{"report_id":"f621b9f0-d6c9-4fe6-bd88-12ffe3956f6a","version":6,"status":"done","tags":[],"date":"2026-03-02T16:49:24Z","url":{"schema":"https","addr":"whitelist-ility.xyz/","fqdn":"whitelist-ility.xyz","domain":"whitelist-ility.xyz","tld":"xyz"},"ip":{"addr":"172.67.165.118","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"whitelist-ility.xyz/","fqdn":"whitelist-ility.xyz","domain":"whitelist-ility.xyz","tld":"xyz"},"title":"ILITY - The Blockchain for ZK Cross-Chain Data Verification","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"whitelist-ility.xyz/","fqdn":"whitelist-ility.xyz","domain":"whitelist-ility.xyz","tld":"xyz"},"ip":{"addr":"172.67.165.118","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-06T16:49:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-02T16:49:02Z","timestamp":1772470142,"ip_dst":{"addr":"104.21.81.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":44152,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI","source":"{\"timestamp\":\"2026-03-02T16:49:02.338580+0000\",\"flow_id\":1748557413405713,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.41\",\"src_port\":44152,\"dest_ip\":\"104.21.81.35\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2051768,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_03_22\"],\"deployment\":[\"Perimeter\"],\"malware_family\":[\"Cloudflare_Workers\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Cloudflare_Workers\"],\"updated_at\":[\"2024_03_22\"]}},\"tls\":{\"sni\":\"sharp-wave-5bd.cf-3nxq98r0.workers.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":2644,\"start\":\"2026-03-02T16:49:02.316433+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-03-02T16:49:02Z","timestamp":1772470142,"ip_dst":{"addr":"104.21.81.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":44164,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI","source":"{\"timestamp\":\"2026-03-02T16:49:02.342714+0000\",\"flow_id\":426888602244347,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.41\",\"src_port\":44164,\"dest_ip\":\"104.21.81.35\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2051768,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_03_22\"],\"deployment\":[\"Perimeter\"],\"malware_family\":[\"Cloudflare_Workers\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Cloudflare_Workers\"],\"updated_at\":[\"2024_03_22\"]}},\"tls\":{\"sni\":\"sharp-wave-5bd.cf-3nxq98r0.workers.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":940,\"bytes_toclient\":2719,\"start\":\"2026-03-02T16:49:02.316667+0000\"}}"}],"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"mainnet.base.org","ip":{"addr":"172.64.147.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1996-11-11","domain_rank":835121,"first_seen":"2023-08-03T23:07:22Z","last_seen":"2026-02-24T21:41:35.914578Z","alert_count":0,"request_count":2,"received_data":2893,"sent_data":1025,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"sharp-wave-5bd.cf-3nxq98r0.workers.dev","ip":{"addr":"104.21.81.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-02-08","domain_rank":0,"first_seen":"2026-03-01T18:23:41.365838Z","last_seen":"2026-03-01T18:23:41.365838Z","alert_count":0,"request_count":2,"received_data":3347032,"sent_data":1122,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"whitelist-ility.xyz","ip":{"addr":"172.67.165.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":60,"request_count":30,"received_data":16486226,"sent_data":13899,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"base.publicnode.com","ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-08-16","domain_rank":2170347,"first_seen":"2023-10-18T22:23:56Z","last_seen":"2026-02-25T20:05:46.114148Z","alert_count":0,"request_count":2,"received_data":2007,"sent_data":1031,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"base.drpc.org","ip":{"addr":"104.18.10.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2005-01-09","domain_rank":3183586,"first_seen":"2023-10-27T13:07:58Z","last_seen":"2026-02-25T20:05:45.823036Z","alert_count":0,"request_count":2,"received_data":1827,"sent_data":1019,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"base.llamarpc.com","ip":{"addr":"172.67.68.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-02-07","domain_rank":2856799,"first_seen":"2025-06-28T18:40:21.321537Z","last_seen":"2026-02-25T21:42:44.036833Z","alert_count":0,"request_count":2,"received_data":2153,"sent_data":1027,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"whitelist-ility.xyz/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"whitelist-ility.xyz","domain":"whitelist-ility.xyz","tld":"xyz"},"ip":{"addr":"172.67.165.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-27T10:25:32.828152Z","times_seen":408063,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whitelist-ility.xyz/date-fns-7.5.14.js","fqdn":"whitelist-ility.xyz","domain":"whitelist-ility.xyz","tld":"xyz"},"ip":{"addr":"172.67.165.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"32fc86810da36b7440ca42e977f39623","sha1":"52b8f6e85c1b74faef68c549c9654010144b3c13","sha256":"eba9fca910f0aac85676944fb6c7be244c2936d02fb8a5e8c5dabf5d2038ccf6","sha512":"aa136a197dfa97f382c09721ab161574d04a6d2ba967f39c0714a86fb887602d30500848e8e29e2a431e9f5c691a38cde28181fd4fe12e0d3801206ff2eb0571","ssdeep":"1536:rg6f7VnQLpLXti+JQHxhC0M6SLpTS8TJ9MdiCBro+lVXU5hUp/Xd/yiN:rgwZUlXI3HFi3Ucw/hth","tlshash":"9c742ec66a9694a97e0511cecc76ee05e0584d13bdacf043e6edfdc1701af66808b36b","size":344146,"data":"","first_seen":"2026-03-02T16:49:33.001559Z","last_seen":"2026-03-08T12:24:34.447985Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whitelist-ility.xyz/","fqdn":"whitelist-ility.xyz","domain":"whitelist-ility.xyz","tld":"xyz"},"ip":{"addr":"172.67.165.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"11db0bd87182dd1891e3e51f6c52b11a","sha1":"8a96a9aa778f4908b091f9f479cf6ce7642ecd80","sha256":"1156f09decef03180eee937b9e0ee050e82eb88b3d67ac19e0dacacc79bbfdd2","sha512":"d0678d675811246a9545fe123068925eda28a933dfc8d66b16b62e08ba8975e0f736c9addd5cd6287724b27ff5ebc78635b24ed92160c10ad57154e9d3045fd6","ssdeep":"","tlshash":"01e02638a2b90631c6730148536963ca7e6400a3acca720334adce450fc67fa3b60ca3","size":347,"data":"","first_seen":"2026-03-02T16:49:33.024873Z","last_seen":"2026-03-08T12:24:34.459509Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whitelist-ility.xyz/","fqdn":"whitelist-ility.xyz","domain":"whitelist-ility.xyz","tld":"xyz"},"ip":{"addr":"172.67.165.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1229cc766bb250235f86cbbf99a6f6b7","sha1":"75ca4195280cfb23577ff7bb6f3d8c4a4a86a70f","sha256":"f9a53b91f2d2ac086b60fd4a9f4ade89dbc9aa5548bfc445ab4d74f476610d49","sha512":"11671dad5da15694a9541ff160d1389458104ea34e204df68a93d638f0edad3de97eecbc4123b1b757c8d8cc92411ecb1226aa03e4a6466e169b91ae41925afd","ssdeep":"1536:++aRO9KNA9tVxQhqEXF6p1tXxxEm5bQLpGQLZZAWghZo1X3lK:++aRO9KNA9tVGh116H19ObH1XVK","tlshash":"94441be5db97c0ac8e65219ec477f906e098492bce6cf453e92ddec23519f62808713b","size":274308,"data":"","first_seen":"2026-03-02T16:49:33.025921Z","last_seen":"2026-03-08T12:24:34.455172Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"whitelist-ility.xyz/first3x.png","fqdn":"whitelist-ility.xyz","domain":"whitelist-ility.xyz","tld":"xyz"},"ip":{"addr":"172.67.165.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://whitelist-ility.xyz/","date":"2026-03-02T16:48:58.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whitelist-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 02:17:19 GMT","end":"Fri, 29 May 2026 02:17:18 GMT"},"fingerprint":{"sha1":"82:F8:20:9E:1A:7B:23:A5:F1:5A:92:77:EE:E9:5C:05:C9:B0:08:3D","sha256":"79:60:8C:92:87:8E:51:20:F0:52:D7:AE:08:B7:2B:84:3E:E2:AF:2B:FA:43:6B:3A:33:FB:07:DB:57:CC:05:3E"}}},"request":{"raw":"GET /first3x.png HTTP/1.1\r\nHost: whitelist-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whitelist-ility.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:48:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 99978\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 02:49:00 GMT\r\netag: \"69a2579c-1868a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 5890\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IZUC067HSdQ%2FGG1p1dtZUxyA6u39AEzO0D1HWh7H0rEv%2FfjSU9cM0SZMKsjiiCDChz%2B1gES%2B4TfwXZA3XJPKzxEuk5i2DFlXxmcUi2fLA5%2B5fS4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d61e45f49c0fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":99978,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1005 x 1644, 8-bit/color RGBA, non-interlaced","md5":"abca7fb54f3ed572cf83e6c6c2e45904","sha1":"8a82f6f374a3dca35347dc3f5604c957101ef62c","sha256":"510d68676d2ef8736480d9bca29ae0927fc7bf6182e0b8c2e06763ca8c6049c5","sha512":"7e2b54acb5e358b4ee37047a24593443268c3f6a3c228438a67a37d3acf945fa994393e50f9427b54965abd01af94186025c76880cc59fafe549a1e5dd503b34","ssdeep":"3072:CxWQWWACWUc+0pizvWWWNWWWWWWd9ROddmat91GM8S:CxWQWW9WUpzvWWWNWWWWWWhOddB6LS","tlshash":"f3a3e1b325344e8ffb9eb6b1840b0fbc66b31c54719a9a5b43212f70140f3236ad7959","first_seen":"2026-03-02T13:22:55.684855Z","last_seen":"2026-03-08T12:24:34.443387Z","times_seen":5,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whitelist-ility.xyz/03_Community.png","fqdn":"whitelist-ility.xyz","domain":"whitelist-ility.xyz","tld":"xyz"},"ip":{"addr":"172.67.165.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whitelist-ility.xyz/","date":"2026-03-02T16:48:58.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whitelist-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 02:17:19 GMT","end":"Fri, 29 May 2026 02:17:18 GMT"},"fingerprint":{"sha1":"82:F8:20:9E:1A:7B:23:A5:F1:5A:92:77:EE:E9:5C:05:C9:B0:08:3D","sha256":"79:60:8C:92:87:8E:51:20:F0:52:D7:AE:08:B7:2B:84:3E:E2:AF:2B:FA:43:6B:3A:33:FB:07:DB:57:CC:05:3E"}}},"request":{"raw":"GET /03_Community.png HTTP/1.1\r\nHost: whitelist-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whitelist-ility.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:48:58 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 02:49:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 5890\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0pIkXHcoaQNGM7LvtKfIUxRIb1T%2F4hg7dHd%2FcPwu6r%2FFMl2CmvpNxImyKjv7FuY%2FFHtVxSXBWNV5HetcX8hcsOM8j9GpKn670%2Fcn%2F8LLNRsb2KA%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9d61e45f49c7fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62495,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1250)","md5":"a288dcbbbe8a660e305c033a43f94c83","sha1":"00d8387044c33591fe9369a58949cc83b0218eca","sha256":"d76ae456e4e3e8374b331ba728d9799fa6aebb3e5c710fa921b7c16053651ec1","sha512":"b413400de29f00cc574862eb31b19336e18597c3046ffe7637f20368bfca13ec1097a1ef174951e6baff748ad877db63fceb25a07b6ba8c272b6bba0c94b7f39","ssdeep":"768:7WyhFK8yhFKoyhFKwyhFKRAiOLbdaRGUVysxnv5fCc8O:7jk5klktkRkcIUVywh1x","tlshash":"ea53f8b993f41576508783d5eb62ab267e61d067ca4e4110f2bc47a82fc3cc9dc27a9c","first_seen":"2026-03-02T16:49:32.991733Z","last_seen":"2026-03-02T16:49:32.991733Z","times_seen":1,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whitelist-ility.xyz/05_Pools_Promotion.png","fqdn":"whitelist-ility.xyz","domain":"whitelist-ility.xyz","tld":"xyz"},"ip":{"addr":"172.67.165.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whitelist-ility.xyz/","date":"2026-03-02T16:48:59.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whitelist-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 02:17:19 GMT","end":"Fri, 29 May 2026 02:17:18 GMT"},"fingerprint":{"sha1":"82:F8:20:9E:1A:7B:23:A5:F1:5A:92:77:EE:E9:5C:05:C9:B0:08:3D","sha256":"79:60:8C:92:87:8E:51:20:F0:52:D7:AE:08:B7:2B:84:3E:E2:AF:2B:FA:43:6B:3A:33:FB:07:DB:57:CC:05:3E"}}},"request":{"raw":"GET /05_Pools_Promotion.png HTTP/1.1\r\nHost: whitelist-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whitelist-ility.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:48:59 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 02:49:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 5891\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Amc0igyFLRaTvj4FhtPA6vvHbcqByQltTScDk2%2Fkx%2BlRBp%2FwFgnmRb5M%2BI8aeJWOqHO5RHp6UC86R%2BuoKkrMFCWlH285D9kXmFOdi6hpHQ3efmE%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9d61e4610a51fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62495,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1250)","md5":"6658ecf14c1cd127a58e31f051761db8","sha1":"38c99c36d62d9bdbc205a2919a8fa46d5d299e4c","sha256":"a59548356efc4bbe9e8005a6fe0cc953ae04edc30b8d32cd2bb1d69a68851874","sha512":"7ed8279ea6b52bd35ab326b446937ced398a0d50f60f907a0b6038f6399baa21de7fc4dd1745c76c2296ab3937d7284f4878c7e035036305aa47aaa2739fd093","ssdeep":"768:7WyhFK8yhFKoyhFKwyhFKRAiOLbddRGUVysxnv5fCcX:7jk5klktkRkzIUVywh1X","tlshash":"a953f8b993f41576508783d5eb62ab267e61d067ca4e4110f2bc07a82fc3cc9dc27a9c","first_seen":"2026-03-02T16:49:32.992846Z","last_seen":"2026-03-02T16:49:32.992846Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"base.publicnode.com/","fqdn":"base.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://whitelist-ility.xyz/","date":"2026-03-02T16:48:59.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:40:15 GMT","end":"Mon, 11 May 2026 21:40:09 GMT"},"fingerprint":{"sha1":"02:33:4E:80:56:8A:88:B0:A0:32:C7:FD:BB:EA:AD:56:66:32:7F:9E","sha256":"25:6C:D0:C9:8E:E0:89:64:BF:49:7D:80:0C:31:46:0A:5B:1D:05:0B:79:60:DB:A7:27:2E:C9:40:85:64:DA:1E"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: base.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://whitelist-ility.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://whitelist-ility.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0xEeB513144490B88366616606382BD2A9f1d2cA37\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 16:48:59 GMT\r\ncontent-type: application/json\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 1728000\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, accept-encoding\r\nx-envoy-upstream-service-time: 1\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-ray: 9d61e4633a6b958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":871,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"da9ffa7730cbfad31ff9b389020ecbd6","sha1":"0121b9db15c4e708bf1bd332467dbae757fdb2d0","sha256":"a8e70349e3b6b69b7759cc30c9bb0c4cc9032b24c3c291e5f6be140f29099ac6","sha512":"a5aef76e12cec59ca167e209c8f7238aac9b3be5661de43b8d4b1ce90ca6de505b729c6cb86b4fbdff7b18a0dbc39a8c48ea47650461f36560205f4f21ebc148","ssdeep":"","tlshash":"d911bdf13e16d890e18e8a6bf3d8380a24383223dfd84a55015459ed1ef7b60f25d98a","first_seen":"2026-03-01T18:23:47.271666Z","last_seen":"2026-03-02T16:49:32.99375Z","times_seen":4,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"base.drpc.org/","fqdn":"base.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.10.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://whitelist-ility.xyz/","date":"2026-03-02T16:48:59.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 16:14:00 GMT","end":"Sun, 17 May 2026 17:13:51 GMT"},"fingerprint":{"sha1":"6E:2D:5A:72:A1:75:4A:F0:C7:96:F2:E8:26:78:F5:FC:54:0C:73:93","sha256":"18:E9:96:29:98:D2:5D:4E:19:CD:75:98:36:ED:EB:40:40:C4:23:2C:76:E1:95:F1:4C:85:59:D2:48:CB:AF:4A"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: base.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://whitelist-ility.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://whitelist-ility.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0xEeB513144490B88366616606382BD2A9f1d2cA37\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 16:48:59 GMT\r\ncontent-type: application/json\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nx-drpc-owner-id: cb501251-31a8-4028-8b0a-54679f15c385\r\nx-drpc-owner-tier: free\r\nx-drpc-provider-id: drpc-core-free\r\nx-drpc-trace-id: 4517afd57666a7094bc89a1309428cde\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 9d61e463be744c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":870,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f18c4f097c2341c182fb0321ef8adfb9","sha1":"355d9508a712fa579431868d497fd10d8b347eda","sha256":"181625d6816e7f2df9b831ac63bd27a26da43bdbb2025ef950e686eee5edad3d","sha512":"4f2327695a2e9c26710cd33f4db26b280a035de9237475baec1b513000a97653b224eb7d0d2f100bfe13c5b22aa65f54bd59d7395cb518472162294969cd8253","ssdeep":"","tlshash":"d411bdf13e16d890e28e8a6bf7d8380a24383223dfd84a55411459e91df7b60f25d98a","first_seen":"2026-03-01T18:23:47.277535Z","last_seen":"2026-03-02T16:49:32.994512Z","times_seen":4,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"base.llamarpc.com/","fqdn":"base.llamarpc.com","domain":"llamarpc.com","tld":"com"},"ip":{"addr":"172.67.68.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://whitelist-ility.xyz/","date":"2026-03-02T16:48:59.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"llamarpc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 09:44:32 GMT","end":"Sun, 03 May 2026 10:44:28 GMT"},"fingerprint":{"sha1":"D0:0D:78:A5:95:3F:EE:B1:9C:2A:1F:52:4A:80:91:B4:70:2F:62:2F","sha256":"57:E9:A3:F8:8A:14:5D:5F:14:F1:B9:7B:F8:E7:0C:23:1F:5B:04:3F:9B:EB:77:8D:14:7E:BA:1D:A3:35:A5:C6"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: base.llamarpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://whitelist-ility.xyz/\r\nOrigin: https://whitelist-ility.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 02 Mar 2026 16:48:59 GMT\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,POST,HEAD,PUT,DELETE,PATCH\r\naccess-control-allow-origin: *\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers, Origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XmSRDaLZAC2Yq0Td2yEArtWN0wdjFFq1XftNF8A%2F3JdNCOlmMnsdmBVDQaIDAlxxjwhZxoV%2BIctv%2Bqp9EuzNdlTkdNiGooHqrXTSwXXC3lg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d61e462ecdd1382-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T10:26:15.180389Z","times_seen":17561103,"resource_available":true,"data":null}},"time_used":510,"timings":{"blocked":168,"dns":9,"connect":36,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mainnet.base.org/","fqdn":"mainnet.base.org","domain":"base.org","tld":"org"},"ip":{"addr":"172.64.147.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://whitelist-ility.xyz/","date":"2026-03-02T16:48:59.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"base.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 06:55:27 GMT","end":"Tue, 28 Apr 2026 07:55:23 GMT"},"fingerprint":{"sha1":"32:27:13:5D:2F:ED:5C:29:B9:87:88:C8:93:BF:5C:F4:5E:E4:0D:C1","sha256":"E0:31:0B:DB:D1:6A:5A:0D:53:64:1A:C1:7B:2C:1C:10:6B:F5:15:35:76:6C:1A:79:B6:0D:4F:38:8F:E6:8E:0D"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: mainnet.base.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://whitelist-ility.xyz/\r\nOrigin: https://whitelist-ility.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 02 Mar 2026 16:48:59 GMT\r\ncf-ray: 9d61e4629fd13181-OSL\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=COVCxsB8RFXOzTO0fheN0CfNZISlaE_uKIUa7XJTmhc-1772470139-1.0.1.1-VMQTdbi6WY4GwD6oHz0Wl1HX35vUGC2FbYFrI6tqpGzl0G85XAn0W1LtlfIT6tU8p607.FyutIAndjrqBRMAFdjGdryEKM4jmp5s2zI0CGo; path=/; expires=Mon, 02-Mar-26 17:18:59 GMT; domain=.base.org; HttpOnly; Secure; SameSite=None\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=NXxfOiJxwDlT%2BFJlws3lI3J6lNMCCKl6hO57Z4U7pYBRZGWDpIUWvqdMw6826YzOuBMcPhaZ8kkVY6QAY%2BnvJmLxUnSZiFQkjAET1OR0XEc2sh3gbiTui%2Fyo%2Bfu5iRYy5vA%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=2592000\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T10:26:15.180389Z","times_seen":17561103,"resource_available":true,"data":null}},"time_used":377,"timings":{"blocked":118,"dns":19,"connect":3,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whitelist-ility.xyz/second3x.png","fqdn":"whitelist-ility.xyz","domain":"whitelist-ility.xyz","tld":"xyz"},"ip":{"addr":"172.67.165.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://whitelist-ility.xyz/","date":"2026-03-02T16:48:58.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whitelist-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 02:17:19 GMT","end":"Fri, 29 May 2026 02:17:18 GMT"},"fingerprint":{"sha1":"82:F8:20:9E:1A:7B:23:A5:F1:5A:92:77:EE:E9:5C:05:C9:B0:08:3D","sha256":"79:60:8C:92:87:8E:51:20:F0:52:D7:AE:08:B7:2B:84:3E:E2:AF:2B:FA:43:6B:3A:33:FB:07:DB:57:CC:05:3E"}}},"request":{"raw":"GET /second3x.png HTTP/1.1\r\nHost: whitelist-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whitelist-ility.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:48:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 103841\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 02:49:00 GMT\r\netag: \"69a2579c-195a1\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 5890\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iAcXR%2FWyQFACSxM%2F0RSlgI7FE1Ew%2BlaL5M6dzwmPdhvLfP9QWk9%2Bn5FsKCS4s9lUfh%2BJbRlaciu199ogoMRwBk6Ullivcx56boigBKW8nKCWM00%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d61e45f49c2fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":103841,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1005 x 1644, 8-bit/color RGBA, non-interlaced","md5":"cd17b563def08d64b21db30e25a74ddf","sha1":"a7327d41d8da715a8688c3f770e765130cc246cf","sha256":"f656f5820b58076274dc4f334c300ceff99ef3802590ac3049d19d4f6defa48e","sha512":"baa2be515536110f7dade1a739e4fc2bb67fb8f2064d52c8a4f72e86abdb74b528ef901f755bd067fd347364396256f8d2ee055330ddfd1e38e0bbb7c13e8395","ssdeep":"3072:/WuWWqWzRsxw7mbIIzWWWiFNWWWWWWWcNwWFQRaPu5WrE4a9:/WuWWqWzRlK8IzWWWinWWWWWWWROu5Ww","tlshash":"7ea3e17172221d0ec39d72f4890a6bac5bb30d5933b50f2b2764af75658f25338e35a8","first_seen":"2026-03-02T13:22:55.663041Z","last_seen":"2026-03-08T12:24:34.4439Z","times_seen":5,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whitelist-ility.xyz/05_Pools_Promotion.png","fqdn":"whitelist-ility.xyz","domain":"whitelist-ility.xyz","tld":"xyz"},"ip":{"addr":"172.67.165.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whitelist-ility.xyz/","date":"2026-03-02T16:48:58.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whitelist-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 02:17:19 GMT","end":"Fri, 29 May 2026 02:17:18 GMT"},"fingerprint":{"sha1":"82:F8:20:9E:1A:7B:23:A5:F1:5A:92:77:EE:E9:5C:05:C9:B0:08:3D","sha256":"79:60:8C:92:87:8E:51:20:F0:52:D7:AE:08:B7:2B:84:3E:E2:AF:2B:FA:43:6B:3A:33:FB:07:DB:57:CC:05:3E"}}},"request":{"raw":"GET /05_Pools_Promotion.png HTTP/1.1\r\nHost: whitelist-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whitelist-ility.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:48:58 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 02:49:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 5890\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XKCm1uofGuQJh9aT3IYVE5D7yzqziS68cCbC9043t%2FXnp9N%2F55qGkAWEg9ZgatbMDawH4e221I1dzkBZPthJnc3O%2BBJYQ2Jb7sqU4FHmqdV%2FLzM%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9d61e45f59cdfb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62495,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1250)","md5":"6ca2414e2d34564595a5b7877bae2d39","sha1":"e9cd0ffde66f715c473a4e6c23a543eef62d8f2a","sha256":"80d492d901c2fc945d8b7c0c22fd8d95b5daba60485bd5619be77a8a174bf41a","sha512":"f79a6f5f8857614a037e29b16b292f3d4aa4d6a16499a11221e5dd58b399711860a1dc375a915dda8f52b24dc9f337fb436d2819f2d76c8722a0ba6a9d2a5097","ssdeep":"768:7WyhFK8yhFKoyhFKwyhFKRAiOLbdwRGUVysxnv5fCc3:7jk5klktkRkGIUVywh13","tlshash":"4953f8b993f41576508783d5eb62ab267e61d067ca4e4110f2bc07a86fc3cc9dc27a9c","first_seen":"2026-03-02T16:49:32.997217Z","last_seen":"2026-03-02T16:49:32.997217Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whitelist-ility.xyz/06_Mini_Explorer.png","fqdn":"whitelist-ility.xyz","domain":"whitelist-ility.xyz","tld":"xyz"},"ip":{"addr":"172.67.165.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whitelist-ility.xyz/","date":"2026-03-02T16:48:58.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whitelist-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 02:17:19 GMT","end":"Fri, 29 May 2026 02:17:18 GMT"},"fingerprint":{"sha1":"82:F8:20:9E:1A:7B:23:A5:F1:5A:92:77:EE:E9:5C:05:C9:B0:08:3D","sha256":"79:60:8C:92:87:8E:51:20:F0:52:D7:AE:08:B7:2B:84:3E:E2:AF:2B:FA:43:6B:3A:33:FB:07:DB:57:CC:05:3E"}}},"request":{"raw":"GET /06_Mini_Explorer.png HTTP/1.1\r\nHost: whitelist-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whitelist-ility.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:48:58 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 02:49:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 5890\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xexmbrHyaCfnNEC6tIwJf1nH0Rq6hAuFJ8vTzIBMsPQfTzhS3fdCHnO4%2FyxHkPuvVaCLofGvZ6A3LsnVcwexpol2QBqJG9CoU7cafSx3Rhh84RQ%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9d61e45f59cefb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62495,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1250)","md5":"de7c0436029fae81380fe3576abf5c9d","sha1":"8b69c93a1d960ec52a86ea9e7a6df92b0e68d055","sha256":"5b96345a7abc2e2da6a3e49be9d7ece2d03980a1932a2d0787d19644cb55527a","sha512":"05d300bfe2a70de60f4cdaae51767740dc043c0bf1651ec3906cf2c0cd54a6376de88229ebab739f65930cad1787d8eafa98ba203613c3507518e080bd66bc48","ssdeep":"768:7WyhFK8yhFKoyhFKwyhFKRAiOLbd1RGUVysxnv5fCcx:7jk5klktkRkXIUVywh1x","tlshash":"cd53f8b993f41576508783d5eb62ab667e61d067ca4e4110f2bc07a82fc3cc9dc27a9c","first_seen":"2026-03-02T16:49:32.997976Z","last_seen":"2026-03-02T16:49:32.997976Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whitelist-ility.xyz/03_Community.png","fqdn":"whitelist-ility.xyz","domain":"whitelist-ility.xyz","tld":"xyz"},"ip":{"addr":"172.67.165.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whitelist-ility.xyz/","date":"2026-03-02T16:48:59.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whitelist-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 02:17:19 GMT","end":"Fri, 29 May 2026 02:17:18 GMT"},"fingerprint":{"sha1":"82:F8:20:9E:1A:7B:23:A5:F1:5A:92:77:EE:E9:5C:05:C9:B0:08:3D","sha256":"79:60:8C:92:87:8E:51:20:F0:52:D7:AE:08:B7:2B:84:3E:E2:AF:2B:FA:43:6B:3A:33:FB:07:DB:57:CC:05:3E"}}},"request":{"raw":"GET /03_Community.png HTTP/1.1\r\nHost: whitelist-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whitelist-ility.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:48:59 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 02:49:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 5891\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E79BaTng4lVXbKCxWSifwrXky%2B35kUh4UvrPmp%2FYUsas7T6qacE2FOdHGcSY3gc8UaVB9OiRKB1vLqbeDxcSlnCeUidIJ%2Flxr23wevJ%2FdNL9utA%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9d61e4610a4ffb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62495,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1250)","md5":"43bd32952a67ba12e779c2715fd72422","sha1":"301feb2991d9eb52e12a245ba63a89e16783d89c","sha256":"65282767ce3459a189b180b390d62cc89660ac2b54a23bb8c826bf757197852e","sha512":"d33daa21d6f9403180536a65541b63c543af5e1f4cfa696876a39e2e7bd08e257bfba15ed2485b3975a2801da9409dc0c7088a6b75db8dba349cdec528072326","ssdeep":"768:7WyhFK8yhFKoyhFKwyhFKRAiOLbd61RGUVysxnv5fCcxq:7jk5klktkRkuIUVywh1xq","tlshash":"ea53f8b993f41576508783d5eb62ab667e61d067ca4e4110f2bc07a82fc3cc9dc27a9c","first_seen":"2026-03-02T16:49:32.998872Z","last_seen":"2026-03-02T16:49:32.998872Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whitelist-ility.xyz/xn7_YHE41ni1AdIRqAuZuw1Bx9mbZk79FN_C-bk.woff2","fqdn":"whitelist-ility.xyz","domain":"whitelist-ility.xyz","tld":"xyz"},"ip":{"addr":"172.67.165.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whitelist-ility.xyz/","date":"2026-03-02T16:48:59.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whitelist-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 02:17:19 GMT","end":"Fri, 29 May 2026 02:17:18 GMT"},"fingerprint":{"sha1":"82:F8:20:9E:1A:7B:23:A5:F1:5A:92:77:EE:E9:5C:05:C9:B0:08:3D","sha256":"79:60:8C:92:87:8E:51:20:F0:52:D7:AE:08:B7:2B:84:3E:E2:AF:2B:FA:43:6B:3A:33:FB:07:DB:57:CC:05:3E"}}},"request":{"raw":"GET /xn7_YHE41ni1AdIRqAuZuw1Bx9mbZk79FN_C-bk.woff2 HTTP/1.1\r\nHost: whitelist-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whitelist-ility.xyz/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:48:59 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 14108\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 02:48:59 GMT\r\netag: \"69a2579b-371c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UmKS6p2LY%2BZDXbWns58TRCh96O5vHuEVBzuEqcGCROJcqrE%2BkFHGmGwKhWGVfuvvscwFnJViqujwB0fVWr7O1Y6py5q6kxXjFTwh55F6V2v9mII%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d61e4618a98fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14108,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 14108, version 1.0","md5":"1589a53d0b0e81b757201b56ec289d92","sha1":"5296100bf92a9df9aa9cf8b820fa75e474e8917e","sha256":"849290ef12a2eeb9af5c11924120d11aa4ae8b435ed3347d7fc8bc240c293ca3","sha512":"08de38ebe938a9036ce4a02d50810117cd339169f0ea8a55350d22b373fed7f58999eb41c51f969eac1726dda7bc28f92bc5b0e6579c27046f6dda93d45fd1b4","ssdeep":"384:9fW/LcVxKHhaPKTjaRjtcyV1sKDKka/wNu04jP0T:9fW/Lo4RHkcyV1p+ka/wNu03","tlshash":"4152cf95830d8a564bec68b0563a92d912ecc7f0940d93443f8c3da1687eabd935b3fc","first_seen":"2025-06-04T22:07:03.561923Z","last_seen":"2026-07-27T07:15:18.792178Z","times_seen":1472,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mainnet.base.org/","fqdn":"mainnet.base.org","domain":"base.org","tld":"org"},"ip":{"addr":"172.64.147.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://whitelist-ility.xyz/","date":"2026-03-02T16:48:59.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"base.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 06:55:27 GMT","end":"Tue, 28 Apr 2026 07:55:23 GMT"},"fingerprint":{"sha1":"32:27:13:5D:2F:ED:5C:29:B9:87:88:C8:93:BF:5C:F4:5E:E4:0D:C1","sha256":"E0:31:0B:DB:D1:6A:5A:0D:53:64:1A:C1:7B:2C:1C:10:6B:F5:15:35:76:6C:1A:79:B6:0D:4F:38:8F:E6:8E:0D"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: mainnet.base.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://whitelist-ility.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://whitelist-ility.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0xEeB513144490B88366616606382BD2A9f1d2cA37\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 16:48:59 GMT\r\ncontent-type: application/json\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-proxyd-cache-status: MISS\r\ncf-cache-status: DYNAMIC\r\nset-cookie: __cf_bm=KJ6YhtfX2NpwftyL6wmtrgyBOhXlGkIO100qi5GKltI-1772470139-1.0.1.1-PfK4v5P434dp.MpqLR1yGTnbmGY7tBtQ8QSQfJ60WuPADRiR.6_9bTe8l9_YzendLqxdGkRKdR5qnUsx4TnRF4EdTj95XHOm0MPoSiP2q2w; path=/; expires=Mon, 02-Mar-26 17:18:59 GMT; domain=.base.org; HttpOnly; Secure; SameSite=None\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=rwZLxvIkyTPZPm%2F2XzjvbW%2BJK52Rf1k%2Bi4tYGa3SS4wqyZ4thckjCsUYxyy0TGK5BzkcoZH8d893uili1PLy2sqRoUm0AtR3ElH8Mlj%2F%2Fw0vZd38B%2BMUUqJCZF4zpculTl8%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=2592000\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9d61e4636bfb3181-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":871,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"52623dd1b5cca256f42af95053baac02","sha1":"93b4746732f8dbbf2419bd13777d11587763d180","sha256":"9b3e149fee0b740469d38f1f0b81c5f10174fc6a06f1d7c5c8c3e175c434f3cd","sha512":"d60762d6c4a318f13b9c39d522f4be054fd7f740ed52628c2b1cbf4504b2d1884846fd00a6793ef62087b476605db44a308e3eb66c95bf6c898b3e199d919db7","ssdeep":"","tlshash":"6011bdf13e16d890e28e8a6bf3d8380a24383223dfd84a55015459ed1ef7b60f25d98a","first_seen":"2026-03-01T18:23:47.274057Z","last_seen":"2026-03-02T16:49:33.000196Z","times_seen":4,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sharp-wave-5bd.cf-3nxq98r0.workers.dev/secureproxy?e=jscdn/getFile","fqdn":"sharp-wave-5bd.cf-3nxq98r0.workers.dev","domain":"cf-3nxq98r0.workers.dev","tld":"workers.dev"},"ip":{"addr":"104.21.81.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://whitelist-ility.xyz/","date":"2026-03-02T16:49:00.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cf-3nxq98r0.workers.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 19:03:59 GMT","end":"Wed, 27 May 2026 19:03:58 GMT"},"fingerprint":{"sha1":"46:7D:E9:57:2B:36:D6:55:58:50:F9:73:80:25:C8:45:3B:E4:30:C6","sha256":"BD:C5:A5:2A:29:26:28:6C:FD:9F:16:02:2E:7E:83:7F:FC:5F:B8:E0:CA:49:02:7D:3D:8B:A1:D9:E7:A7:23:92"}}},"request":{"raw":"OPTIONS /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: sharp-wave-5bd.cf-3nxq98r0.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://whitelist-ility.xyz/\r\nOrigin: https://whitelist-ility.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 02 Mar 2026 16:49:02 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-max-age: 86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SXnTKrTfXl8zw9F0eyIHhJHAZDw6BZxR5VPam24u8Q2CPEzyEhVwm0KeYHE5J%2FvaMQOLL8l%2BPWp8pvMTh%2FDe11lUqqQKuB1Cy9sVcSSQxzXKgbHIpmcWJoR9%2Bg2HFV12mYAReA%2FU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9d61e475bf511243-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T10:26:15.180389Z","times_seen":17561103,"resource_available":true,"data":null}},"time_used":2275,"timings":{"blocked":2227,"dns":2,"connect":8,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whitelist-ility.xyz/4f56a0e57650fa48ad7f0de7de4af3bd634889a8.png","fqdn":"whitelist-ility.xyz","domain":"whitelist-ility.xyz","tld":"xyz"},"ip":{"addr":"172.67.165.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whitelist-ility.xyz/","date":"2026-03-02T16:48:59.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whitelist-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 02:17:19 GMT","end":"Fri, 29 May 2026 02:17:18 GMT"},"fingerprint":{"sha1":"82:F8:20:9E:1A:7B:23:A5:F1:5A:92:77:EE:E9:5C:05:C9:B0:08:3D","sha256":"79:60:8C:92:87:8E:51:20:F0:52:D7:AE:08:B7:2B:84:3E:E2:AF:2B:FA:43:6B:3A:33:FB:07:DB:57:CC:05:3E"}}},"request":{"raw":"GET /4f56a0e57650fa48ad7f0de7de4af3bd634889a8.png HTTP/1.1\r\nHost: whitelist-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whitelist-ility.xyz/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:48:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 14701728\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 02:49:00 GMT\r\netag: \"69a2579c-e054a0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 5891\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rwqEE3Ka3Bx8I9O%2FfCMOL1cD55YuSFjSOPXbxq%2BstYfDEWhWfP6B%2FoszuIKUstJoHkvDn43ouL8uCJHVKSQ82YkOsXAwqBCTwxMK1aIQlIBp5AA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d61e4616a88fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14701728,"size_decoded":0,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 4096x2304, components 3","md5":"e225dcf5d3165a68ee796f2a1cc4497c","sha1":"9342572d41e4905edd8ad5b86fbb96942b71a6b5","sha256":"e828348d511da09ab415baf0deb3bce6f376960789af6e2fdec80dc54c27c28c","sha512":"cfc5cf879a5576d86fbc4d50922a42a2d31f66222ee3ec871586993367e61b7d71b40c50cb81de02e0766c8e487b9444d8e166d063715e5e8b286f1b2fd78cf2","ssdeep":"24576:V2wklFeXFPU0lW3Kg5Z7F4AI13KouPVwF6PiptPLM1Ujx:V8He1plzgr7F4ONUtLgUjx","tlshash":"312533eac10458133fda3e354dee5271e84ae7319c13a65723c86ebac1d887da6b570c","first_seen":"2026-03-02T13:22:55.71073Z","last_seen":"2026-03-08T12:24:34.434373Z","times_seen":5,"resource_available":false,"data":null}},"time_used":3212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":3196,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whitelist-ility.xyz/date-fns-7.5.14.js","fqdn":"whitelist-ility.xyz","domain":"whitelist-ility.xyz","tld":"xyz"},"ip":{"addr":"172.67.165.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whitelist-ility.xyz/","date":"2026-03-02T16:48:58.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whitelist-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 02:17:19 GMT","end":"Fri, 29 May 2026 02:17:18 GMT"},"fingerprint":{"sha1":"82:F8:20:9E:1A:7B:23:A5:F1:5A:92:77:EE:E9:5C:05:C9:B0:08:3D","sha256":"79:60:8C:92:87:8E:51:20:F0:52:D7:AE:08:B7:2B:84:3E:E2:AF:2B:FA:43:6B:3A:33:FB:07:DB:57:CC:05:3E"}}},"request":{"raw":"GET /date-fns-7.5.14.js HTTP/1.1\r\nHost: whitelist-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whitelist-ility.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:48:58 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 02:49:00 GMT\r\netag: W/\"69a2579c-54052\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 5891\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QXYc5r09t%2Fjb37AcDM7VP4JV8kcCC2NKOMNlwziUaDMi%2BVcpOSqZBLhxCKYau9qbNW8eOKXWp4dz8S4u6w1mgbCexu%2Bsy76uUdVLMHOCjT0KV%2Fk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d61e45f49b9fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":344146,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"32fc86810da36b7440ca42e977f39623","sha1":"52b8f6e85c1b74faef68c549c9654010144b3c13","sha256":"eba9fca910f0aac85676944fb6c7be244c2936d02fb8a5e8c5dabf5d2038ccf6","sha512":"aa136a197dfa97f382c09721ab161574d04a6d2ba967f39c0714a86fb887602d30500848e8e29e2a431e9f5c691a38cde28181fd4fe12e0d3801206ff2eb0571","ssdeep":"1536:rg6f7VnQLpLXti+JQHxhC0M6SLpTS8TJ9MdiCBro+lVXU5hUp/Xd/yiN:rgwZUlXI3HFi3Ucw/hth","tlshash":"9c742ec66a9694a97e0511cecc76ee05e0584d13bdacf043e6edfdc1701af66808b36b","first_seen":"2026-03-02T16:49:33.001559Z","last_seen":"2026-03-08T12:24:34.447985Z","times_seen":3,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whitelist-ility.xyz/css2.css","fqdn":"whitelist-ility.xyz","domain":"whitelist-ility.xyz","tld":"xyz"},"ip":{"addr":"172.67.165.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://whitelist-ility.xyz/","date":"2026-03-02T16:48:58.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whitelist-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 02:17:19 GMT","end":"Fri, 29 May 2026 02:17:18 GMT"},"fingerprint":{"sha1":"82:F8:20:9E:1A:7B:23:A5:F1:5A:92:77:EE:E9:5C:05:C9:B0:08:3D","sha256":"79:60:8C:92:87:8E:51:20:F0:52:D7:AE:08:B7:2B:84:3E:E2:AF:2B:FA:43:6B:3A:33:FB:07:DB:57:CC:05:3E"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: whitelist-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whitelist-ility.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:48:58 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 02:48:59 GMT\r\netag: W/\"69a2579b-382b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 5891\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i%2F9cxR2gk7OtVlt7YDHTJBqbpoNC2Z0aDryLiTE17gDNYp4oWf9Ds7UPu%2B72NKb2OYbngWza%2F0XqoPmql6vy0fXM6XHC3hAxyL0wyrhOzLsq5Cw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d61e45f49bcfb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14379,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"768d6ec67dee52c27d255b67960a3670","sha1":"5ee48dfbc2071e97e4d665f9e9245ec25cec505a","sha256":"26a4ff2c29cbf024e3a25b54e71d0499631158f511c8bb3dd928496e3cd72865","sha512":"6eeb4deff1a14837290a6ddb34afb15673b151d7b8f70e3de2283396df0d767857ebbe6c0fc2369a57f2287c4096931fb49239b994efe072a52b43dfb9037f68","ssdeep":"192:zFDpl3WwEm9bO8/K31Ac+soo6TKIm4gvSMxQFJgSS1YQcaMBeWD0jhIkdCZHQRm9:hjOr6/qqgZGgO","tlshash":"9452db90046ba600eb871cc627cf3f26ad4db2526450da386ffe0458bdebc652372b5d","first_seen":"2026-03-02T13:22:55.696334Z","last_seen":"2026-03-08T12:24:34.433742Z","times_seen":5,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whitelist-ility.xyz/aos.css","fqdn":"whitelist-ility.xyz","domain":"whitelist-ility.xyz","tld":"xyz"},"ip":{"addr":"172.67.165.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://whitelist-ility.xyz/","date":"2026-03-02T16:48:58.773Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whitelist-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 02:17:19 GMT","end":"Fri, 29 May 2026 02:17:18 GMT"},"fingerprint":{"sha1":"82:F8:20:9E:1A:7B:23:A5:F1:5A:92:77:EE:E9:5C:05:C9:B0:08:3D","sha256":"79:60:8C:92:87:8E:51:20:F0:52:D7:AE:08:B7:2B:84:3E:E2:AF:2B:FA:43:6B:3A:33:FB:07:DB:57:CC:05:3E"}}},"request":{"raw":"GET /aos.css HTTP/1.1\r\nHost: whitelist-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whitelist-ility.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:48:58 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 02:48:59 GMT\r\netag: W/\"69a2579b-65c5\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 5891\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=05HDUbjHw9UAN%2FAIvDJRVosp6VtW8FL4VE%2BhOQBLC2ye72Sry%2BwQ1Zx03phOQ6E5XtoPWdJreN1W8CCjMJRqXl3YKC1%2Fnos%2BZRnAJS3C7jNilNc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d61e45f49befb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26053,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (26053), with no line terminators","md5":"847da8fca8060ca1a70f976aab1210b9","sha1":"0557d37454b67f42f2cb101e57e5070fb1193570","sha256":"1aa8845fd06e475aefe733d4e55b36a92fcd487975049c8172341827ac9cc03e","sha512":"d5c2bbf1ad68fa1b7625c696ea0f0e5d8c2aa5ebfdfba1aa3a4cfdc6604df625148489dd2adc7020b19660e4a26ce2a32ec11d8f28d9bd80eafdc67035e6a4d3","ssdeep":"768:CMJihoCcZCOud8G8tKS65wqsZQ1G+dM2cl6iCRotsV84sxIKcv4g01UeEPEQEB4D:CMJihoCcZCOud8G8tKS65wqsZCG+dM25","tlshash":"f0c24b5a7a4cd100bf831b4762df2a0859347588e5301986be3f35ca2cd5ce6b973fa9","first_seen":"2023-04-05T07:18:45Z","last_seen":"2026-07-27T10:17:04.956399Z","times_seen":42189,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whitelist-ility.xyz/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"whitelist-ility.xyz","domain":"whitelist-ility.xyz","tld":"xyz"},"ip":{"addr":"172.67.165.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://whitelist-ility.xyz/","date":"2026-03-02T16:48:58.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whitelist-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 02:17:19 GMT","end":"Fri, 29 May 2026 02:17:18 GMT"},"fingerprint":{"sha1":"82:F8:20:9E:1A:7B:23:A5:F1:5A:92:77:EE:E9:5C:05:C9:B0:08:3D","sha256":"79:60:8C:92:87:8E:51:20:F0:52:D7:AE:08:B7:2B:84:3E:E2:AF:2B:FA:43:6B:3A:33:FB:07:DB:57:CC:05:3E"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: whitelist-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whitelist-ility.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Mon, 02 Mar 2026 17:36:58 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RErcjHqDdlhqu36j4gjPsVvc6bLhpxo5jAf3v6m%2BD5c07VXs3d8eySyPdQ6%2Ft89IMx3TfG4NlP%2FKWuVU14NNc3%2F7vnpkhSfGGkK%2FkMGYJC%2FC6rg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:48:58 GMT\r\ncf-ray: 9d61e45f59d0fb58-ARN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-27T10:25:32.828152Z","times_seen":408063,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whitelist-ility.xyz/01_Leader%20Board.png","fqdn":"whitelist-ility.xyz","domain":"whitelist-ility.xyz","tld":"xyz"},"ip":{"addr":"172.67.165.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whitelist-ility.xyz/","date":"2026-03-02T16:48:59.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whitelist-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 02:17:19 GMT","end":"Fri, 29 May 2026 02:17:18 GMT"},"fingerprint":{"sha1":"82:F8:20:9E:1A:7B:23:A5:F1:5A:92:77:EE:E9:5C:05:C9:B0:08:3D","sha256":"79:60:8C:92:87:8E:51:20:F0:52:D7:AE:08:B7:2B:84:3E:E2:AF:2B:FA:43:6B:3A:33:FB:07:DB:57:CC:05:3E"}}},"request":{"raw":"GET /01_Leader%20Board.png HTTP/1.1\r\nHost: whitelist-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whitelist-ility.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:48:59 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 02:49:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 5890\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dtD3kUX9iwzNqITK5gtDAR2zLZf6IXZQm31YssXTjCg08KNFmA8uVIYQ9iKLEu52XNXkprs3L3EVpDf%2FSzooEZDi7Xt0na4%2F7pf0ryG7VCZmoZQ%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9d61e4610a4dfb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62495,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1250)","md5":"7fcc804148abc65482ccbcb2e7de1fd7","sha1":"bfc0d3e4ad2e723756e5b681cafe3a1e75dc80cf","sha256":"b3fefb93605b2d3f290876857abc4244038009c0f22e20f4089fae8ece4e61f3","sha512":"ca4f43b4ccae3b972057207ae339d8e5e2d1f51a4360e8cef27d65fff3f3989f263aa4b3dd0c2d5a3563f26bf4696bd26963b30ee46f0d7739923adc2cd9beb9","ssdeep":"768:7WyhFK8yhFKoyhFKwyhFKRAiOLbduRGUVysxnv5fCcuT:7jk5klktkRkkIUVywh1uT","tlshash":"d453f8b993f41576508783d5eb62ab267e65d067ca4e4110f2bc07a82fc3cc9dc27a9c","first_seen":"2026-03-02T16:49:33.005033Z","last_seen":"2026-03-02T16:49:33.005033Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"base.drpc.org/","fqdn":"base.drpc.org","domain":"drpc.org","tld":"org"},"ip":{"addr":"104.18.10.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://whitelist-ility.xyz/","date":"2026-03-02T16:48:59.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"drpc.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 16:14:00 GMT","end":"Sun, 17 May 2026 17:13:51 GMT"},"fingerprint":{"sha1":"6E:2D:5A:72:A1:75:4A:F0:C7:96:F2:E8:26:78:F5:FC:54:0C:73:93","sha256":"18:E9:96:29:98:D2:5D:4E:19:CD:75:98:36:ED:EB:40:40:C4:23:2C:76:E1:95:F1:4C:85:59:D2:48:CB:AF:4A"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: base.drpc.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://whitelist-ility.xyz/\r\nOrigin: https://whitelist-ility.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 02 Mar 2026 16:48:59 GMT\r\ncf-ray: 9d61e46298124c11-OSL\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: https://whitelist-ility.xyz\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T10:26:15.180389Z","times_seen":17561103,"resource_available":true,"data":null}},"time_used":419,"timings":{"blocked":120,"dns":19,"connect":1,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whitelist-ility.xyz/02_Profile.png","fqdn":"whitelist-ility.xyz","domain":"whitelist-ility.xyz","tld":"xyz"},"ip":{"addr":"172.67.165.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whitelist-ility.xyz/","date":"2026-03-02T16:48:59.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whitelist-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 02:17:19 GMT","end":"Fri, 29 May 2026 02:17:18 GMT"},"fingerprint":{"sha1":"82:F8:20:9E:1A:7B:23:A5:F1:5A:92:77:EE:E9:5C:05:C9:B0:08:3D","sha256":"79:60:8C:92:87:8E:51:20:F0:52:D7:AE:08:B7:2B:84:3E:E2:AF:2B:FA:43:6B:3A:33:FB:07:DB:57:CC:05:3E"}}},"request":{"raw":"GET /02_Profile.png HTTP/1.1\r\nHost: whitelist-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whitelist-ility.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:48:59 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 02:49:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 5891\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wo0Qgxoon0BBcfwD6HsY4%2FqKK3OWMoFvlIxWJvr2ld5f9OhBBKxmJRR6FQxh9u4q4SMTJIRHAEroMVu%2BbZXvxAgm%2BBlvcUEZlvfalgI18aD0OMQ%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9d61e4610a4efb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62495,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1250)","md5":"629e625be3f3793415ed431f4445c6d6","sha1":"caab47fc134674e9e0e25483436e9b412361f489","sha256":"7cf010947f50a2e04df258e5209a7689845a4c1d7008d198d5ed4b48e8097bc4","sha512":"0e8f93b4da24510fc64bcdad92e244472db90de900e8da5e12baecc8acd9b0b887726fc91d430ccbb28c3eeed32a83048109ac629b7f03868d473c55ebe9f2af","ssdeep":"768:7WyhFK8yhFKoyhFKwyhFKRAiOLbdfRGUVysxnv5fCct:7jk5klktkRk1IUVywh1t","tlshash":"3153f8b993f41576508783d5eb62ab667e61d067ca4e4110f2bc07a82fc3cc9dc27a9c","first_seen":"2026-03-02T16:49:33.005714Z","last_seen":"2026-03-02T16:49:33.005714Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whitelist-ility.xyz/04_Trade.png","fqdn":"whitelist-ility.xyz","domain":"whitelist-ility.xyz","tld":"xyz"},"ip":{"addr":"172.67.165.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whitelist-ility.xyz/","date":"2026-03-02T16:48:59.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whitelist-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 02:17:19 GMT","end":"Fri, 29 May 2026 02:17:18 GMT"},"fingerprint":{"sha1":"82:F8:20:9E:1A:7B:23:A5:F1:5A:92:77:EE:E9:5C:05:C9:B0:08:3D","sha256":"79:60:8C:92:87:8E:51:20:F0:52:D7:AE:08:B7:2B:84:3E:E2:AF:2B:FA:43:6B:3A:33:FB:07:DB:57:CC:05:3E"}}},"request":{"raw":"GET /04_Trade.png HTTP/1.1\r\nHost: whitelist-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whitelist-ility.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:48:59 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 02:49:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 5891\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QsDLhOi2fdvqyb5khPTZsxlwAH0BtqGiDG9iuzqeklr8qV%2FfyEsUAzlnMT1Clugo39IicRSU43n86v6BSN4v3%2BdPyl%2F9p%2BJ0MqS2lbuPAxeZuPY%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9d61e4610a50fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62495,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1250)","md5":"1da485161a25ab93c49fd561ccdbb790","sha1":"65e59c65eda1fa54a620177f16b6bd00631c7d88","sha256":"a2cac16d14f5e51072d785d91ba0e3afdc22fdd4e3e2373b47d01699cc5c05e1","sha512":"010b60c5caaa8abc231306bff4c63b84a77bd416a601dd22749b18a92038c1d196bf34495e5f39523a6b4319008fd3add8f0d99b36e4472298db8e566c3e33fa","ssdeep":"768:7WyhFK8yhFKoyhFKwyhFKRAiOLbdxRGUVysxnv5fCcw3:7jk5klktkRkzIUVywh1w3","tlshash":"7a53f8b993f41576508783d5eb62ab267e61d067ca4e4110f2bc07a82fc3cc9dc27a9c","first_seen":"2026-03-02T16:49:33.006718Z","last_seen":"2026-03-02T16:49:33.006718Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whitelist-ility.xyz/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2","fqdn":"whitelist-ility.xyz","domain":"whitelist-ility.xyz","tld":"xyz"},"ip":{"addr":"172.67.165.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whitelist-ility.xyz/","date":"2026-03-02T16:48:59.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whitelist-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 02:17:19 GMT","end":"Fri, 29 May 2026 02:17:18 GMT"},"fingerprint":{"sha1":"82:F8:20:9E:1A:7B:23:A5:F1:5A:92:77:EE:E9:5C:05:C9:B0:08:3D","sha256":"79:60:8C:92:87:8E:51:20:F0:52:D7:AE:08:B7:2B:84:3E:E2:AF:2B:FA:43:6B:3A:33:FB:07:DB:57:CC:05:3E"}}},"request":{"raw":"GET /pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2 HTTP/1.1\r\nHost: whitelist-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whitelist-ility.xyz/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:48:59 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 7840\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 02:48:59 GMT\r\netag: \"69a2579b-1ea0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V4v8%2FdLygFJOrDU6e7uddiquW8jD4H%2B%2FWeKQpOIi1mVHBkt2i%2BdtHf%2ByqEEBEeK%2BAUN4bxpanz2ihT5wWQyVYNXkqDQmz24P136SQfYPDwJvtK4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d61e4618a97fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7840,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 7840, version 1.0","md5":"8d91ec1ca2d8b56640a47117e313a3e9","sha1":"a9e9bafe64666f4595051a0e895b47a5fa39e67e","sha256":"78bc3aa78faec288bbb3bf26c9a0fa4eb67b1e69da94a17233c5cab60525efdb","sha512":"bd3a864bd45f39ee83ee79ba4469a156ad8ff3dd33d8aae11e3edd97b29c2ef7f610ac851726041251e34b0108f618a2f945038bf6c0de9a7982e0d643cdfcfb","ssdeep":"192:S5upwnqrBHPLA3J73KAQDPh50uFdXrnpjDS7LjvQnRb:S5ELrBvLA3J76AIPhi+vXwzQnRb","tlshash":"68f19de0200937e4f73d5feee6276b7f2e2edb05e25305aa7556014c69de39310d21a2","first_seen":"2023-04-06T21:42:41Z","last_seen":"2026-07-27T10:29:28.377823Z","times_seen":79779,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"sharp-wave-5bd.cf-3nxq98r0.workers.dev/secureproxy?e=jscdn/getFile","fqdn":"sharp-wave-5bd.cf-3nxq98r0.workers.dev","domain":"cf-3nxq98r0.workers.dev","tld":"workers.dev"},"ip":{"addr":"104.21.81.35","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://whitelist-ility.xyz/","date":"2026-03-02T16:49:02.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cf-3nxq98r0.workers.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 19:03:59 GMT","end":"Wed, 27 May 2026 19:03:58 GMT"},"fingerprint":{"sha1":"46:7D:E9:57:2B:36:D6:55:58:50:F9:73:80:25:C8:45:3B:E4:30:C6","sha256":"BD:C5:A5:2A:29:26:28:6C:FD:9F:16:02:2E:7E:83:7F:FC:5F:B8:E0:CA:49:02:7D:3D:8B:A1:D9:E7:A7:23:92"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: sharp-wave-5bd.cf-3nxq98r0.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://whitelist-ility.xyz/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://whitelist-ility.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"9v9miksmr4zkk8jfbrrg\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 16:49:02 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r2PcI6yi2ZMAsgQ4nyRxqOm3%2BrT7yaEL%2FRXFNH6X5XkbDhjooZnswy18kECZGvnREAOv%2Bf4Y3wL0UWY%2FAXqo6Xu45kWM%2FDUZQOn40UJiBgYHAyZ4kMSQ9W0GORNS2sI0imXA4yI9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d61e475df8e1243-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3345725,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d98f7845120059519b05d2eee8d3ec2b","sha1":"f51c8b2ced9f78e5f4da160f6f9d5d8b24a406fa","sha256":"bc480498032b008dedeba8672edffd24235ab3b46ef37ff52508cd3ad770d790","sha512":"829380b4886e56ee25c6a02fd8e76ca85668ed8758a97b17e04ecf9b5e94639434f9ef3c03e1f3e84ad04eecdf9b77bce0d2df2d8f94e0ad9b5c6f3287d8ac42","ssdeep":"24576:ygb/YWmLkwsOukzMSPbg+lsVo5/Cr0OSzcfUjed/c8AeKOHj:yeGkwdNZngkEj","tlshash":"fd2523d26f5fd86ccb5c5f99b0bb2d0e28440d121044a6b5ea96d8c736a4bb040ff97e","first_seen":"2026-03-02T16:49:33.009033Z","last_seen":"2026-03-02T16:49:33.009033Z","times_seen":1,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whitelist-ility.xyz/style.css","fqdn":"whitelist-ility.xyz","domain":"whitelist-ility.xyz","tld":"xyz"},"ip":{"addr":"172.67.165.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://whitelist-ility.xyz/","date":"2026-03-02T16:48:58.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whitelist-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 02:17:19 GMT","end":"Fri, 29 May 2026 02:17:18 GMT"},"fingerprint":{"sha1":"82:F8:20:9E:1A:7B:23:A5:F1:5A:92:77:EE:E9:5C:05:C9:B0:08:3D","sha256":"79:60:8C:92:87:8E:51:20:F0:52:D7:AE:08:B7:2B:84:3E:E2:AF:2B:FA:43:6B:3A:33:FB:07:DB:57:CC:05:3E"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: whitelist-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whitelist-ility.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:48:58 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 02:48:59 GMT\r\netag: W/\"69a2579b-844f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 5891\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vK9PyvFg08mBU83qm1F5Dxp4JhjnoPWkzND7pqNhDQcMPG7bWsU2dSdMxnCoZM2AVxsrr0REwR8LBhndonEzg66dt4pquXKIjylAutagDcnY44A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9d61e45f49bafb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33871,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"95aa6c2ad0fdb1b535f5d6c77ca7e95e","sha1":"08577d97276788eebd31989ea4375b91fffa897f","sha256":"199e4b32f70a7a15fe377a8ce847563db9923dc2129293eaf90f90405eec2f43","sha512":"352eed9e6e9f9f813958286c7f5a02b41d3b4b1a1408bda9d240d86ef00b77ae1a89603dd0483a1ccf1632800b325a954eb04607057f88b9992e3d62959c2b46","ssdeep":"768:XPMKKJ9Y4vGolLx5unnfWX3hnxBgthzNb5wFG1:/MKKJ9XvGg8eXxxBgRu01","tlshash":"afe271a66ba52104b91fd1f839e39b597338c443d10eccbc67e1305cef892d994a3b99","first_seen":"2026-03-02T13:22:55.69442Z","last_seen":"2026-03-08T12:24:34.433088Z","times_seen":5,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whitelist-ility.xyz/01_Leader%20Board.png","fqdn":"whitelist-ility.xyz","domain":"whitelist-ility.xyz","tld":"xyz"},"ip":{"addr":"172.67.165.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whitelist-ility.xyz/","date":"2026-03-02T16:48:58.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whitelist-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 02:17:19 GMT","end":"Fri, 29 May 2026 02:17:18 GMT"},"fingerprint":{"sha1":"82:F8:20:9E:1A:7B:23:A5:F1:5A:92:77:EE:E9:5C:05:C9:B0:08:3D","sha256":"79:60:8C:92:87:8E:51:20:F0:52:D7:AE:08:B7:2B:84:3E:E2:AF:2B:FA:43:6B:3A:33:FB:07:DB:57:CC:05:3E"}}},"request":{"raw":"GET /01_Leader%20Board.png HTTP/1.1\r\nHost: whitelist-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whitelist-ility.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:48:58 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 02:49:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 5890\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rrm7WH0Y%2FCOZymauhROKUmWnVOo2wRdmvV7iVcl725ZXUNvM0oXGfFI1id30r0qERWEG14ryJLU4upr%2BIqTPKg%2Bn7jxugwAepg7H5GZDkBM3zts%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9d61e45f49c4fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62495,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1250)","md5":"e1f86b0bf3ea4e2b73bcb542a2594f50","sha1":"b28ee99ff0e3dc71a804c167b5ecea18d93a5ea2","sha256":"46a63fa170cb080c6f3f8807fc0dd6339d925fd758d8610a8c59386f1a1fec43","sha512":"4b59263df4486f2ead08d1e27fcbcded08a465f2dd9c532ad72737f7502964cfb60fb841fedcfb5072da92ee081e0025c1e56c3161bdb5c9c1939f030cbd48d7","ssdeep":"768:7WyhFK8yhFKoyhFKwyhFKRAiOLbdTRGUVysxnv5fCco:7jk5klktkRkdIUVywh1o","tlshash":"ee53f8b993f41576508783d5eb62ab267e61d067ca4e4110f2bc07a82fc3cc9dc27a9c","first_seen":"2026-03-02T16:49:33.011494Z","last_seen":"2026-03-02T16:49:33.011494Z","times_seen":1,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whitelist-ility.xyz/02_Profile.png","fqdn":"whitelist-ility.xyz","domain":"whitelist-ility.xyz","tld":"xyz"},"ip":{"addr":"172.67.165.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whitelist-ility.xyz/","date":"2026-03-02T16:48:58.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whitelist-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 02:17:19 GMT","end":"Fri, 29 May 2026 02:17:18 GMT"},"fingerprint":{"sha1":"82:F8:20:9E:1A:7B:23:A5:F1:5A:92:77:EE:E9:5C:05:C9:B0:08:3D","sha256":"79:60:8C:92:87:8E:51:20:F0:52:D7:AE:08:B7:2B:84:3E:E2:AF:2B:FA:43:6B:3A:33:FB:07:DB:57:CC:05:3E"}}},"request":{"raw":"GET /02_Profile.png HTTP/1.1\r\nHost: whitelist-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whitelist-ility.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:48:58 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 02:49:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 5890\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2AG9XCen1OsBtI6DlpIz%2FRw5g7Lha1uZMzTBF8VF1wTF9%2FH8fRa8Vqok1LKr6iqa4pcI3ep3a5E5WqTEFHIt%2FNaGi2SNFvqJkQBWnFGcepI84r0%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9d61e45f49c5fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62495,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1250)","md5":"2d2d90dd8a646f1a85a45bba707a84db","sha1":"c3edd35e5cbbf280a401a65507f71d36f50b16c5","sha256":"e3020749ed7279f53e50fe2cc33f846294021f6393a4e9822c80076350720266","sha512":"7f015a470a8e372984e93bf6e683c04559a7c7392a3e1f0fb3a5fc412981275e6df0c4021a3f7b512bd30819f151472ab17b36e6afe56a3e9e732a8b1156e8c9","ssdeep":"768:7WyhFK8yhFKoyhFKwyhFKRAiOLbdTRGUVysxnv5fCc5:7jk5klktkRkJIUVywh15","tlshash":"5c53f8b993f41576508783d5eb62ab267e61d067ca4e4110f2bc07a82fc3cc9dc27a9d","first_seen":"2026-03-02T16:49:33.012606Z","last_seen":"2026-03-02T16:49:33.012606Z","times_seen":1,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whitelist-ility.xyz/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtZ6Hw5aXo.woff2","fqdn":"whitelist-ility.xyz","domain":"whitelist-ility.xyz","tld":"xyz"},"ip":{"addr":"172.67.165.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whitelist-ility.xyz/","date":"2026-03-02T16:48:59.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whitelist-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 02:17:19 GMT","end":"Fri, 29 May 2026 02:17:18 GMT"},"fingerprint":{"sha1":"82:F8:20:9E:1A:7B:23:A5:F1:5A:92:77:EE:E9:5C:05:C9:B0:08:3D","sha256":"79:60:8C:92:87:8E:51:20:F0:52:D7:AE:08:B7:2B:84:3E:E2:AF:2B:FA:43:6B:3A:33:FB:07:DB:57:CC:05:3E"}}},"request":{"raw":"GET /JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtZ6Hw5aXo.woff2 HTTP/1.1\r\nHost: whitelist-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whitelist-ility.xyz/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:48:59 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 18748\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 02:48:59 GMT\r\netag: \"69a2579b-493c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kPJJdT1%2BXc1l7Jp%2BbMlv6pSsw2W5yftINNyS%2BznOOGCmsPlqtwVVL%2F%2B9IvCZiWrzAEU0mobTAYka6AylxSR%2Bv2hN96N8qKQgimC29YAbaps%2Btus%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d61e4618a96fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18748,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 18748, version 1.0","md5":"f96e8aab37e850db0b633bd321d2a144","sha1":"12a7d81d936e58ab5d77288100fa447e81321201","sha256":"2b53300fb9471520df2f4905847fb7a209879b2029ae893c05c6ee346b1320cd","sha512":"d9d1b5650947bd367dc20ce9a39a8ccd620af2a03c67372c552cfbfc2ac6ebfdb9628e863a8dbfb77f8c235a0d60195578138861655605dbaf5e7147f2801760","ssdeep":"384:66hGqEmAQ5pMQHNpApEcusuhY/sWhx3fCO/Wb8/E9o+v7d7RNB:625IQ5pM+pAyesWhxPd/Wb8/Eb7d7Rz","tlshash":"f782d07e461ba8c0fd1c3238444b0726be6b9d3ee61e5867804e4813da1b39d98f79d0","first_seen":"2025-09-06T11:38:59.870048Z","last_seen":"2026-07-27T07:07:59.17906Z","times_seen":3160,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"base.llamarpc.com/","fqdn":"base.llamarpc.com","domain":"llamarpc.com","tld":"com"},"ip":{"addr":"172.67.68.151","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://whitelist-ility.xyz/","date":"2026-03-02T16:48:59.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"llamarpc.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 09:44:32 GMT","end":"Sun, 03 May 2026 10:44:28 GMT"},"fingerprint":{"sha1":"D0:0D:78:A5:95:3F:EE:B1:9C:2A:1F:52:4A:80:91:B4:70:2F:62:2F","sha256":"57:E9:A3:F8:8A:14:5D:5F:14:F1:B9:7B:F8:E7:0C:23:1F:5B:04:3F:9B:EB:77:8D:14:7E:BA:1D:A3:35:A5:C6"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: base.llamarpc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://whitelist-ility.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://whitelist-ility.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0xEeB513144490B88366616606382BD2A9f1d2cA37\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 16:48:59 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\nx-cache: false\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MAv%2FKHZ8Bt7bm6nCJxh4dPEg89yfhFuzoTBWPXKqtR6608TFf5jkLe2NOomw8SctDtYpUgT0ZVdlggYdLKY%2B7jGmydMGCLc4uOiRTQ3E%2Bb4%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9d61e4640ee91382-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":870,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"48e421ef6fd76ed6f1db3736ba30fbbc","sha1":"9591e6f7c83e44e6cdc274a3b4a602490950b6c3","sha256":"8213db6307f9acf8a5590ffd1d04aff35952b2e1e9a76f2bdf5d1f5d4b5b6cc2","sha512":"a78f600e63b8a73af9f16f4836605f39599bc23236e27de2914c5d048a1ceba37ba03e714b4e9ac0ba74df67162b07fb964055b888b7e772998ffaf80108a945","ssdeep":"","tlshash":"6d11bdf13e16d890e18e8a6bf3d8380a24383223dfd84a55015459ed1ef7b60f25d98a","first_seen":"2026-03-01T18:23:47.278959Z","last_seen":"2026-03-02T16:49:33.014828Z","times_seen":3,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whitelist-ility.xyz/06_Mini_Explorer.png","fqdn":"whitelist-ility.xyz","domain":"whitelist-ility.xyz","tld":"xyz"},"ip":{"addr":"172.67.165.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whitelist-ility.xyz/","date":"2026-03-02T16:48:59.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whitelist-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 02:17:19 GMT","end":"Fri, 29 May 2026 02:17:18 GMT"},"fingerprint":{"sha1":"82:F8:20:9E:1A:7B:23:A5:F1:5A:92:77:EE:E9:5C:05:C9:B0:08:3D","sha256":"79:60:8C:92:87:8E:51:20:F0:52:D7:AE:08:B7:2B:84:3E:E2:AF:2B:FA:43:6B:3A:33:FB:07:DB:57:CC:05:3E"}}},"request":{"raw":"GET /06_Mini_Explorer.png HTTP/1.1\r\nHost: whitelist-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whitelist-ility.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:48:59 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 02:49:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 5891\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UiZ6dOGZaF%2FBPIK6NpaHix9jqwf2xjJNJdNFqpfQ6ImRS7nqdXQ0WR6RoYYEY1drevl9PkjTEFZFO87M4I92CojlxIcRrtUt%2F6ZgBffx%2BU55tKA%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9d61e4610a52fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62495,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1250)","md5":"17d168629e5e53a735529874e9d05f0a","sha1":"90fd030a38cf6e9bbd8d396c72645ae0be1edc2f","sha256":"975dc3da53255c19c50ab02789772ebb63d0ceb5b507235cae4ee585cd0aeece","sha512":"cabd05ef030deff9c90a7bb3701d39d24fc5d8a3c68e1ccb5612bdb2b1bb4ea31d89ccf58228e642d51a7a11eb39739f3f62e3e8a0935bdeec9c75ba05521966","ssdeep":"768:7WyhFK8yhFKoyhFKwyhFKRAiOLbdIRGUVysxnv5fCcE:7jk5klktkRkSIUVywh1E","tlshash":"1b53f8b993f415b6504783d5eb62ab267e65d067ca4e4110f2bc07a82fc3cc9dc27a9c","first_seen":"2026-03-02T16:49:33.01586Z","last_seen":"2026-03-02T16:49:33.01586Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whitelist-ility.xyz/","fqdn":"whitelist-ility.xyz","domain":"whitelist-ility.xyz","tld":"xyz"},"ip":{"addr":"172.67.165.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-02T16:48:58.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whitelist-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 02:17:19 GMT","end":"Fri, 29 May 2026 02:17:18 GMT"},"fingerprint":{"sha1":"82:F8:20:9E:1A:7B:23:A5:F1:5A:92:77:EE:E9:5C:05:C9:B0:08:3D","sha256":"79:60:8C:92:87:8E:51:20:F0:52:D7:AE:08:B7:2B:84:3E:E2:AF:2B:FA:43:6B:3A:33:FB:07:DB:57:CC:05:3E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: whitelist-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 16:48:58 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 02:49:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d15xQB2qP3LteWIiNcJ%2Bkf2n%2FyNERz1ziVJ8dm2lwafPDRWAl52ekOLceuELkuTEHayFWrvPt3xkiswUftLPjqNfCX8vnCkndo1z8USYGwmRPoE%3D\"}]}\r\nage: 45423\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9d61e45e08038b20-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62495,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1250)","md5":"63c2a2840ddc87312c8b489e096b327a","sha1":"b28207b63048ef2fdca1c539f38eed8e8f67c3b4","sha256":"1b93e8a5c4a6b989df4610f24623fc8109cb9558aa22e4b14a9e71cc508fde0a","sha512":"0093ef994c4d50b45dc713569d4db5ba2fbdecff54724c47b5f79be9471be9a7ed4e628e3150d19bb38ed487de9dc69b3e1ac9d68d70af196e626c287d1d42e8","ssdeep":"768:7WyhFK8yhFKoyhFKwyhFKRAiOLbdhRGUVysxnv5fCcl:7jk5klktkRk/IUVywh1l","tlshash":"1e53f8b993f41576508783d5eb62ab267e61d067ca4e4110f2bc07a82fc3cc9dc27a9d","first_seen":"2026-03-02T16:49:33.017572Z","last_seen":"2026-03-02T16:49:33.017572Z","times_seen":1,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":78,"dns":53,"connect":8,"send":0,"wait":23,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whitelist-ility.xyz/logo.svg","fqdn":"whitelist-ility.xyz","domain":"whitelist-ility.xyz","tld":"xyz"},"ip":{"addr":"172.67.165.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whitelist-ility.xyz/","date":"2026-03-02T16:48:58.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whitelist-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 02:17:19 GMT","end":"Fri, 29 May 2026 02:17:18 GMT"},"fingerprint":{"sha1":"82:F8:20:9E:1A:7B:23:A5:F1:5A:92:77:EE:E9:5C:05:C9:B0:08:3D","sha256":"79:60:8C:92:87:8E:51:20:F0:52:D7:AE:08:B7:2B:84:3E:E2:AF:2B:FA:43:6B:3A:33:FB:07:DB:57:CC:05:3E"}}},"request":{"raw":"GET /logo.svg HTTP/1.1\r\nHost: whitelist-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whitelist-ility.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:48:58 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 02:48:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 5890\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"69a2579b-4ca\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gr75JOzLC%2FijsiWJkczEwTdhJiszHAYzto1GXf1UW9DzD5vmD1V267prBkwiW1mY0Y4J4yLI2X7RLiUEAunr%2Fo44%2Bef0y8rlK%2B110mWj8pdHj%2Fk%3D\"}]}\r\ncf-ray: 9d61e45f49bffb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1226,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1ac248a772639d022d6e6aab033be741","sha1":"9df76961caa9ac4f5004f21d9d7f6514cd4b708b","sha256":"84d02ca299e78af4caf317481ab2064810382badc7ca108ed6204e1f7f54c17c","sha512":"67e19401e6bd0baf0e0f90a1c0e416b59e5f551e0477c9096991d70fe536fad7e371ab7be4ce78bfc412e530200d7706e0d167cd6275219833c3e230a085efdb","ssdeep":"","tlshash":"4c21c1f054ac9284760ad73d426c643b9d7994f7cbbdd5897780068e7b6409f4cde9c0","first_seen":"2026-03-02T13:22:55.703249Z","last_seen":"2026-03-08T12:24:34.450279Z","times_seen":5,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whitelist-ility.xyz/third3x.png","fqdn":"whitelist-ility.xyz","domain":"whitelist-ility.xyz","tld":"xyz"},"ip":{"addr":"172.67.165.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://whitelist-ility.xyz/","date":"2026-03-02T16:48:58.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whitelist-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 02:17:19 GMT","end":"Fri, 29 May 2026 02:17:18 GMT"},"fingerprint":{"sha1":"82:F8:20:9E:1A:7B:23:A5:F1:5A:92:77:EE:E9:5C:05:C9:B0:08:3D","sha256":"79:60:8C:92:87:8E:51:20:F0:52:D7:AE:08:B7:2B:84:3E:E2:AF:2B:FA:43:6B:3A:33:FB:07:DB:57:CC:05:3E"}}},"request":{"raw":"GET /third3x.png HTTP/1.1\r\nHost: whitelist-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whitelist-ility.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:48:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 230415\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 02:49:00 GMT\r\netag: \"69a2579c-3840f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 5890\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xfKOSWm9daTA5whWEkrWS31mE2v9UBI%2Fnl2SOaeuW4hrr9yhp0glogvcoltYI0uDFQvO9Wi%2F%2Fy9KbnJntIdTFn%2B6KjvorgEKjzPjNDrv7rsK8bw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d61e45f49c3fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":230415,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1005 x 1644, 8-bit/color RGBA, non-interlaced","md5":"f85d8fd76c8615d8ee8132366b1da7b2","sha1":"cfa4634f850a9621cc4bdf5987a062137efe6f05","sha256":"eb46c0db45d75e4fb4619b1d1e79f7b115b307847f6c4991f76b3114f6cb7956","sha512":"d32edf074d20a9b820c9bed54bd8e46d9f2fcc57127473fc9a171b96c3a62b72e341bb7b2a5ab9365673670789633988b66d3ee08d09d10d0b50ee95d7e0d487","ssdeep":"3072:PZvKviGiyj9Ql1F0YR5k68XXdKjw4wxZpRSEbE3M23dsCMoMfumpqbrHlAfff/Nu:hvKviG+l70MG68XX5pdbySCQrporHY4t","tlshash":"d8341375922588ccfb50d63ca127cb055e026b2dfbcb8e4b1a356f5689cf501b1e728d","first_seen":"2026-03-02T13:22:55.704403Z","last_seen":"2026-03-08T12:24:34.45089Z","times_seen":5,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whitelist-ility.xyz/04_Trade.png","fqdn":"whitelist-ility.xyz","domain":"whitelist-ility.xyz","tld":"xyz"},"ip":{"addr":"172.67.165.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whitelist-ility.xyz/","date":"2026-03-02T16:48:58.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whitelist-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 02:17:19 GMT","end":"Fri, 29 May 2026 02:17:18 GMT"},"fingerprint":{"sha1":"82:F8:20:9E:1A:7B:23:A5:F1:5A:92:77:EE:E9:5C:05:C9:B0:08:3D","sha256":"79:60:8C:92:87:8E:51:20:F0:52:D7:AE:08:B7:2B:84:3E:E2:AF:2B:FA:43:6B:3A:33:FB:07:DB:57:CC:05:3E"}}},"request":{"raw":"GET /04_Trade.png HTTP/1.1\r\nHost: whitelist-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whitelist-ility.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:48:58 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 02:49:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\nage: 5890\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gdhna4XnuMkK55yHN%2B2doI2yLqmK4mjdwJXEUQHASRTW2PcmCUjrBa3GhYSvZejFYX9%2BDV92YwPByIy2kgUe7o4TYTrVXbV4PfsnwZD0LZ3lPXs%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9d61e45f59ccfb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62495,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1250)","md5":"08d42699700854d9603fe5c14468d5ed","sha1":"62abfa12ad8bacb42eaeaa0b74f74750834b4376","sha256":"707bbdeca6b30caf31fd0500218664e262f6fa17271add83f24595a75d26d5d0","sha512":"54c9469347ae597fad21561fbc0703ebd9c028ee459813577efecc83b1dd8a3142bfa8774f2a2dc0838ca91150efbfe4ac800f8540600fd077117291cd9fa180","ssdeep":"768:7WyhFK8yhFKoyhFKwyhFKRAiOLbdXRGUVysxnv5fCcU:7jk5klktkRkBIUVywh1U","tlshash":"4f53f8b993f41576504783d5eb62ab667e61d067ca4e4110f2bc07a82fc3cc9dc27a9c","first_seen":"2026-03-02T16:49:33.021172Z","last_seen":"2026-03-02T16:49:33.021172Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"base.publicnode.com/","fqdn":"base.publicnode.com","domain":"publicnode.com","tld":"com"},"ip":{"addr":"172.66.150.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://whitelist-ility.xyz/","date":"2026-03-02T16:48:59.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"publicnode.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 10 Feb 2026 20:40:15 GMT","end":"Mon, 11 May 2026 21:40:09 GMT"},"fingerprint":{"sha1":"02:33:4E:80:56:8A:88:B0:A0:32:C7:FD:BB:EA:AD:56:66:32:7F:9E","sha256":"25:6C:D0:C9:8E:E0:89:64:BF:49:7D:80:0C:31:46:0A:5B:1D:05:0B:79:60:DB:A7:27:2E:C9:40:85:64:DA:1E"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: base.publicnode.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://whitelist-ility.xyz/\r\nOrigin: https://whitelist-ility.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Mon, 02 Mar 2026 16:48:59 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET,HEAD,OPTIONS,POST\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 172800\r\nallow: OPTIONS, POST\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\nx-envoy-upstream-service-time: 0\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: 9d61e462f9c0958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T10:26:15.180389Z","times_seen":17561103,"resource_available":true,"data":null}},"time_used":384,"timings":{"blocked":174,"dns":2,"connect":40,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"whitelist-ility.xyz/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCu173w5aXo.woff2","fqdn":"whitelist-ility.xyz","domain":"whitelist-ility.xyz","tld":"xyz"},"ip":{"addr":"172.67.165.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whitelist-ility.xyz/","date":"2026-03-02T16:48:59.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whitelist-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 02:17:19 GMT","end":"Fri, 29 May 2026 02:17:18 GMT"},"fingerprint":{"sha1":"82:F8:20:9E:1A:7B:23:A5:F1:5A:92:77:EE:E9:5C:05:C9:B0:08:3D","sha256":"79:60:8C:92:87:8E:51:20:F0:52:D7:AE:08:B7:2B:84:3E:E2:AF:2B:FA:43:6B:3A:33:FB:07:DB:57:CC:05:3E"}}},"request":{"raw":"GET /JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCu173w5aXo.woff2 HTTP/1.1\r\nHost: whitelist-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whitelist-ility.xyz/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:48:59 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 18688\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 02:48:59 GMT\r\netag: \"69a2579b-4900\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6VhNSkHhOebwwIqNLHyugooVPp7tLl%2B2q28Et0DzWqvD5kGSOBkQ%2B%2Fj5Soa72zr7MY6gSlRapvEW25MwL2XlMvI7jPfxR%2B5DSd0mJYc4%2FD2ZHdQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d61e4617a8bfb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18688,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 18688, version 1.0","md5":"9e606da1cbeb392aefa88d31f35784c8","sha1":"a4f64ab8a0fa21a0b54511c56695fd5f52b384c0","sha256":"d857325c360f7128b347ca924c1974967aaa886ba47dad22e4042d6c38b26a83","sha512":"ca51a5588d36b308cb5b3851f55ec6cd370a92d3c98d047490442adf9946ce83884f9d1a4b945c4afefda044a41ee42a7b0338659ddef290146041ad7d4b7c8b","ssdeep":"384:1Ok9ouoF0LTHT1V93FgkajZ/Q23aRFqlJFdb7jRTV7g0mc8CF7C:1Muw25V9VgkaKzqN9/RTV7gE7ZC","tlshash":"ea82e1cc81081ae9ee05b5b718ee53772e0844a9373b140a3f7a9ba77f27254c0657ce","first_seen":"2025-09-05T09:37:16.845418Z","last_seen":"2026-07-27T09:32:57.238163Z","times_seen":4555,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whitelist-ility.xyz/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"whitelist-ility.xyz","domain":"whitelist-ility.xyz","tld":"xyz"},"ip":{"addr":"172.67.165.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whitelist-ility.xyz/","date":"2026-03-02T16:48:59.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whitelist-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 02:17:19 GMT","end":"Fri, 29 May 2026 02:17:18 GMT"},"fingerprint":{"sha1":"82:F8:20:9E:1A:7B:23:A5:F1:5A:92:77:EE:E9:5C:05:C9:B0:08:3D","sha256":"79:60:8C:92:87:8E:51:20:F0:52:D7:AE:08:B7:2B:84:3E:E2:AF:2B:FA:43:6B:3A:33:FB:07:DB:57:CC:05:3E"}}},"request":{"raw":"GET /pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: whitelist-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whitelist-ility.xyz/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:48:59 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 7884\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 02:48:59 GMT\r\netag: \"69a2579b-1ecc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UpuX4EfNWJAbDcGdUVfZ7PR4AN0hsTjCbYMzGK2xa7JIOO%2B5vSD0WJrqIToh0JFggugYntCt%2BYX6azc0Lcr8WFLaC34o83Vys8ziyNbDsTFYmf8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d61e4617a90fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7884,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-07-27T10:24:29.17225Z","times_seen":384087,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":195,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whitelist-ility.xyz/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2","fqdn":"whitelist-ility.xyz","domain":"whitelist-ility.xyz","tld":"xyz"},"ip":{"addr":"172.67.165.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://whitelist-ility.xyz/","date":"2026-03-02T16:48:59.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whitelist-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 02:17:19 GMT","end":"Fri, 29 May 2026 02:17:18 GMT"},"fingerprint":{"sha1":"82:F8:20:9E:1A:7B:23:A5:F1:5A:92:77:EE:E9:5C:05:C9:B0:08:3D","sha256":"79:60:8C:92:87:8E:51:20:F0:52:D7:AE:08:B7:2B:84:3E:E2:AF:2B:FA:43:6B:3A:33:FB:07:DB:57:CC:05:3E"}}},"request":{"raw":"GET /JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2 HTTP/1.1\r\nHost: whitelist-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whitelist-ility.xyz/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:48:59 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 18780\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 02:48:59 GMT\r\netag: \"69a2579b-495c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gQd5WiPGLgdQbNNtIBmEEOrimOMiDVUJr3gZxSUgEXFmiEdaUue%2F34ffUgizLZ7OUR0tWafWQ9HyBtmEctzXbsHiHdvJ3lRPWD%2BFPRmdokHOMFg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d61e4617a95fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18780,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 18780, version 1.0","md5":"e7198b2dcb57c0193b0e9765353994ba","sha1":"6e2658ad73dda183d4fa2979809a73a0c29d21c9","sha256":"e66bcd2761ab6924b25ce70dafe10e57a39193c4fea1516730bd9cb5240af6c8","sha512":"01054290f69d0e4232687f67e5d2522f186f87fe833bd1b13016d0e79a1159c49e767a5c6e9c61f9b3fea0c27df2194011bf46d6f6c1ee46d1f4313ac1950f9c","ssdeep":"384:pJOL4DxNfzRV4g4Miv8HlK3z114ow92D4bH7CxPhdWS6UJ836u8K+ylyr:p5P8Mq8Hlqo92D4vOPhdWSL+qu8Kqr","tlshash":"ef82d0ec209846f9fc0a6e97dfc49bd522430cbd87166e3093ab0dc84b875a4d667693","first_seen":"2025-09-05T00:54:05.741935Z","last_seen":"2026-07-27T10:26:52.97716Z","times_seen":40772,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"whitelist-ility.xyz/favicon.png","fqdn":"whitelist-ility.xyz","domain":"whitelist-ility.xyz","tld":"xyz"},"ip":{"addr":"172.67.165.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://whitelist-ility.xyz/","date":"2026-03-02T16:48:59.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"whitelist-ility.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 28 Feb 2026 02:17:19 GMT","end":"Fri, 29 May 2026 02:17:18 GMT"},"fingerprint":{"sha1":"82:F8:20:9E:1A:7B:23:A5:F1:5A:92:77:EE:E9:5C:05:C9:B0:08:3D","sha256":"79:60:8C:92:87:8E:51:20:F0:52:D7:AE:08:B7:2B:84:3E:E2:AF:2B:FA:43:6B:3A:33:FB:07:DB:57:CC:05:3E"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: whitelist-ility.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://whitelist-ility.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 02 Mar 2026 16:48:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 3833\r\ncast-mode: default\r\nlast-modified: Sat, 28 Feb 2026 02:48:59 GMT\r\netag: \"69a2579b-ef9\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 45314\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KLShlwEdMuufTecZe8gbY7mx2SuGIaeI%2Bx%2BegUq%2BZge22AQfSuuhU0mfEXuNCHsJ5GpA0x5pkzQ58WwNHUKLyfjK5UPRh%2BojFiAFWil%2BqYvfjqQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9d61e4662c32fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3833,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGB, non-interlaced","md5":"9957d85020b35bcc2a023d24146a0832","sha1":"f9001145bd807859c40acb0da4b4f2b303c1fe8e","sha256":"4f4c75695624906fb84baa4124d44c4ea1a07f52bf560240d70c9e3dac6120d8","sha512":"7ed28467976ea4ff953024dbc8d9fd53d6e5fd633566de8fa4a7136fc8de1efdb979c7368e7bdaa51b719668531c9dedfc3c4ebd06c7debe9dbeaecaf58e3c98","ssdeep":"","tlshash":"f0814ce90279d9df740ccb8578116f019db7cf62a1e9d39578420ba5f9cea9220bda04","first_seen":"2026-03-02T13:22:55.700915Z","last_seen":"2026-03-08T12:24:34.44966Z","times_seen":5,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"whitelist-ility.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}