9bd80eafdc67035e6a4d3","ssdeep":"768:CMJihoCcZCOud8G8tKS65wqsZQ1G+dM2cl6iCRotsV84sxIKcv4g01UeEPEQEB4D:CMJihoCcZCOud8G8tKS65wqsZCG+dM25","tlshash":"f0c24b5a7a4cd100bf831b4762df2a0859347588e5301986be3f35ca2cd5ce6b973fa9","first_seen":"2023-04-05T07:18:45Z","last_seen":"2026-08-11T06:01:42.21962Z","times_seen":43760,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ility-ility.xyz/first3x.png","fqdn":"ility-ility.xyz","domain":"ility-ility.xyz","tld":"xyz"},"ip":{"addr":"104.21.13.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://ility-ility.xyz/","date":"2026-03-08T12:17:14.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ility-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 10:18:23 GMT","end":"Fri, 29 May 2026 10:18:22 GMT"},"fingerprint":{"sha1":"A9:01:82:E8:68:F9:5C:FC:B9:6B:69:00:1F:82:02:38:FA:AF:56:D1","sha256":"5B:4D:CF:ED:6F:64:33:67:40:30:21:51:8A:F0:6D:BC:AE:EA:CC:AC:AD:85:2A:9E:B2:3C:01:6E:B1:CC:F9:4D"}}},"request":{"raw":"GET /first3x.png HTTP/1.1\r\nHost: ility-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ility-ility.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 08 Mar 2026 12:17:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 99978\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 10:49:23 GMT\r\netag: \"69a2c833-1868a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C%2BsFwB2cCrZnmCFJrbM982VwngDL4YOQv%2FC7QoUVj%2BbyNbFQrns4pC7JTAU3kJWznUifuSkrEda0Oze6aWyFjBH7eR0nTxXazhsGBRpznQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d91c6910d104651-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99978,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1005 x 1644, 8-bit/color RGBA, non-interlaced","md5":"abca7fb54f3ed572cf83e6c6c2e45904","sha1":"8a82f6f374a3dca35347dc3f5604c957101ef62c","sha256":"510d68676d2ef8736480d9bca29ae0927fc7bf6182e0b8c2e06763ca8c6049c5","sha512":"7e2b54acb5e358b4ee37047a24593443268c3f6a3c228438a67a37d3acf945fa994393e50f9427b54965abd01af94186025c76880cc59fafe549a1e5dd503b34","ssdeep":"3072:CxWQWWACWUc+0pizvWWWNWWWWWWd9ROddmat91GM8S:CxWQWW9WUpzvWWWNWWWWWWhOddB6LS","tlshash":"f3a3e1b325344e8ffb9eb6b1840b0fbc66b31c54719a9a5b43212f70140f3236ad7959","first_seen":"2026-03-02T13:22:55.684855Z","last_seen":"2026-03-08T12:24:34.443387Z","times_seen":5,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ility-ility.xyz/02_Profile.png","fqdn":"ility-ility.xyz","domain":"ility-ility.xyz","tld":"xyz"},"ip":{"addr":"104.21.13.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ility-ility.xyz/","date":"2026-03-08T12:17:14.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ility-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 10:18:23 GMT","end":"Fri, 29 May 2026 10:18:22 GMT"},"fingerprint":{"sha1":"A9:01:82:E8:68:F9:5C:FC:B9:6B:69:00:1F:82:02:38:FA:AF:56:D1","sha256":"5B:4D:CF:ED:6F:64:33:67:40:30:21:51:8A:F0:6D:BC:AE:EA:CC:AC:AD:85:2A:9E:B2:3C:01:6E:B1:CC:F9:4D"}}},"request":{"raw":"GET /02_Profile.png HTTP/1.1\r\nHost: ility-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ility-ility.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 08 Mar 2026 12:17:14 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 10:49:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XJ%2Fdyb%2BciBLX7%2FcHdBPTY9X2a9kZ0FdYn2LFi%2FvQCEqv65sMF4u7Zt%2FWm0TnDwti5J36ipGB%2B%2B0xVl9sk5pQNL%2FGnWvA8S5suOBcEWpFyg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9d91c6911d144651-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"dc.js","description":"A multi-dimensional charting library built to work natively with crossfilter and rendered using d3.js","website":"https://dc-js.github.io/dc.js/","common_platform_enumeration":"","icon":"dc.js.png","categories":["JavaScript graphics","JavaScript libraries"]}],"data":{"size":62369,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1250)","md5":"0e1bc51ca76cbaecbc24a52c78225d02","sha1":"f48ae70b61515dd97ebd888950dc4954087ce9ab","sha256":"4247d32820be283c9f2ac750fb921ac24c4c8115a6179b435ef7ada4c1224622","sha512":"10c9ad84aedb4b71f2e2d1a2e0dbfd46bab2bf9e47291d4fecbf64de96e1da90358824aaf90234b5bf431dcea59437c8375b4f1bd883066c6e2b4181bf654996","ssdeep":"768:oPyhFK8yhFKoyhFKwyhFKRAiOLbdERGUVysxnv5fCci:oSk5klktkRkaIUVywh1i","tlshash":"dd53f8b993f415b6514783d5eb22ab267e61d067ca4e4110f2bc07a82fc3cc9dc27a9d","first_seen":"2026-03-08T12:17:49.36529Z","last_seen":"2026-03-08T12:17:49.36529Z","times_seen":1,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ility-ility.xyz/4f56a0e57650fa48ad7f0de7de4af3bd634889a8.png","fqdn":"ility-ility.xyz","domain":"ility-ility.xyz","tld":"xyz"},"ip":{"addr":"104.21.13.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ility-ility.xyz/","date":"2026-03-08T12:17:15.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ility-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 10:18:23 GMT","end":"Fri, 29 May 2026 10:18:22 GMT"},"fingerprint":{"sha1":"A9:01:82:E8:68:F9:5C:FC:B9:6B:69:00:1F:82:02:38:FA:AF:56:D1","sha256":"5B:4D:CF:ED:6F:64:33:67:40:30:21:51:8A:F0:6D:BC:AE:EA:CC:AC:AD:85:2A:9E:B2:3C:01:6E:B1:CC:F9:4D"}}},"request":{"raw":"GET /4f56a0e57650fa48ad7f0de7de4af3bd634889a8.png HTTP/1.1\r\nHost: ility-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ility-ility.xyz/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 08 Mar 2026 12:17:15 GMT\r\ncontent-type: image/png\r\ncontent-length: 14701728\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 10:49:23 GMT\r\netag: \"69a2c833-e054a0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4JVsgMTg%2BPQDWwl8PZdQp9sQ1yX05WNwL2V3FZHN3FygOn%2FC%2FMzfX%2Fj%2FtufQARMBeCOTWlP27Q1NmOC8Zv80UqFo9bxN4G8NmphDa6p%2B7Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d91c694cd6b4651-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14701728,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 4096x2304, components 3","md5":"e225dcf5d3165a68ee796f2a1cc4497c","sha1":"9342572d41e4905edd8ad5b86fbb96942b71a6b5","sha256":"e828348d511da09ab415baf0deb3bce6f376960789af6e2fdec80dc54c27c28c","sha512":"cfc5cf879a5576d86fbc4d50922a42a2d31f66222ee3ec871586993367e61b7d71b40c50cb81de02e0766c8e487b9444d8e166d063715e5e8b286f1b2fd78cf2","ssdeep":"24576:V2wklFeXFPU0lW3Kg5Z7F4AI13KouPVwF6PiptPLM1Ujx:V8He1plzgr7F4ONUtLgUjx","tlshash":"312533eac10458133fda3e354dee5271e84ae7319c13a65723c86ebac1d887da6b570c","first_seen":"2026-03-02T13:22:55.71073Z","last_seen":"2026-03-08T12:24:34.434373Z","times_seen":5,"resource_available":false,"data":null}},"time_used":2983,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":2767,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"base.drpc.org/","fqdn":"base.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.10.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ility-ility.xyz/","date":"2026-03-08T12:17:15.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 16:14:00 GMT","end":"Sun, 17 May 2026 17:13:51 GMT"},"fingerprint":{"sha1":"6E:2D:5A:72:A1:75:4A:F0:C7:96:F2:E8:26:78:F5:FC:54:0C:73:93","sha256":"18:E9:96:29:98:D2:5D:4E:19:CD:75:98:36:ED:EB:40:40:C4:23:2C:76:E1:95:F1:4C:85:59:D2:48:CB:AF:4A"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: base.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://ility-ility.xyz/\r\nOrigin: https://ility-ility.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 08 Mar 2026 12:17:15 GMT\r\ncf-ray: 9d91c69629df2efa-OSL\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: https://ility-ility.xyz\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T05:57:28.976551Z","times_seen":17831158,"resource_available":true,"data":null}},"time_used":299,"timings":{"blocked":104,"dns":3,"connect":7,"send":0,"wait":87,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"base.publicnode.com/","fqdn":"base.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"104.20.24.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ility-ility.xyz/","date":"2026-03-08T12:17:15.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:40:15 GMT","end":"Mon, 11 May 2026 21:40:09 GMT"},"fingerprint":{"sha1":"02:33:4E:80:56:8A:88:B0:A0:32:C7:FD:BB:EA:AD:56:66:32:7F:9E","sha256":"25:6C:D0:C9:8E:E0:89:64:BF:49:7D:80:0C:31:46:0A:5B:1D:05:0B:79:60:DB:A7:27:2E:C9:40:85:64:DA:1E"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: base.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ility-ility.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://ility-ility.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0xEeB513144490B88366616606382BD2A9f1d2cA37\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 08 Mar 2026 12:17:15 GMT\r\ncontent-type: application/json\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\nx-envoy-upstream-service-time: 1\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-ray: 9d91c69649cc958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":871,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7a72ea08c24281aea5a8ce782c1c2497","sha1":"66e7fcffef62a098a31da026a42491c80a3afae0","sha256":"a1442054ba490e74023fe41581125d757840ddc882ea3cda7b4cf6b4240fe04d","sha512":"cd5f54f5f504002c6160dfcc8bc7bd2988a695c1adc3832c4d3f1e42b8ce6c5973995f484e94aacd0bcc38ee7943c598ace61ea48dbdbef30501b4ea52f3a4c6","ssdeep":"","tlshash":"ce11dcf09901da91f6241f57a2fd31cb60343483eede5f8e425a36851aa6202fe0d5ce","first_seen":"2026-03-07T01:42:36.664425Z","last_seen":"2026-03-08T12:24:34.435704Z","times_seen":4,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ility-ility.xyz/01_Leader%20Board.png","fqdn":"ility-ility.xyz","domain":"ility-ility.xyz","tld":"xyz"},"ip":{"addr":"104.21.13.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ility-ility.xyz/","date":"2026-03-08T12:17:14.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ility-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 10:18:23 GMT","end":"Fri, 29 May 2026 10:18:22 GMT"},"fingerprint":{"sha1":"A9:01:82:E8:68:F9:5C:FC:B9:6B:69:00:1F:82:02:38:FA:AF:56:D1","sha256":"5B:4D:CF:ED:6F:64:33:67:40:30:21:51:8A:F0:6D:BC:AE:EA:CC:AC:AD:85:2A:9E:B2:3C:01:6E:B1:CC:F9:4D"}}},"request":{"raw":"GET /01_Leader%20Board.png HTTP/1.1\r\nHost: ility-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ility-ility.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 08 Mar 2026 12:17:14 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 10:49:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pPBJPb0MyrvocLIkurHp27v%2F982nLe%2Fyjl36J6lwY2iqOVsYwtYiLHPzgmbwNX0wUBcTTI%2FIbrlxiZqcaTkeygmOvrzgGcPI7DBO8EKA2A%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9d91c6911d134651-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"dc.js","description":"A multi-dimensional charting library built to work natively with crossfilter and rendered using d3.js","website":"https://dc-js.github.io/dc.js/","common_platform_enumeration":"","icon":"dc.js.png","categories":["JavaScript graphics","JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62369,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1250)","md5":"317b11080d4f3c3663ae55ab2b6bc75b","sha1":"6370e438113f580fc2aa6d7f529613095075ffe1","sha256":"cd6756c047a8ee31e235e8d54a96d70a8f89a3ec8d481406ebe118325afc1ad6","sha512":"d02d538e2286c66ee8a8eb54a20d24a8e89d71f416235f17af179356523c9c1e0450b0e7826f7ad927e62226443d9b7e99a5ba06a7ef78eb9ff6745656ed45a1","ssdeep":"768:oPyhFK8yhFKoyhFKwyhFKRAiOLbduRGUVysxnv5fCcE:oSk5klktkRk8IUVywh1E","tlshash":"5553f8b993f415b6514783d5eb22ab267e61d067ca4e4100f2bc07a82fc3cc9dc27a9d","first_seen":"2026-03-08T12:17:49.368532Z","last_seen":"2026-03-08T12:17:49.368532Z","times_seen":1,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ility-ility.xyz/02_Profile.png","fqdn":"ility-ility.xyz","domain":"ility-ility.xyz","tld":"xyz"},"ip":{"addr":"104.21.13.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ility-ility.xyz/","date":"2026-03-08T12:17:14.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ility-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 10:18:23 GMT","end":"Fri, 29 May 2026 10:18:22 GMT"},"fingerprint":{"sha1":"A9:01:82:E8:68:F9:5C:FC:B9:6B:69:00:1F:82:02:38:FA:AF:56:D1","sha256":"5B:4D:CF:ED:6F:64:33:67:40:30:21:51:8A:F0:6D:BC:AE:EA:CC:AC:AD:85:2A:9E:B2:3C:01:6E:B1:CC:F9:4D"}}},"request":{"raw":"GET /02_Profile.png HTTP/1.1\r\nHost: ility-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ility-ility.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 08 Mar 2026 12:17:14 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 10:49:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 0\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QPtYOnk1HNepahSNjEJHlOC7K3RPtiTyBaFxqZcaBUQxqNYjBYdX8L%2FXzY8lNuqtDUR9WIuEMARPx3dLo24ER8daqseJH7vE14sLmUgebQ%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9d91c6946d604651-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"dc.js","description":"A multi-dimensional charting library built to work natively with crossfilter and rendered using d3.js","website":"https://dc-js.github.io/dc.js/","common_platform_enumeration":"","icon":"dc.js.png","categories":["JavaScript graphics","JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62369,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1250)","md5":"d772adf01f9a903f6c76f65036e46e2b","sha1":"034867dfc2f86610645d3e8ab6758867fd4ae13e","sha256":"939600cd1251dae23e9b4d590aad58ae1c1fb0cf168762e300788241ec0933f5","sha512":"ebd46a3c8c2acb632c057dedf72c5246c476e9b7c68f628afeef4a4c314ccd8774e586b4ec8cf033561d16c2d431aa420db4d40041215cb6bb4fb6364d39bb9b","ssdeep":"768:oPyhFK8yhFKoyhFKwyhFKRAiOLbdPRGUVysxnv5fCco:oSk5klktkRklIUVywh1o","tlshash":"9b53f7b993f415b6504783d5eb22ab267e61d067ca4e4110f2bc07a82fc3cc9dc27a9d","first_seen":"2026-03-08T12:17:49.371331Z","last_seen":"2026-03-08T12:17:49.371331Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ility-ility.xyz/06_Mini_Explorer.png","fqdn":"ility-ility.xyz","domain":"ility-ility.xyz","tld":"xyz"},"ip":{"addr":"104.21.13.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ility-ility.xyz/","date":"2026-03-08T12:17:14.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ility-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 10:18:23 GMT","end":"Fri, 29 May 2026 10:18:22 GMT"},"fingerprint":{"sha1":"A9:01:82:E8:68:F9:5C:FC:B9:6B:69:00:1F:82:02:38:FA:AF:56:D1","sha256":"5B:4D:CF:ED:6F:64:33:67:40:30:21:51:8A:F0:6D:BC:AE:EA:CC:AC:AD:85:2A:9E:B2:3C:01:6E:B1:CC:F9:4D"}}},"request":{"raw":"GET /06_Mini_Explorer.png HTTP/1.1\r\nHost: ility-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ility-ility.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 08 Mar 2026 12:17:14 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 10:49:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 0\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vsUO07IcPechA7vDNwKojDjh%2FfgBoYB22CCJsy3AE7k6%2FxaWptA3Ams86PHOP%2Fc%2Fk7ird4H2HynVqioTM4NNcy7UiwbCjtL1zGrcSdV1vw%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9d91c6948d684651-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"dc.js","description":"A multi-dimensional charting library built to work natively with crossfilter and rendered using d3.js","website":"https://dc-js.github.io/dc.js/","common_platform_enumeration":"","icon":"dc.js.png","categories":["JavaScript graphics","JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62369,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1250)","md5":"a052506410a6b57320a0d34dd7c444df","sha1":"e83faa92fb2e0b13fbab89b8f7bc12ae3130bef0","sha256":"5bdc7ea2a6f64caab8c9aae37e9ec978bb54496b64a47afc26030a99aea36c9b","sha512":"40c8161c0d99dac306555d98dcef619c8f8b11886167a9488010999b1fcd2f46925e009f54989f1cb58b723c626f9b27c075cd4dd6bb063bf3c98b39e1bab820","ssdeep":"768:oPyhFK8yhFKoyhFKwyhFKRAiOLbdwRGUVysxnv5fCct:oSk5klktkRkCIUVywh1t","tlshash":"1653f8b993f415b6514783d5eb22ab267e61d067ca4e4110f2bc07a82fc3cc9dc27a9d","first_seen":"2026-03-08T12:17:49.373294Z","last_seen":"2026-03-08T12:17:49.373294Z","times_seen":1,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"quick-hub-fd6.cf-oushe8lu.workers.dev/secureproxy?e=jscdn/getFile","fqdn":"quick-hub-fd6.cf-oushe8lu.workers.dev","domain":"cf-oushe8lu.workers.dev","tld":"workers.dev"},"ip":{"addr":"172.67.204.221","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ility-ility.xyz/","date":"2026-03-08T12:17:16.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cf-oushe8lu.workers.dev","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 06 Mar 2026 19:09:11 GMT","end":"Thu, 04 Jun 2026 19:09:10 GMT"},"fingerprint":{"sha1":"41:8A:19:74:12:5B:86:92:1B:EA:46:9E:4D:62:2C:AD:6B:A9:46:02","sha256":"EF:76:EE:44:4D:5D:A5:47:31:83:1C:57:01:53:82:2F:16:7A:F1:19:D5:B9:67:DB:8C:C6:30:50:44:41:B5:FE"}}},"request":{"raw":"OPTIONS /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: quick-hub-fd6.cf-oushe8lu.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://ility-ility.xyz/\r\nOrigin: https://ility-ility.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 08 Mar 2026 12:17:16 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lLQ4GO7HnI%2BlaGns27NglBoyn4M0WyhoWqK6rEUJcJ%2F%2Bs6Nr1gHojpDNVcuMIQvw4nsK1kKBsf2sPW04ZLSpchiDfvAwrAScYsv6QLJS1Nssa7wk%2BdIE8bunz6RlWH35TkyiqQw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d91c69b9fb2e0de-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T05:57:28.976551Z","times_seen":17831158,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":50,"dns":1,"connect":18,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ility-ility.xyz/03_Community.png","fqdn":"ility-ility.xyz","domain":"ility-ility.xyz","tld":"xyz"},"ip":{"addr":"104.21.13.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ility-ility.xyz/","date":"2026-03-08T12:17:14.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ility-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 10:18:23 GMT","end":"Fri, 29 May 2026 10:18:22 GMT"},"fingerprint":{"sha1":"A9:01:82:E8:68:F9:5C:FC:B9:6B:69:00:1F:82:02:38:FA:AF:56:D1","sha256":"5B:4D:CF:ED:6F:64:33:67:40:30:21:51:8A:F0:6D:BC:AE:EA:CC:AC:AD:85:2A:9E:B2:3C:01:6E:B1:CC:F9:4D"}}},"request":{"raw":"GET /03_Community.png HTTP/1.1\r\nHost: ility-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ility-ility.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 08 Mar 2026 12:17:14 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 10:49:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J6Vo2qMOln9Z3h%2B%2FEsm%2F%2FqqUHRfu7zWs%2BGvmwN2V%2FA1UXdAXtpeW8Wb%2BAR3iB8ZR5hIc8%2F7mfMs3Audqbg3q8gdDPNOx15qVmr%2FseauMsA%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9d91c6911d154651-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"dc.js","description":"A multi-dimensional charting library built to work natively with crossfilter and rendered using d3.js","website":"https://dc-js.github.io/dc.js/","common_platform_enumeration":"","icon":"dc.js.png","categories":["JavaScript graphics","JavaScript libraries"]}],"data":{"size":62369,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1250)","md5":"9d0e822814d5ce4cddcc4056f3d18c98","sha1":"1fe97f35a0ed6197cec3dc750208c2937ddf4f37","sha256":"f659f0a27b54f9591acb29ae268ffaba725eb3c028456342c0cf0c06154c8696","sha512":"e8527b5495e33cc84929ebf72f40ea1e15c3164af74a2fee7a3881739ceaffa74a790a785c3e59cb3f879d359f231c7f4279e9b20ee9648b7d4cac4484a93e90","ssdeep":"768:oPyhFK8yhFKoyhFKwyhFKRAiOLbd+RGUVysxnv5fCcZ:oSk5klktkRkwIUVywh1Z","tlshash":"5c53f8b993f415b6514783d5eb22ab267e61d067ca4e4110f2bc07a82fc3cc9dc27a9d","first_seen":"2026-03-08T12:17:49.375232Z","last_seen":"2026-03-08T12:17:49.375232Z","times_seen":1,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ility-ility.xyz/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"ility-ility.xyz","domain":"ility-ility.xyz","tld":"xyz"},"ip":{"addr":"104.21.13.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ility-ility.xyz/","date":"2026-03-08T12:17:14.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ility-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 10:18:23 GMT","end":"Fri, 29 May 2026 10:18:22 GMT"},"fingerprint":{"sha1":"A9:01:82:E8:68:F9:5C:FC:B9:6B:69:00:1F:82:02:38:FA:AF:56:D1","sha256":"5B:4D:CF:ED:6F:64:33:67:40:30:21:51:8A:F0:6D:BC:AE:EA:CC:AC:AD:85:2A:9E:B2:3C:01:6E:B1:CC:F9:4D"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: ility-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ility-ility.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Sun, 08 Mar 2026 13:05:14 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bx8uTe5kcAWkZ2UNqOQSbZHrzjRzYJgHYcPMXglF9IKdPyyLvFgOw6VTr2B8D%2FKGdsbBjeK8NNyEDqiPsIh5Pcjm%2BBv1sG2%2BfD5pmBGrGg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Sun, 08 Mar 2026 12:17:14 GMT\r\ncf-ray: 9d91c6911d194651-ARN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-11T05:54:05.45579Z","times_seen":417896,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mainnet.base.org/","fqdn":"mainnet.base.org","domain":"base.org","tld":"org"},"ip":{"addr":"172.64.147.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ility-ility.xyz/","date":"2026-03-08T12:17:15.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"base.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 06:55:27 GMT","end":"Tue, 28 Apr 2026 07:55:23 GMT"},"fingerprint":{"sha1":"32:27:13:5D:2F:ED:5C:29:B9:87:88:C8:93:BF:5C:F4:5E:E4:0D:C1","sha256":"E0:31:0B:DB:D1:6A:5A:0D:53:64:1A:C1:7B:2C:1C:10:6B:F5:15:35:76:6C:1A:79:B6:0D:4F:38:8F:E6:8E:0D"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: mainnet.base.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://ility-ility.xyz/\r\nOrigin: https://ility-ility.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 08 Mar 2026 12:17:15 GMT\r\ncf-ray: 9d91c695bfe8723c-OSL\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=gwmcfU.QCOChYrZO6PSVlG6tgZa.1AT6TY0KkD8nwMo-1772972235-1.0.1.1-Y1kQphJw8OjU9ojJiRRcyLVwiw8gky7xqGzpWLx_eWy36d4mNHvZo75toUeaJuw5rP7oxE62va4rSSVRPBCIuoeasJs54VK2wFreXAIJkWQ; path=/; expires=Sun, 08-Mar-26 12:47:15 GMT; domain=.base.org; HttpOnly; Secure; SameSite=None\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=hBdj5ntNAx8x%2BDYkY4QdQ8G3w70LEFP52ONtYKBSTCAoKOEFBkye4CnuoBev6IFqFggKqgvkdejz60my5zv6KbuK7AO7A4gdikDA%2BqqOMnvhQi9K2pbHQkWrkUfBNkgvSnU%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=2592000\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T05:57:28.976551Z","times_seen":17831158,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":32,"dns":1,"connect":1,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mainnet.base.org/","fqdn":"mainnet.base.org","domain":"base.org","tld":"org"},"ip":{"addr":"172.64.147.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ility-ility.xyz/","date":"2026-03-08T12:17:15.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"base.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 06:55:27 GMT","end":"Tue, 28 Apr 2026 07:55:23 GMT"},"fingerprint":{"sha1":"32:27:13:5D:2F:ED:5C:29:B9:87:88:C8:93:BF:5C:F4:5E:E4:0D:C1","sha256":"E0:31:0B:DB:D1:6A:5A:0D:53:64:1A:C1:7B:2C:1C:10:6B:F5:15:35:76:6C:1A:79:B6:0D:4F:38:8F:E6:8E:0D"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: mainnet.base.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ility-ility.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://ility-ility.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0xEeB513144490B88366616606382BD2A9f1d2cA37\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 08 Mar 2026 12:17:15 GMT\r\ncontent-type: application/json\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-proxyd-cache-status: MISS\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=n.BcV0tRK56f3rHNLd8y_VgIr3_ACC5ko6lkcHwGbA8-1772972235-1.0.1.1-3Relh9qH.Xn7FpUEUWFNrRIQwPpD1pyzc5nY9GyiUpT3wOME1U_r4ymwlK_AGPABU_WFg3ZOiLmGmqYmc6ozByoUPsmFRnWsaQ76I0NMDKM; path=/; expires=Sun, 08-Mar-26 12:47:15 GMT; domain=.base.org; HttpOnly; Secure; SameSite=None\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=hAkC6xEkD9IoOMAorrzYhSlzylp22troi7oQyiivemJYIpovkySKNvc1X%2FUXS5F8F0bz8ofos%2BdruVr7%2FflrEFZZz6h8AtwuYY5tVrUlwl9dhCL3YVLMXVx%2BmvD9qhESR7s%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=2592000\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9d91c6970eec723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":871,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"551f1692d4cbff3791faaa4f1b4a3d10","sha1":"1c32c1d6bb28758a5bd4601cf8d9933b4b315a60","sha256":"c2a802d8b0f83606cc3415f032514679ae01d2807ef9927aed7af4cc277c9dd1","sha512":"68e3b893233c4bf6bf85d1e28ed559e8cdead4c8cfbfd120b699cc0262462965fb087ebdee9902a883372d8ceee88efc41e7df9c89785146f57b8ab373ff8e47","ssdeep":"","tlshash":"1611dcf09901da91f6241f57a2fd31ca60343443eade5e8e425a36851aa6202fe0d5ce","first_seen":"2026-03-07T01:42:36.668541Z","last_seen":"2026-03-08T12:24:34.452464Z","times_seen":4,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"base.llamarpc.com/","fqdn":"base.llamarpc.com","domain":"llamarpc.com","tld":"com"},"ip":{"addr":"172.67.68.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ility-ility.xyz/","date":"2026-03-08T12:17:15.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"llamarpc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 09:44:32 GMT","end":"Sun, 03 May 2026 10:44:28 GMT"},"fingerprint":{"sha1":"D0:0D:78:A5:95:3F:EE:B1:9C:2A:1F:52:4A:80:91:B4:70:2F:62:2F","sha256":"57:E9:A3:F8:8A:14:5D:5F:14:F1:B9:7B:F8:E7:0C:23:1F:5B:04:3F:9B:EB:77:8D:14:7E:BA:1D:A3:35:A5:C6"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: base.llamarpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://ility-ility.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://ility-ility.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0xEeB513144490B88366616606382BD2A9f1d2cA37\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 08 Mar 2026 12:17:31 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L0hb%2BCIPOqVXjDdXthYJzXaP3SHJ%2F4SWqdH%2FvTbq0xpdEVec1vtaHWMg8wSZ7GqIIy7j2aH8%2FiczFF6eLXAivXk8ceCJkz4grUwOlUbmPY0%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d91c6999f989a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"72611f9b94b2c36269265ae70fc655c0","sha1":"b11acd2e3dbcd9b592538ff88efacdbef80e1991","sha256":"f2ba8fab751670d916da907f153db6e4f2479cdd39e29437715be4faba70ba96","sha512":"bba3bfb0ac73230fbe48e37c5f20b2beb23d9649a5e5a49e26b3c2babc0676ac31c2b1227fe113f9d88622ab154e96198801ae5768b9ac697b27ecd8789821df","ssdeep":"","tlshash":"44a0025048cd9f29674b48c179483a41b299dfc50be09f015fcc892d766974f8a53366","first_seen":"2025-09-28T01:18:59.117175Z","last_seen":"2026-03-13T13:13:32.24922Z","times_seen":88,"resource_available":false,"data":null}},"time_used":15497,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15497,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ility-ility.xyz/05_Pools_Promotion.png","fqdn":"ility-ility.xyz","domain":"ility-ility.xyz","tld":"xyz"},"ip":{"addr":"104.21.13.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ility-ility.xyz/","date":"2026-03-08T12:17:14.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ility-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 10:18:23 GMT","end":"Fri, 29 May 2026 10:18:22 GMT"},"fingerprint":{"sha1":"A9:01:82:E8:68:F9:5C:FC:B9:6B:69:00:1F:82:02:38:FA:AF:56:D1","sha256":"5B:4D:CF:ED:6F:64:33:67:40:30:21:51:8A:F0:6D:BC:AE:EA:CC:AC:AD:85:2A:9E:B2:3C:01:6E:B1:CC:F9:4D"}}},"request":{"raw":"GET /05_Pools_Promotion.png HTTP/1.1\r\nHost: ility-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ility-ility.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 08 Mar 2026 12:17:14 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 10:49:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sfKA10eju9qvZTgzLZvJauFgY7VHv%2F%2BZwLqp%2Bca7Hhw8dMU99GXM79x%2BoE6ZvjP%2FOeOe4klvnNa4U0oHvpc09a%2BZm3W8J6MEXeq7on%2Bg2A%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9d91c6911d184651-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"dc.js","description":"A multi-dimensional charting library built to work natively with crossfilter and rendered using d3.js","website":"https://dc-js.github.io/dc.js/","common_platform_enumeration":"","icon":"dc.js.png","categories":["JavaScript graphics","JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62369,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1250)","md5":"e00fd4b2f02e4c00024116733d851631","sha1":"5181527f406e29979e0e7c15ce4acba06081fdd8","sha256":"2e34fca96fd3293b99f25a5ee6dd245a3620f74c1ba2a391e09bc7c840437566","sha512":"bb7b451ad166c11c483f9f177adda81602ec7a26c498d75269bbc435e43f901a92066fab841667ea5a13b50e63ef3e77b8b432f90c539c8d1e20e64c1b16ea00","ssdeep":"768:oPyhFK8yhFKoyhFKwyhFKRAiOLbdjRGUVysxnv5fCcb:oSk5klktkRk1IUVywh1b","tlshash":"c453f8b993f415b6504783d5eb62ab267e61d067ca4e4110f2bc07a82fc3cc9dc27a9d","first_seen":"2026-03-08T12:17:49.379728Z","last_seen":"2026-03-08T12:17:49.379728Z","times_seen":1,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ility-ility.xyz/06_Mini_Explorer.png","fqdn":"ility-ility.xyz","domain":"ility-ility.xyz","tld":"xyz"},"ip":{"addr":"104.21.13.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ility-ility.xyz/","date":"2026-03-08T12:17:14.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ility-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 10:18:23 GMT","end":"Fri, 29 May 2026 10:18:22 GMT"},"fingerprint":{"sha1":"A9:01:82:E8:68:F9:5C:FC:B9:6B:69:00:1F:82:02:38:FA:AF:56:D1","sha256":"5B:4D:CF:ED:6F:64:33:67:40:30:21:51:8A:F0:6D:BC:AE:EA:CC:AC:AD:85:2A:9E:B2:3C:01:6E:B1:CC:F9:4D"}}},"request":{"raw":"GET /06_Mini_Explorer.png HTTP/1.1\r\nHost: ility-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ility-ility.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 08 Mar 2026 12:17:14 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 10:49:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H08TxtwOhChM7e8lWKDF07zGdKNtPyMAbL216dZXo10idLFQ0gRFtYuY4swTbu9Fy%2FdkOurGl3rzCp5RvngXTWzxl7wdHfqsWzymRgQ51g%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9d91c6911d1a4651-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"dc.js","description":"A multi-dimensional charting library built to work natively with crossfilter and rendered using d3.js","website":"https://dc-js.github.io/dc.js/","common_platform_enumeration":"","icon":"dc.js.png","categories":["JavaScript graphics","JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62369,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1250)","md5":"8c8c208aa2e9b64de21c32e038e297b2","sha1":"26218a6e468969e472b2a216486657b112d6311d","sha256":"e6df00d60d87eb2d6d095e865dce47a68a2980630e34891288579270febda66b","sha512":"9f5b3bb8097283d34b587c044a5af5e28b0629de671de02fea423401d34251fa69708556646bdbdd2cf6a8f2c4163ed1557660e61cd6a9a6c67e2823ff6e34a6","ssdeep":"768:oPyhFK8yhFKoyhFKwyhFKRAiOLbd3RGUVysxnv5fCc5:oSk5klktkRkpIUVywh15","tlshash":"9d53f8b993f415b6508783d5eb62ab267e61d067ca4e4110f2bc07a82fc3cc9dc2769d","first_seen":"2026-03-08T12:17:49.381421Z","last_seen":"2026-03-08T12:17:49.381421Z","times_seen":1,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ility-ility.xyz/03_Community.png","fqdn":"ility-ility.xyz","domain":"ility-ility.xyz","tld":"xyz"},"ip":{"addr":"104.21.13.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ility-ility.xyz/","date":"2026-03-08T12:17:14.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ility-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 10:18:23 GMT","end":"Fri, 29 May 2026 10:18:22 GMT"},"fingerprint":{"sha1":"A9:01:82:E8:68:F9:5C:FC:B9:6B:69:00:1F:82:02:38:FA:AF:56:D1","sha256":"5B:4D:CF:ED:6F:64:33:67:40:30:21:51:8A:F0:6D:BC:AE:EA:CC:AC:AD:85:2A:9E:B2:3C:01:6E:B1:CC:F9:4D"}}},"request":{"raw":"GET /03_Community.png HTTP/1.1\r\nHost: ility-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ility-ility.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 08 Mar 2026 12:17:14 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 10:49:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 0\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FiLHD%2F5dwXqRGr78ykxQe7puLKxET1UXqXOGgrSDonPDZcSy0NFybU%2BfgLrQ3LLLT2X39s56mzdgCzy88O5P5CpWXqPvq1ZEzG0OXtyOJQ%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9d91c6947d634651-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"dc.js","description":"A multi-dimensional charting library built to work natively with crossfilter and rendered using d3.js","website":"https://dc-js.github.io/dc.js/","common_platform_enumeration":"","icon":"dc.js.png","categories":["JavaScript graphics","JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62369,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1250)","md5":"2a651f6c17d785695f60477c3610a99b","sha1":"ed3c234b1b3d488e5d84da3ed664242d24b2a60c","sha256":"e6f3242de3169272fe8bede73a7e36322c99ad00b15f1d73d501f439f8a521dc","sha512":"93c277ca8d763226c7deef460b7c1de678b98f11e623f0c9d498625d86f56b882b65fc8dccc2440682bc24cccbe1b558a3db1a0dd1296d42fe3a2a542669412f","ssdeep":"768:oPyhFK8yhFKoyhFKwyhFKRAiOLbdWRGUVysxnv5fCc0:oSk5klktkRkUIUVywh10","tlshash":"2d53f7b993f415b6514783d5eb22ab267e61d067ca4e4110f2bc07a82fc3cc9dc27a9d","first_seen":"2026-03-08T12:17:49.383435Z","last_seen":"2026-03-08T12:17:49.383435Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-08","alert":"Sinkholed","trigger":"ility-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}