{"report_id":"1be3a9cd-cd92-4587-97db-c4a6a71af8f8","version":0,"status":"done","tags":[],"date":"2026-07-01T04:54:59Z","url":{"schema":"http","addr":"plasma.cex1.fun","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"plasma.cex1.fun/#home","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"title":"PLASMA","dom":{"size":62265,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (46007)","md5":"6b1d9aa07f6e3eaebf7590a84a97bec4","sha1":"33bb45957d4d993cd71062e31db7630e794ced70","sha256":"9bb7ed8906a8c202bf3bcc2d3e7ec371ad4a9c13f56f61c3b358a929f9898cbf","sha512":"26f8bbd5c2212cdc61f652bd969c52c01b22dfea05c83751aaca8d9aad4be7a9c3c2065296d414e1519a2b5301731ee0f872fc5b11b322baf0197874fb6a48f2","ssdeep":"768:m0rGV4xksc64Jysq7v7i+YaYzYHFAC9R5qIJqkkHHQBlt9Z/4mlhml5wF0G8Rp2:mebx/c64Jysq7v2ABN7lAla","tlshash":"a053096c3108163d693bcb99f5a0fb2cd065e345df33452df2ac01a5a7c2ed56cb26a8","dom_hash":"domhash45375cca1a456ff22a0090555353c059","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"plasma.cex1.fun","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-05T04:54:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"plasma.cex1.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"plasma.cex1.fun","ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-12-01","domain_rank":0,"first_seen":"2026-07-01T04:22:45.658007Z","last_seen":"2026-07-01T04:22:45.658007Z","alert_count":37,"request_count":37,"received_data":6236919,"sent_data":18553,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.plasma1.online","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-04-15","domain_rank":0,"first_seen":"2026-07-01T04:55:04.635036Z","last_seen":"2026-07-01T04:55:04.635036Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":1142,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pulse.walletconnect.org","ip":{"addr":"104.20.34.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-03-26","domain_rank":247907,"first_seen":"2023-10-09T08:23:11Z","last_seen":"2026-06-27T18:40:22.638981Z","alert_count":0,"request_count":1,"received_data":249,"sent_data":601,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-06-29T07:38:11.336391Z","alert_count":0,"request_count":1,"received_data":2280809,"sent_data":487,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}]},{"fqdn":"api.web3modal.org","ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-11-18","domain_rank":433029,"first_seen":"2023-09-19T09:52:23Z","last_seen":"2026-06-27T17:15:02.349049Z","alert_count":0,"request_count":1,"received_data":944,"sent_data":548,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"app.spline.design","ip":{"addr":"66.33.60.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2019-04-20","domain_rank":837888,"first_seen":"2021-10-21T11:56:37Z","last_seen":"2026-07-01T04:22:46.263695Z","alert_count":0,"request_count":1,"received_data":6082,"sent_data":567,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"plasma.cex1.fun/assets/walletConnectWallet-YHWKVTDY-BcMJSWZw.js","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"07c75d659ccf42b0f285650d330effed","sha1":"19d69164e8b8b965c069816691c1fc636af06f75","sha256":"6fa7eb15946d4f1b38ee89dca64f3b772eac28e8903c81001dc35bd32edb5649","sha512":"f057b9ccbabd042aabcc602f3b801bb22a17905c07263e13bb305676a6143a7608ff43a4e1e16d79041cd5cd3c1f2a7a1fe6eb3a5ff1f8f2f46d46d2c75ecbae","ssdeep":"","tlshash":"1a416bef24b03cd9d43bc5639429301d61722a3bff2d5a559aab62647e65c5020d4633","size":1877,"data":"","first_seen":"2025-06-30T17:29:04.865387Z","last_seen":"2026-07-12T22:22:18.741366Z","times_seen":281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plasma.cex1.fun/assets/metaMaskWallet-SITXT2FV-Cvftx4Bc.js","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"8445b8e282509da5cafea9043c6d95e3","sha1":"8b2ebbfa045bbcb0f56f1286b5ddcc823368eba4","sha256":"92ff713c04a290fb50a5f2087d2fc25137db5896938ef0ab268ccfb6257b565a","sha512":"355f6528c25875c8660edc3e0b1858c8100cd769b63099dcda48b87a804737e1e623a05c41a49ce572e6172c1700e97fe025cf7480230bdeb82b03fbc41c5677","ssdeep":"96:cnPntyXlz+UaqFSRbSCGC7KwT64jP/MVINaO4G:cM0M8RbPGCGq64Ic9","tlshash":"c1020b5f16b80c99e9378c2fc285764d70b4bfc32a28e7f58aa680b58e5110577f39b0","size":8512,"data":"","first_seen":"2025-06-30T18:28:52.657268Z","last_seen":"2026-07-11T20:34:45.569384Z","times_seen":274,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plasma.cex1.fun/assets/assets-Q6ZU7ZJ5-P8HioiAD.js","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"0be1e539d9c370f71c5ed19f66fb0870","sha1":"b42033f215024e2008bf0d5e032eb8b0df4cd953","sha256":"312c407a303fa7679b7eeccd85173ad7c0967df4f417c4b9e3ce05519ff3e591","sha512":"07bb4c57bd73df5ac1b0031e9d9c94be7ed97758dc07e0cda507b4fafafae3928b59ccdf403a19b3516bcd4721be0242c004c6f0408a52a707380c0b36c36dec","ssdeep":"384:ppByhqW2xs3dwktSu6foTLEQD4zrlqPqo:ppBSqQ3p8BrlqPqo","tlshash":"f8b278ada2320d497c3bed6bfa89790db0203fcb8919a4b98f61b154cbd354df2d0651","size":23619,"data":"","first_seen":"2025-06-30T17:29:04.8722Z","last_seen":"2026-07-12T22:22:18.743443Z","times_seen":292,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plasma.cex1.fun/assets/login-UP3DZBGS-Db_wM5oQ.js","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"28b65459ef616c41fcbc14d2cd2d5b6b","sha1":"86909f4bf8887dfaab1476058affbb145ba960dd","sha256":"0495b387d34305302644928b6531de715906a7792bebd23443255a5511c0b713","sha512":"fdecb6cdd43226b57fa759a6a88fc4c2506b38d4e7ed7ca28edb702c0a20b8e0890fa9f63e9b893f6a1754389ca8cd213c1ade58be385ff3525960176a01b8b6","ssdeep":"192:CQSYk2qSl2qlEW1QSDdvWwMAuLT+JjisSE44ovGSqyPedtqPq2qrN4qrNdOZ:e4pjZWQufLsSEBovGSjedtqPq2qSqC","tlshash":"1c32dbbca5711b5ebc73d417cb55b61990313fefad6488a8dfaab208cb9691cf5e0010","size":11995,"data":"","first_seen":"2025-06-30T17:29:04.849297Z","last_seen":"2026-07-12T22:22:18.765059Z","times_seen":294,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plasma.cex1.fun/#home","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"1a9014cb80229bb74a99ff7ac769c16b","sha1":"dab31daa4a3e2241fd395539b019d853c5c8ebce","sha256":"918257ad14aa43e1ddf25bcdcb5cd56f3f5a3c7e602c531a509effbbeea4988e","sha512":"24711cbdcf6d5aea118f044b641934cb3232b256a4e22329d25bef68468323f73cd3393333d48b98a2e887e2c6a7545c383957874101056a474388d22a5a4adf","ssdeep":"","tlshash":"35d0a7d9359573108d076100d27f8857e3365c84d52fc920d0b1175058b09145357eaf","size":238,"data":"","first_seen":"2023-08-04T05:08:13Z","last_seen":"2026-07-13T05:50:30.88691Z","times_seen":600,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plasma.cex1.fun/assets/index-vDhp1o3g.js","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d7cc3f602cc7c13397bee16fa65aeb24","sha1":"7ccb185e4e5be1db95e6e5f956e1b1627a6feacc","sha256":"1e18c726a7a444327e556ef508d7cbb5780d446613e9fc2fc5600167b19a980e","sha512":"1b2cfb8c12be79778170d23df08a7c7add461d82e2f5a5ddb7f02667a95004b4fc44b90c59fde391df8aa3985dffb940b85a6a20846222dc0c92a489aa474922","ssdeep":"12288:W5+V4w1OqyQ7s+oWH2B8b6QYP9f5UMqW+73lcMWD/NI6kK9FUftl7cR2aSXRNwd0:k+VBroS2ebTYhvTuaq20Z02bHll","tlshash":"ea659e4cb295756c4ba342d528af1004b1344e59f50d88a0b1bcd87e2fb99c9a5fbfbc","size":1515227,"data":"","first_seen":"2026-07-01T04:22:51.567783Z","last_seen":"2026-07-01T04:55:07.781133Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plasma.cex1.fun/assets/events-DQ172AOg.js","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6a80663ffbb4a6e247d024874a2456e","sha1":"8f64e93e4f832983754e56e37d18f16bff133b2e","sha256":"da208eb12e58611c9ebd0b6c352fc11c64f9f8c7f3f1b44a0f7f2b2c4ea83bac","sha512":"48f7a03a4fe8a76ff77d46b869eea9571d1f31e8fa0385d4d35b8c82a04f2ce0edfbc00618d3ea77f86cb3cbe6125247a3dab958bb790690bf45f39a8478768e","ssdeep":"96:5ER9ttlJTZFWHs9BEdCOoRLUlRHZGAq6vvVu1o3IMmmPaJvsVk:GTrlJTfWMDchq6tu0NPQ","tlshash":"44c153ccb38578b013e7d3abb07f520bf134a594640c5118b246ecf9696bc9e4126fb8","size":6126,"data":"","first_seen":"2024-12-25T05:30:42.59477Z","last_seen":"2026-07-12T22:22:18.722752Z","times_seen":367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plasma.cex1.fun/#home","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"b2c122d22350830672c68a85ccd114f4","sha1":"14f6d62942b1fe65c5a2bf386f8d2e51d040ef3f","sha256":"301eec26efe8ce36bb4d3d97e8f852e1c1af4fcf9b4a44dfc4bc980b8175b4d8","sha512":"6f204ed0807d11cce5951bcfc36d4a08303cda72d95fd4cec757498f135578fecc564fa193addc1d5da7202c5dd52ece98aaba10fefd28ba504a5b414ee32445","ssdeep":"","tlshash":"2da011c830caa300a2033220803b888aa238c8b0e00cce808002888228a80a08022b8e","size":72,"data":"","first_seen":"2023-05-23T11:59:27Z","last_seen":"2026-07-13T05:50:30.876129Z","times_seen":625,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plasma.cex1.fun/#home","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"2965a36c5177ea3b7bcb2cc8a3be62d9","sha1":"63c30db39951e3624ebfc157ce841dc3a91697f9","sha256":"3239c830a16e9b755dd831ee4a7da04bddb9eae80a821a4798d6fa0e6fd532e8","sha512":"eb623a4c073f0c5b0aedf2ccba79aa0fbe31456963312ee14c66c6a4ee07837dca2d0ec2b3b3f1a06e1cffc22617c9aa1d7eb0f4d9be2378a137b80737c72b91","ssdeep":"","tlshash":"85a001a871caf380e2133266407ba98aa66989a1e44c8d808150949228794a8862aa9d","size":70,"data":"","first_seen":"2023-05-23T11:59:27Z","last_seen":"2026-07-13T05:50:30.900339Z","times_seen":614,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plasma.cex1.fun/#home","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"c93f9d094355f9f9ac772078ad254930","sha1":"f55035937a5cf3e176c83e2ed873e7305a9f619e","sha256":"ed68cdd89c5af81e5b05580c82cfc056995bccb0eea4ec92541dd05485dd6f45","sha512":"27f423ceccd3f7c4ea88ef3bf189013f911a62bd4db2c40dea0aa8fcdce5318f73d91a30d183b9bf29f908307565c9b89391e5606dd1b1918b4b9df1d4c3229e","ssdeep":"","tlshash":"d59002dc71c3b100b2173265407f998aa139d8a0e44c4d408114d4e13c79024852799c","size":55,"data":"","first_seen":"2023-05-23T11:59:27Z","last_seen":"2026-07-13T05:50:30.956278Z","times_seen":626,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plasma.cex1.fun/assets/index.es-4STUl15x.js","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"772277a5fdd7aea08e5570174b11fcc6","sha1":"25e85ca292907ddb16f46307bcb1b277bb499063","sha256":"cf4f3181e2fe08d1d768efef9c49fb031670f4f5724b6da80d94924083681c20","sha512":"cb10ba7bd1046b7202d49611af740d2d83c5adde6619b363a386630b424e30e555fa068dab4e4e53e5817c761dfeff3f8c9481b14a9bf782660e4da998690b96","ssdeep":"6144:mdBvAxFNBgk/ZPDAcdcpuze0gViry4gTrXP8bwAh4gwsJgNs66eIq:mzvajZLvy4gTbiwAh4gwsY6eIq","tlshash":"33844d5073b6a07603e665d9e8762201f2395864704cd06cfbacadefae844858b3ff75","size":407333,"data":"","first_seen":"2026-07-01T04:22:51.563183Z","last_seen":"2026-07-01T04:55:07.779257Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plasma.cex1.fun/assets/bitgetWallet-F7U5Y4MR-C5MU6z4Q.js","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"0b2d63466dc22d6ba49175a5d4c80251","sha1":"acec3c5bf9ba18a0198d0dedf77d012417433106","sha256":"be5ce5f71bc3be4dc4431bfddc59c3367420b1c631ca4503efc199d50307e0a9","sha512":"ca8107e8898f388106d3f448aa75f2b232ecb0a2882825d4a03a435e54c4300417ec93e04389f12498e98adc010406671ca7cbb8b26d698f72981a257d0f3eb9","ssdeep":"","tlshash":"93215bcd10722ac549294013cb99264ed4327f6beef94da6fcb673483d1991054e8eb4","size":1142,"data":"","first_seen":"2025-08-07T03:33:22.875541Z","last_seen":"2026-07-11T20:34:45.574127Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plasma.cex1.fun/assets/injectedWallet-AWJSZPMG-Df9x-YJA.js","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"a971717af526c8f946a4d93b33192d20","sha1":"fded70a2d718a84a030c502775b24050fdae4bc0","sha256":"032e7a7a2003a7bb638b13940b03e3a4485dda5828ce29fe702dd9e6dbd2f6be","sha512":"58dbe7cb3bc33f2f9a2c866bba801f8d4c0e46a75c830ce389721358a28eef2d07308aeafe4a274ea918ee80b4e95005b3ca6b43fd782fc7504b9ffc1c5e9214","ssdeep":"","tlshash":"9e119e9db5373d092c3fa017da49bb1f8021bf9fee0895715eac62041f9a62cf4e4625","size":1053,"data":"","first_seen":"2025-06-30T18:28:52.673862Z","last_seen":"2026-07-12T22:22:18.72754Z","times_seen":149,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plasma.cex1.fun/assets/core-DfWaspEm.js","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b073977a89c8a16924a56ea2f767653c","sha1":"b7b11a2697dc9074c4e26e2a8e5d92e86b7948b0","sha256":"88d3ce02e6d5efb96faa34e043f305f607071befcac2ff1288469a11b3e9b61e","sha512":"757576a07102fc7460916fc2c59b349ed64a7adfc22c0f074f905f99777ef9f9bf5519ea8447e4fe69cfb7a43a1e2921fa101c330be9ebeb0a61e2d03b7ccfa9","ssdeep":"12288:7uA4t4u4GmfjwUyIg5+ho0jXj2pH6HNg4iIFhM:7H4t4u4fLtyb5+fXj2paHN6km","tlshash":"99a44b40b2a6a43603a751edb8b52201f2341858301ad0adfefc9debdf955864a3ff75","size":472641,"data":"","first_seen":"2026-07-01T04:22:51.552292Z","last_seen":"2026-07-01T04:55:07.760619Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plasma.cex1.fun/#home","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"7644b46ad6f8a3f830263eb69274329a","sha1":"8ffcaf6bad5a06f1fba80d5964de0edad036a3a2","sha256":"7fb05bbff217997b5ed4a03e4f040093bf3b1308b9151043f2e206946f56304f","sha512":"f7226b7fd5bd76c6ec97bcf60733b984d3d611a39d29fb6cbe1f1d1049489414e9f604e566c12bf6b50c8214157cbe829bbda29ce9ced96401fb60e835393292","ssdeep":"","tlshash":"c1a012d830c3631051033110003f498dd2258aa1d40ccc80401080413824450411298d","size":77,"data":"","first_seen":"2023-05-23T11:59:27Z","last_seen":"2026-07-13T05:50:30.845268Z","times_seen":549,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plasma.cex1.fun/assets/okxWallet-QOP2OIPE-KJdrgOlU.js","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"745fafc5ee4f190912aad251c476676b","sha1":"2a7fd7c59e1ad15e73419dc1b163ef791957880c","sha256":"c147b0f7266346a92be097df1d47321ece872d21a1f4f0f52449055bc758e180","sha512":"f37135bbe6dfae486bf21ad0d8106002c9d372a5acbec19eea3f9b0c6b6cd76029e787638108b8ab19b47deb8eeed8bb99842ee175abb5ffecddcaa18927a919","ssdeep":"","tlshash":"ac21b64f60750adefc2d98a7e37931a682312efa7934d1350988790427dd9ecf024e1c","size":1116,"data":"","first_seen":"2025-06-30T17:29:04.860413Z","last_seen":"2026-07-11T20:34:45.570338Z","times_seen":138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@splinetool/viewer@1.12.32/build/spline-viewer.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6c249af9f9d4bbc7dc353f0d5eab9e7","sha1":"3dec4b6a489c8e3beb0b71962d95c330244b6d41","sha256":"5888f66650185091ee838c8d7a3e6d8580613122d4e9807f85fb57fe37d7d283","sha512":"cf0808818c4cb6730999fb9e0f05e8b52d5a357682b6696c4bf4e3207170b98b52bffa5f7fcd701ce58cc13b749f6b441c68494511b250fa89cce43efd88ed67","ssdeep":"49152:DoxrhOM3KIOwPHhW8j9HREULHKwSnqh7pH/FkaBmEsrWTGJqTe/Nqy2FbwOmsssn:qj9Hth7pH9kaBcu","tlshash":"50b57dd533657027879b909950ba0542b33a74d61809482cba2cdceb7ba8c4972ffff5","size":2279932,"data":"","first_seen":"2026-02-13T01:50:03.06911Z","last_seen":"2026-07-01T04:55:07.785269Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plasma.cex1.fun/assets/tokenPocketWallet-U7KE4MQK-Sz_KyiLe.js","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"f3305b8181443ea9732d61d2727a6208","sha1":"ebe84c224cb10e01464a62e076444b9c0f6cc1a2","sha256":"08ea6201aa54041e3bca3f8adb23772672890881f1c06dce7f1e295107be3c8d","sha512":"facc5f7d0d426808e0d3e0addc5cbd63c99023915b40d0304f6bf4d3f4006c5b0e79f30d832c54f27b495335b12f87797e49bf97d62da3f59c8d1e36b1c59aa1","ssdeep":"96:wJ3J+GBxLxlxLOoUt2W4314KFJCBISY8KRgegNegHhnghTN14XDrry:wJ35JxLat2W45FJC6SA8h25mXG","tlshash":"ba910ccd22360c45a83bc557e813320d1635bedfbe34797aceea13a5af20659b1db020","size":4369,"data":"","first_seen":"2025-06-30T17:29:04.864038Z","last_seen":"2026-07-01T04:55:07.773119Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"🔔 开始获取系统通知...","filename":"https://plasma.cex1.fun/assets/index-vDhp1o3g.js","line_number":1731,"column_number":73647},{"level":"error","text":"❌ 获取全局配置失败:NetworkError when attempting to fetch resource.","filename":"https://plasma.cex1.fun/assets/index-vDhp1o3g.js","line_number":1731,"column_number":73565},{"level":"error","text":"❌ 获取系统通知失败:NetworkError when attempting to fetch resource.","filename":"https://plasma.cex1.fun/assets/index-vDhp1o3g.js","line_number":1731,"column_number":74072},{"level":"warn","text":"updating from 122to 121","filename":"https://unpkg.com/@splinetool/viewer@1.12.32/build/spline-viewer.js","line_number":3175,"column_number":346874},{"level":"warn","text":"Your .splinecode file is more recent than the library. Please upgrade @splinetool/runtime to the latest version.","filename":"https://unpkg.com/@splinetool/viewer@1.12.32/build/spline-viewer.js","line_number":8210,"column_number":28338},{"level":"log","text":"hereo","filename":"https://unpkg.com/@splinetool/viewer@1.12.32/build/spline-viewer.js","line_number":3175,"column_number":453212}]},"http":[{"url":{"schema":"https","addr":"plasma.cex1.fun/assets/logo-dark-CeAGPDFR.svg","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plasma.cex1.fun/","date":"2026-07-01T04:54:34.900Z","timestamp":1782881674900,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plasma.cex1.fun","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 02:48:06 GMT","end":"Wed, 23 Sep 2026 02:48:05 GMT"},"fingerprint":{"sha1":"97:46:C4:31:6D:48:2C:B4:C0:F7:FD:F3:E3:BC:88:E1:D0:7A:75:1B","sha256":"A3:37:F6:EB:31:23:4D:C9:BE:71:6C:EA:4E:C9:32:84:A7:46:0E:BD:83:1D:16:F5:12:BB:28:F1:EB:EE:37:04"}}},"request":{"raw":"GET /assets/logo-dark-CeAGPDFR.svg HTTP/1.1\r\nHost: plasma.cex1.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plasma.cex1.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1941\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"logo-dark-CeAGPDFR.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 01 Jul 2026 04:54:34 GMT\r\netag: W/\"9115ed01820d87ffe8c3eb664a7a3060\"\r\nlast-modified: Wed, 01 Jul 2026 04:22:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::4b5tx-1782881674907-be1f0e74b8f2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11837,"size_decoded":5694,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9115ed01820d87ffe8c3eb664a7a3060","sha1":"eb2786b8221a03c1b911c92fd8e38a8d87f52c63","sha256":"2376ee06e706a6b5d364fa16c669b43f7a9d0147af924cc7b13c71d350f089eb","sha512":"8ea4b09a4910fa2b13abb3ebd2305baffcb1ea4467b9ab04ca02b7622269c65a1dc826a96bb9d906b507e8163ec80976d799b605cbc0f513799e65b341b5dd68","ssdeep":"192:uCsNmx6HWOIekHVbzay5fP1fRKFNvenn0H/6UsixBlDnwMqdBV8H7:kN6/1b3uyn0fLvzlDwpV8b","tlshash":"a332a7f6f7d8a2e0f406ebf0e9318435751b38fa7f96cb8882919e95b55209ccd09c85","first_seen":"2026-07-01T04:22:51.555263Z","last_seen":"2026-07-01T04:55:07.734424Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"plasma.cex1.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.plasma1.online/Api/News/news_list?page=1","fqdn":"api.plasma1.online","domain":"plasma1.online","tld":"online"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://plasma.cex1.fun/","date":"2026-07-01T04:54:34.905Z","timestamp":1782881674905,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"OPTIONS /Api/News/news_list?page=1 HTTP/1.1\r\nHost: api.plasma1.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://plasma.cex1.fun/\r\nOrigin: https://plasma.cex1.fun\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T07:17:51.133293Z","times_seen":17207279,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plasma.cex1.fun/assets/02-BjuyP8ZQ.webp","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plasma.cex1.fun/","date":"2026-07-01T04:54:34.928Z","timestamp":1782881674928,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plasma.cex1.fun","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 02:48:06 GMT","end":"Wed, 23 Sep 2026 02:48:05 GMT"},"fingerprint":{"sha1":"97:46:C4:31:6D:48:2C:B4:C0:F7:FD:F3:E3:BC:88:E1:D0:7A:75:1B","sha256":"A3:37:F6:EB:31:23:4D:C9:BE:71:6C:EA:4E:C9:32:84:A7:46:0E:BD:83:1D:16:F5:12:BB:28:F1:EB:EE:37:04"}}},"request":{"raw":"GET /assets/02-BjuyP8ZQ.webp HTTP/1.1\r\nHost: plasma.cex1.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plasma.cex1.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1941\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"02-BjuyP8ZQ.webp\"\r\ncontent-type: image/webp\r\ndate: Wed, 01 Jul 2026 04:54:34 GMT\r\netag: \"bafc261ef539b182553875d86917e2df\"\r\nlast-modified: Wed, 01 Jul 2026 04:22:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::48kdb-1782881674934-fd186576f284\r\ncontent-length: 6490\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":6490,"size_decoded":7007,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 850x850, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"bafc261ef539b182553875d86917e2df","sha1":"562ce330892f523c752a9a12e2f3d0d4216678e9","sha256":"38b5cc10092bb6f8ca08317ef8df2138406cf9e30142e597cfa32cc8b9ac2c1a","sha512":"0ae537480f92ab225d99a8971e073b60fe6f69d65009f265e63da66f8d17ec958de7f350afc61653d2aa77c6f439f77a3f6efb4f62f755c4f1d04682a4cee401","ssdeep":"192:Ff91ulc4gO56vxtgkHd6jcKo6GmJRwgbSth:FFAlZyHsbFYCSth","tlshash":"a9d15b9fd8a550bbed4ffdba64804c07109026a935e2f7466a034fe46d23b4a306d0ad","first_seen":"2026-07-01T04:22:51.56234Z","last_seen":"2026-07-01T04:55:07.738989Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"plasma.cex1.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plasma.cex1.fun/assets/partners_6-CqJ1pCvR.svg","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plasma.cex1.fun/","date":"2026-07-01T04:54:34.941Z","timestamp":1782881674941,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plasma.cex1.fun","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 02:48:06 GMT","end":"Wed, 23 Sep 2026 02:48:05 GMT"},"fingerprint":{"sha1":"97:46:C4:31:6D:48:2C:B4:C0:F7:FD:F3:E3:BC:88:E1:D0:7A:75:1B","sha256":"A3:37:F6:EB:31:23:4D:C9:BE:71:6C:EA:4E:C9:32:84:A7:46:0E:BD:83:1D:16:F5:12:BB:28:F1:EB:EE:37:04"}}},"request":{"raw":"GET /assets/partners_6-CqJ1pCvR.svg HTTP/1.1\r\nHost: plasma.cex1.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plasma.cex1.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1941\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"partners_6-CqJ1pCvR.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 01 Jul 2026 04:54:34 GMT\r\netag: W/\"5533f2f8da819d8d116c391032811a13\"\r\nlast-modified: Wed, 01 Jul 2026 04:22:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::48kdb-1782881674947-4437694a8990\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":10044,"size_decoded":3583,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5533f2f8da819d8d116c391032811a13","sha1":"5f1940b1ae7937899a3d76a85b7705c6f8b88a6e","sha256":"bffb675e784ed90138b147ce9b11c5269746be3647cbf486004d7e8da00686b9","sha512":"cf5167d04b93abc87317374abe20684d05fa73014da75b856a4c95e08df9f3e1053e2f9ea2f91dd9654d6dd5545496ea9ebfe98a73ccc9148262d97f8823f0ea","ssdeep":"96:Lqx0a9BV9KqBdxYoN1cC7vvcsA+R7hLZFlyJrHmsutzpcwKETIDhN7Ya2NF1RMs/:LqBJbRf7/zRt7vBI19cTRJlWyUWJn+u9","tlshash":"f622a791fb44b0f1af00d7f3e839e4b47e0674fa3601a6ecc9f65b94a3856596d28c81","first_seen":"2026-07-01T04:22:51.54879Z","last_seen":"2026-07-01T04:55:07.741512Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"plasma.cex1.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plasma.cex1.fun/assets/partners_7-D4oDjAUe.svg","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plasma.cex1.fun/","date":"2026-07-01T04:54:34.942Z","timestamp":1782881674942,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plasma.cex1.fun","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 02:48:06 GMT","end":"Wed, 23 Sep 2026 02:48:05 GMT"},"fingerprint":{"sha1":"97:46:C4:31:6D:48:2C:B4:C0:F7:FD:F3:E3:BC:88:E1:D0:7A:75:1B","sha256":"A3:37:F6:EB:31:23:4D:C9:BE:71:6C:EA:4E:C9:32:84:A7:46:0E:BD:83:1D:16:F5:12:BB:28:F1:EB:EE:37:04"}}},"request":{"raw":"GET /assets/partners_7-D4oDjAUe.svg HTTP/1.1\r\nHost: plasma.cex1.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plasma.cex1.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1941\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"partners_7-D4oDjAUe.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 01 Jul 2026 04:54:34 GMT\r\netag: W/\"f85a2e829a61aed398db37d0b4b3a436\"\r\nlast-modified: Wed, 01 Jul 2026 04:22:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::lc2gg-1782881674949-89afdc0fb35f\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4237,"size_decoded":2270,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f85a2e829a61aed398db37d0b4b3a436","sha1":"c2ebb86e4f9dac8361d61222c98b4eb36166d335","sha256":"91fd1108097bb4489bac42d4c0713b2324e299c26eb5fc3c3b3d3d707828e594","sha512":"af244340e07e2dd2fa22958a151fa9c88daedaa144a944b922f9dc8f0437338f2422c5d315267525bc66bd0966642fb67f04d16f92ef7f886e2b49175b0839ac","ssdeep":"96:kj/QI6+vdvYoQT9wMz4u8FHYBk9BxM4BY4:kl6ouoQbz4JhvLf","tlshash":"9e9155d553ec9290bc82b3b5e32aa4f6d5ae6cfeb20180d45380cc1aed8615d8e18dc7","first_seen":"2025-10-29T14:48:49.798376Z","last_seen":"2026-07-01T04:55:07.745163Z","times_seen":6,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"plasma.cex1.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plasma.cex1.fun/assets/partners_9-DXat6OM0.svg","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plasma.cex1.fun/","date":"2026-07-01T04:54:34.944Z","timestamp":1782881674944,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plasma.cex1.fun","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 02:48:06 GMT","end":"Wed, 23 Sep 2026 02:48:05 GMT"},"fingerprint":{"sha1":"97:46:C4:31:6D:48:2C:B4:C0:F7:FD:F3:E3:BC:88:E1:D0:7A:75:1B","sha256":"A3:37:F6:EB:31:23:4D:C9:BE:71:6C:EA:4E:C9:32:84:A7:46:0E:BD:83:1D:16:F5:12:BB:28:F1:EB:EE:37:04"}}},"request":{"raw":"GET /assets/partners_9-DXat6OM0.svg HTTP/1.1\r\nHost: plasma.cex1.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plasma.cex1.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1941\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"partners_9-DXat6OM0.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 01 Jul 2026 04:54:34 GMT\r\netag: W/\"ca5fc71e8e291d99b923bf6117f231f7\"\r\nlast-modified: Wed, 01 Jul 2026 04:22:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::cc6xk-1782881674950-2b37fd24f0a4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6631,"size_decoded":3198,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ca5fc71e8e291d99b923bf6117f231f7","sha1":"412a22c6624a1ded50325ee5e9866eaa88e74c9c","sha256":"364424f31497f90a820f97494845d92b1b5f15ec731eddccae635605cb6ee8f7","sha512":"49b06eee331b1fc4de208d8344d7728f881e5b70a7f4df7999b15ebc642c82d3d0dca4774dd16c8e79b2c080f1e40b49c387a8213b27ac6a13ce8dba016b67cf","ssdeep":"96:LgJjealBAjGwD2Pic3qgra0QN6yxSOqN5UQafkfySDH272elFgFDFLiOl4YD1Udp:LgheaPI6jatNxW5YkBW72wSZLv4YDO5","tlshash":"51d1b9d9e3d425f8dcce83ad85399de57a6b35f93361e2ac407cc29052418ea0f59c8d","first_seen":"2026-07-01T04:22:51.52582Z","last_seen":"2026-07-01T04:55:07.746782Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"plasma.cex1.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plasma.cex1.fun/","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-01T04:54:33.912Z","timestamp":1782881673912,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plasma.cex1.fun","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 02:48:06 GMT","end":"Wed, 23 Sep 2026 02:48:05 GMT"},"fingerprint":{"sha1":"97:46:C4:31:6D:48:2C:B4:C0:F7:FD:F3:E3:BC:88:E1:D0:7A:75:1B","sha256":"A3:37:F6:EB:31:23:4D:C9:BE:71:6C:EA:4E:C9:32:84:A7:46:0E:BD:83:1D:16:F5:12:BB:28:F1:EB:EE:37:04"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: plasma.cex1.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 3524\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 01 Jul 2026 04:54:34 GMT\r\netag: \"4a0e700e541d0d9356c5a730a750a576\"\r\nlast-modified: Wed, 01 Jul 2026 03:55:49 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::kk5rg-1782881674163-2642f839bc23\r\ncontent-length: 493\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":493,"size_decoded":994,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"4a0e700e541d0d9356c5a730a750a576","sha1":"1fd0857a9b48cdbb36a2f4f93285c87d23dadfe2","sha256":"db2b902d08e5cd847bb561a386f6a71de95c7da47d864e5f5ad5f9b78df19cbf","sha512":"efa90695bd269dc2bbd7a27244a7acf3ae7ded272405da4ed898beccce8e0f9e476dcbae8a364a6d9f95c74be0f012f94420ca578f2c31258b40d73fd43c40e8","ssdeep":"","tlshash":"e1f09e4284e0890d532046145dd1f408494ae78b8b55ad4a26eba07d8f84bc1ce9f4b8","first_seen":"2026-07-01T04:22:51.549678Z","last_seen":"2026-07-01T04:55:07.748544Z","times_seen":2,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":212,"connect":1,"send":0,"wait":11,"receive":14,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"plasma.cex1.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plasma.cex1.fun/assets/events-DQ172AOg.js","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plasma.cex1.fun/","date":"2026-07-01T04:54:34.648Z","timestamp":1782881674648,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plasma.cex1.fun","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 02:48:06 GMT","end":"Wed, 23 Sep 2026 02:48:05 GMT"},"fingerprint":{"sha1":"97:46:C4:31:6D:48:2C:B4:C0:F7:FD:F3:E3:BC:88:E1:D0:7A:75:1B","sha256":"A3:37:F6:EB:31:23:4D:C9:BE:71:6C:EA:4E:C9:32:84:A7:46:0E:BD:83:1D:16:F5:12:BB:28:F1:EB:EE:37:04"}}},"request":{"raw":"GET /assets/events-DQ172AOg.js HTTP/1.1\r\nHost: plasma.cex1.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plasma.cex1.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1941\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"events-DQ172AOg.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 01 Jul 2026 04:54:34 GMT\r\netag: W/\"f6a80663ffbb4a6e247d024874a2456e\"\r\nlast-modified: Wed, 01 Jul 2026 04:22:12 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qwpkw-1782881674654-05791e50cd02\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":6126,"size_decoded":2717,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6125)","md5":"f6a80663ffbb4a6e247d024874a2456e","sha1":"8f64e93e4f832983754e56e37d18f16bff133b2e","sha256":"da208eb12e58611c9ebd0b6c352fc11c64f9f8c7f3f1b44a0f7f2b2c4ea83bac","sha512":"48f7a03a4fe8a76ff77d46b869eea9571d1f31e8fa0385d4d35b8c82a04f2ce0edfbc00618d3ea77f86cb3cbe6125247a3dab958bb790690bf45f39a8478768e","ssdeep":"96:5ER9ttlJTZFWHs9BEdCOoRLUlRHZGAq6vvVu1o3IMmmPaJvsVk:GTrlJTfWMDchq6tu0NPQ","tlshash":"44c153ccb38578b013e7d3abb07f520bf134a594640c5118b246ecf9696bc9e4126fb8","first_seen":"2024-12-25T05:30:42.59477Z","last_seen":"2026-07-12T22:22:18.722752Z","times_seen":367,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"plasma.cex1.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plasma.cex1.fun/assets/partners_1-C1bmrwE8.svg","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plasma.cex1.fun/","date":"2026-07-01T04:54:34.937Z","timestamp":1782881674937,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plasma.cex1.fun","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 02:48:06 GMT","end":"Wed, 23 Sep 2026 02:48:05 GMT"},"fingerprint":{"sha1":"97:46:C4:31:6D:48:2C:B4:C0:F7:FD:F3:E3:BC:88:E1:D0:7A:75:1B","sha256":"A3:37:F6:EB:31:23:4D:C9:BE:71:6C:EA:4E:C9:32:84:A7:46:0E:BD:83:1D:16:F5:12:BB:28:F1:EB:EE:37:04"}}},"request":{"raw":"GET /assets/partners_1-C1bmrwE8.svg HTTP/1.1\r\nHost: plasma.cex1.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plasma.cex1.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1941\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"partners_1-C1bmrwE8.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 01 Jul 2026 04:54:34 GMT\r\netag: W/\"2b556843ad1d64abc09c7cc1f898b34a\"\r\nlast-modified: Wed, 01 Jul 2026 04:22:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::cc6xk-1782881674943-7feae6bae754\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":8202,"size_decoded":3417,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2b556843ad1d64abc09c7cc1f898b34a","sha1":"1f692f472c90fd59100b948bc009af6e63c572e1","sha256":"e8d0c2584e3c0d4327dc2382b9e07ba95f66b1bd29020427c6a9c2a159ae27e6","sha512":"a4893f9c5da2f55903fe13ce23edd72e0ec9b24f000bf7480e0a334d5eb0b5c49d4a594a4662ef7d940fe4e0c400dc77d99b9ff9262c4ef461e5ceded1852df1","ssdeep":"192:LYgOg5bu2FkgSeAljQAVQwgjTwJiziV+T016i:LYghbu2FkkAljQAVQwgjTwJiziwTfi","tlshash":"0d02ada45256ebfc75c707bd04203e7437893c6b3d7162dec0ab9ab165130b98d0b8ab","first_seen":"2026-07-01T04:22:51.556566Z","last_seen":"2026-07-01T04:55:07.750713Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"plasma.cex1.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plasma.cex1.fun/assets/partners_10-CKB5LDYI.svg","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plasma.cex1.fun/","date":"2026-07-01T04:54:34.945Z","timestamp":1782881674945,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plasma.cex1.fun","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 02:48:06 GMT","end":"Wed, 23 Sep 2026 02:48:05 GMT"},"fingerprint":{"sha1":"97:46:C4:31:6D:48:2C:B4:C0:F7:FD:F3:E3:BC:88:E1:D0:7A:75:1B","sha256":"A3:37:F6:EB:31:23:4D:C9:BE:71:6C:EA:4E:C9:32:84:A7:46:0E:BD:83:1D:16:F5:12:BB:28:F1:EB:EE:37:04"}}},"request":{"raw":"GET /assets/partners_10-CKB5LDYI.svg HTTP/1.1\r\nHost: plasma.cex1.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plasma.cex1.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1941\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"partners_10-CKB5LDYI.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 01 Jul 2026 04:54:34 GMT\r\netag: W/\"31de0e6e633e0177691bc08abb30653b\"\r\nlast-modified: Wed, 01 Jul 2026 04:22:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::48kdb-1782881674951-b3bc6235c5e3\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":5626,"size_decoded":2871,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"31de0e6e633e0177691bc08abb30653b","sha1":"f4d79a831ec4262ec8a82cea923a8d8a3552e1cc","sha256":"be9a939ad62098b7fca1be989ebdc2ed97d44fdd5bb7b154b4a844c5ba745f9f","sha512":"4afad2edbcbd2171313a85b6a8a4b0d0716d6aaa861edd364dad0712499aab4e6523030897792b73dd749350cdeab74386dfcf5be95e277c848ecf87abab13dc","ssdeep":"96:+kUoqLMhb/JPNiObimZGcsroxtLQnDupKr3vdM+QIGSq0JfVOuvGgFZ16s:8whtJbiqGcsro/LQuAr3VM+Qz5GlZAs","tlshash":"eac12181a180dbbc2ccada59cf6782a1114f7087f2ff57ca66f29736e85e5d0f500818","first_seen":"2024-08-19T16:30:41.238426Z","last_seen":"2026-07-01T04:55:07.751631Z","times_seen":10,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"plasma.cex1.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plasma.cex1.fun/assets/01-DOB5Vne5.mp4","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://plasma.cex1.fun/","date":"2026-07-01T04:54:35.053Z","timestamp":1782881675053,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plasma.cex1.fun","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 02:48:06 GMT","end":"Wed, 23 Sep 2026 02:48:05 GMT"},"fingerprint":{"sha1":"97:46:C4:31:6D:48:2C:B4:C0:F7:FD:F3:E3:BC:88:E1:D0:7A:75:1B","sha256":"A3:37:F6:EB:31:23:4D:C9:BE:71:6C:EA:4E:C9:32:84:A7:46:0E:BD:83:1D:16:F5:12:BB:28:F1:EB:EE:37:04"}}},"request":{"raw":"GET /assets/01-DOB5Vne5.mp4 HTTP/1.1\r\nHost: plasma.cex1.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plasma.cex1.fun/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1941\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"01-DOB5Vne5.mp4\"\r\ncontent-range: bytes 0-8317075/8317076\r\ncontent-type: video/mp4\r\ndate: Wed, 01 Jul 2026 04:54:35 GMT\r\netag: \"1b042da0012948350b2b53db86cd16c0\"\r\nlast-modified: Wed, 01 Jul 2026 04:22:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::kk5rg-1782881675060-a2a38626ef06\r\ncontent-length: 8317076\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2612325,"size_decoded":2612883,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"296f05544533fa162920dc2ce56c56fb","sha1":"4f1b9a13f6ee0a7cbade81334b74aa0c06c9bdd1","sha256":"0f528c682e5b48eb1c407b5e286fcaff06a1fbd89978fb98bd8954d8a1a2c0c1","sha512":"1dba14f4054523ef06dc9e27b952bc4ba7d94aafae7774422834d851ca549a5034f3b4f47206248fd029caefb1cc6c7990a2e861a7cda5f1bcbf6f6f90422475","ssdeep":"24576:UaXc9MHkpKtwVo76z3qZNEGStUfuZq8pCumGPAx5t:UCcskswVo7Y3LGjWM8Jmlt","tlshash":"3c2523416be0354dc13942bca6c40b6c6b5dd80fac93cf8b5126eb572a353e15e2a9fc","first_seen":"2026-07-01T04:22:51.551475Z","last_seen":"2026-07-01T04:55:07.752278Z","times_seen":2,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"plasma.cex1.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pulse.walletconnect.org/e?projectId=497f09c5a7528641d51b5996281682eb\u0026st=appkit\u0026sv=html-core-1.7.8","fqdn":"pulse.walletconnect.org","domain":"walletconnect.org","tld":"org"},"ip":{"addr":"104.20.34.30","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://plasma.cex1.fun/","date":"2026-07-01T04:54:35.318Z","timestamp":1782881675318,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"walletconnect.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 22:00:21 GMT","end":"Sun, 06 Sep 2026 23:00:08 GMT"},"fingerprint":{"sha1":"27:B8:7C:0B:CF:77:D5:0D:0A:B3:4F:D7:38:61:AE:D8:E7:63:4F:1F","sha256":"04:00:B5:75:D9:C7:C6:62:04:D2:5B:C1:7C:57:38:72:C8:FE:89:2F:06:E7:FA:3C:F9:B9:B2:F2:92:33:BB:2F"}}},"request":{"raw":"POST /e?projectId=497f09c5a7528641d51b5996281682eb\u0026st=appkit\u0026sv=html-core-1.7.8 HTTP/1.1\r\nHost: pulse.walletconnect.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plasma.cex1.fun/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 660\r\nOrigin: https://plasma.cex1.fun\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 202 \r\ndate: Wed, 01 Jul 2026 04:54:35 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: a142d046d98a1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1510,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T07:17:51.133293Z","times_seen":17207279,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":0,"dns":3,"connect":11,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plasma.cex1.fun/","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://plasma.cex1.fun/","date":"2026-07-01T04:54:35.847Z","timestamp":1782881675847,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plasma.cex1.fun","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 02:48:06 GMT","end":"Wed, 23 Sep 2026 02:48:05 GMT"},"fingerprint":{"sha1":"97:46:C4:31:6D:48:2C:B4:C0:F7:FD:F3:E3:BC:88:E1:D0:7A:75:1B","sha256":"A3:37:F6:EB:31:23:4D:C9:BE:71:6C:EA:4E:C9:32:84:A7:46:0E:BD:83:1D:16:F5:12:BB:28:F1:EB:EE:37:04"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: plasma.cex1.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plasma.cex1.fun/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 3526\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-range: bytes 0-492/493\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 01 Jul 2026 04:54:35 GMT\r\netag: \"4a0e700e541d0d9356c5a730a750a576\"\r\nlast-modified: Wed, 01 Jul 2026 03:55:49 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::l7v85-1782881675857-5ef5b7947742\r\ncontent-length: 493\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":493,"size_decoded":1026,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"4a0e700e541d0d9356c5a730a750a576","sha1":"1fd0857a9b48cdbb36a2f4f93285c87d23dadfe2","sha256":"db2b902d08e5cd847bb561a386f6a71de95c7da47d864e5f5ad5f9b78df19cbf","sha512":"efa90695bd269dc2bbd7a27244a7acf3ae7ded272405da4ed898beccce8e0f9e476dcbae8a364a6d9f95c74be0f012f94420ca578f2c31258b40d73fd43c40e8","ssdeep":"","tlshash":"e1f09e4284e0890d532046145dd1f408494ae78b8b55ad4a26eba07d8f84bc1ce9f4b8","first_seen":"2026-07-01T04:22:51.549678Z","last_seen":"2026-07-01T04:55:07.748544Z","times_seen":2,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"plasma.cex1.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@splinetool/viewer@1.12.32/build/spline-viewer.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plasma.cex1.fun/","date":"2026-07-01T04:54:34.883Z","timestamp":1782881674883,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 08:46:51 GMT","end":"Mon, 14 Sep 2026 09:46:24 GMT"},"fingerprint":{"sha1":"BE:A8:55:77:27:FA:F2:90:06:36:65:E9:19:F6:FD:ED:5A:06:9D:D5","sha256":"F8:65:79:AE:79:B2:0F:45:A2:F1:17:30:50:86:B7:3D:E8:9A:27:7A:4A:87:7E:CD:39:A4:0E:EC:92:07:2F:94"}}},"request":{"raw":"GET /@splinetool/viewer@1.12.32/build/spline-viewer.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://plasma.cex1.fun\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plasma.cex1.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 01 Jul 2026 04:54:34 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: a142d0442d9f4e4c-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nage: 1941\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 01 Jul 2027 04:54:34 GMT\r\nlast-modified: Tue, 30 Jun 2026 17:36:26 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:WIj2ZlAYUJHug4yNej5thYBhMSLU6YB/hftX/jfX0oM=:\r\nfly-request-id: 01KV08KSV0TFDKPTTE1C3K16T6-arn\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":2279932,"size_decoded":650105,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"da0ff5c73938260d193dab8fe9384cc8","sha1":"10cd676ed8f04d909929f28084f2021a07377dd4","sha256":"7daf0c204a8a113b9b4c543baa88fff5435b188e7083fd5b9cc42970e0d80f4f","sha512":"cfb2d90e944dae1e42f22bdfc80233d0bf412b0afc8123ba7fcf1fef3afeac8f9da0cda8457915b22ea3eb8012945d43236adc3dff248cf9cd5dc90b1cd09924","ssdeep":"12288:21Tlw4gG5QwPTKVM+oxrhOM3KIOwPHhW74ynIA42GCmHLcuHRzAgX0Y3:2PX+oxrhOM3KIOwPHhW8x4U9HREgXD","tlshash":"cd256cd473a57027875b90e6547b0006f33d7899280d882cf61ce8eb79a485972fbfb9","first_seen":"2026-02-13T01:50:02.723262Z","last_seen":"2026-07-01T04:55:07.753221Z","times_seen":5,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":3,"connect":12,"send":0,"wait":78,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plasma.cex1.fun/assets/videoframe_1413-DfhMyXZg.png","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plasma.cex1.fun/","date":"2026-07-01T04:54:34.932Z","timestamp":1782881674932,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plasma.cex1.fun","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 02:48:06 GMT","end":"Wed, 23 Sep 2026 02:48:05 GMT"},"fingerprint":{"sha1":"97:46:C4:31:6D:48:2C:B4:C0:F7:FD:F3:E3:BC:88:E1:D0:7A:75:1B","sha256":"A3:37:F6:EB:31:23:4D:C9:BE:71:6C:EA:4E:C9:32:84:A7:46:0E:BD:83:1D:16:F5:12:BB:28:F1:EB:EE:37:04"}}},"request":{"raw":"GET /assets/videoframe_1413-DfhMyXZg.png HTTP/1.1\r\nHost: plasma.cex1.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plasma.cex1.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1941\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"videoframe_1413-DfhMyXZg.png\"\r\ncontent-type: image/png\r\ndate: Wed, 01 Jul 2026 04:54:34 GMT\r\netag: \"8f4b4974720578cb5327989830de5605\"\r\nlast-modified: Wed, 01 Jul 2026 04:22:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::cc6xk-1782881674939-a1cfb9d8fcea\r\ncontent-length: 74573\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":74573,"size_decoded":75102,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x1280, components 3","md5":"8f4b4974720578cb5327989830de5605","sha1":"5f185b7399bbeb850a54d6b7a8ab55d5cd252bcb","sha256":"5aa8f39a41b2a4d21c8392c9cf2f1f0b85231fe996da9cbb0949826d6ba3b758","sha512":"98a8d909792cf1d95a59ffdb12173a619d4141c348df0cfd9fc0b8502df381b19d3b0b3e9e4aadcdaabcaaed4bfc872ffad526db4e73619ddc7e256d6590dca0","ssdeep":"1536:0AzmbKp8U0JFuvK/LWUqiXZub29yWCFf7TR53WXkSK+TI/lYP8:0Azm881Jn/LWUpXUbCyWCFDTRh0kS3mx","tlshash":"3873029e28500bf2fe5f2cf570899ea6065e26c282c47a2772c855c5a9e97c46cee1d0","first_seen":"2026-07-01T04:22:51.550585Z","last_seen":"2026-07-01T04:55:07.753847Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"plasma.cex1.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plasma.cex1.fun/assets/partners_4-B0mscH3c.webp","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plasma.cex1.fun/","date":"2026-07-01T04:54:34.939Z","timestamp":1782881674939,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plasma.cex1.fun","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 02:48:06 GMT","end":"Wed, 23 Sep 2026 02:48:05 GMT"},"fingerprint":{"sha1":"97:46:C4:31:6D:48:2C:B4:C0:F7:FD:F3:E3:BC:88:E1:D0:7A:75:1B","sha256":"A3:37:F6:EB:31:23:4D:C9:BE:71:6C:EA:4E:C9:32:84:A7:46:0E:BD:83:1D:16:F5:12:BB:28:F1:EB:EE:37:04"}}},"request":{"raw":"GET /assets/partners_4-B0mscH3c.webp HTTP/1.1\r\nHost: plasma.cex1.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plasma.cex1.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1941\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"partners_4-B0mscH3c.webp\"\r\ncontent-type: image/webp\r\ndate: Wed, 01 Jul 2026 04:54:34 GMT\r\netag: \"4224fcbec65de5ca7fd45c9e5ca7225c\"\r\nlast-modified: Wed, 01 Jul 2026 04:22:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::4b5tx-1782881674945-215a2074b310\r\ncontent-length: 7968\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7968,"size_decoded":8493,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4224fcbec65de5ca7fd45c9e5ca7225c","sha1":"8f2b6b5f3d6474713f2c0294efec1728ecd4719a","sha256":"f1c5f6b4027ce0bfd54fa98ac12798dc93dfe0d82e48178a31a5289870eeb2d4","sha512":"b19a77ba7238082735df2a2396f155a10f1c1dbc2e976f4d2633ba5148612f401202fde4b25fbcf25c44fbb6f957adc6818bac2b494619fa460bd07ee42f66e2","ssdeep":"192:QH7iE9UVMSQ8vgESZYOlsNuSQf/1Mg9ubzTOieLpuC:QmujA2uhQF90ZUp1","tlshash":"4ef19e21b296356c4c29d5e858b9300eee953c53a3c34c424676a70247b97aceb31b0e","first_seen":"2026-07-01T04:22:51.52917Z","last_seen":"2026-07-01T04:55:07.754627Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"plasma.cex1.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plasma.cex1.fun/assets/partners_8-Cpc7PFn6.png","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plasma.cex1.fun/","date":"2026-07-01T04:54:34.943Z","timestamp":1782881674943,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plasma.cex1.fun","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 02:48:06 GMT","end":"Wed, 23 Sep 2026 02:48:05 GMT"},"fingerprint":{"sha1":"97:46:C4:31:6D:48:2C:B4:C0:F7:FD:F3:E3:BC:88:E1:D0:7A:75:1B","sha256":"A3:37:F6:EB:31:23:4D:C9:BE:71:6C:EA:4E:C9:32:84:A7:46:0E:BD:83:1D:16:F5:12:BB:28:F1:EB:EE:37:04"}}},"request":{"raw":"GET /assets/partners_8-Cpc7PFn6.png HTTP/1.1\r\nHost: plasma.cex1.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plasma.cex1.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1941\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"partners_8-Cpc7PFn6.png\"\r\ncontent-type: image/png\r\ndate: Wed, 01 Jul 2026 04:54:34 GMT\r\netag: \"88c349fa821b961dc14b06d3cb06dcb0\"\r\nlast-modified: Wed, 01 Jul 2026 04:22:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::4b5tx-1782881674949-450911141916\r\ncontent-length: 45211\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":45211,"size_decoded":45735,"mime_type":"image/png","magic":"PNG image data, 734 x 200, 8-bit/color RGBA, non-interlaced","md5":"88c349fa821b961dc14b06d3cb06dcb0","sha1":"cf6ef33082e77fc526c70a9f4ba91b99b3231626","sha256":"07ff849b4d85aba53d26a0d79607120db715f728e71309fe444c0307df206be5","sha512":"c9303e48882afe3972c038deb66c34414860153f8ba516dc5f9fdc1f489f9f6eb42c49a91baead0950651d5e4b952868298975692d0b701bbb97038a93258c24","ssdeep":"768:LoG1R8P5NQlZntjYf8vfuczLtq3dMdcx//YpPxXuF3DHL6elBlgobCt2d1nzW:sG1R8xNQznFfXucUtEcGpp+ZDrFlBlDS","tlshash":"8f1302ce99f6c8b397c1f046abf614cc255d3a4ba28078f5466480cfb621af589235e7","first_seen":"2026-07-01T04:22:51.534937Z","last_seen":"2026-07-01T04:55:07.755378Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"plasma.cex1.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plasma.cex1.fun/assets/CERTIK-DJ3Tw_Qx.webp","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plasma.cex1.fun/","date":"2026-07-01T04:54:34.946Z","timestamp":1782881674946,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plasma.cex1.fun","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 02:48:06 GMT","end":"Wed, 23 Sep 2026 02:48:05 GMT"},"fingerprint":{"sha1":"97:46:C4:31:6D:48:2C:B4:C0:F7:FD:F3:E3:BC:88:E1:D0:7A:75:1B","sha256":"A3:37:F6:EB:31:23:4D:C9:BE:71:6C:EA:4E:C9:32:84:A7:46:0E:BD:83:1D:16:F5:12:BB:28:F1:EB:EE:37:04"}}},"request":{"raw":"GET /assets/CERTIK-DJ3Tw_Qx.webp HTTP/1.1\r\nHost: plasma.cex1.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plasma.cex1.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1941\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"CERTIK-DJ3Tw_Qx.webp\"\r\ncontent-type: image/webp\r\ndate: Wed, 01 Jul 2026 04:54:34 GMT\r\netag: \"a4290aa24dc64ff73b016a925955c804\"\r\nlast-modified: Wed, 01 Jul 2026 04:22:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::cc6xk-1782881674953-f9f96a582e2d\r\ncontent-length: 20022\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":20022,"size_decoded":20544,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 579x779, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a4290aa24dc64ff73b016a925955c804","sha1":"4fc662844101c579ea82c5765c203b664cbce7a5","sha256":"3b34e9400fd29cb2774fc71ea422e634286291ff13d00b27639336e5cd6e6a3d","sha512":"869173cdd7ff534505f322c31df0f3558ccb334e24f3533c7f3b29706e72898308dafac5a9067aa4b217fdd55671885f486f7664cb09612e008a7c4eddf06f5e","ssdeep":"384:1ZPG5DQCYVIHdZHmJdy1iQrxEks/R18RlBqe:1ZPSuCbmJdy0Qr+R18RlUe","tlshash":"3692e0902bd0e42271eed54a4243ad3f47cc613b05e90aac95bd744af1f620e2d2f3ca","first_seen":"2026-07-01T04:22:51.543861Z","last_seen":"2026-07-01T04:55:07.756136Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"plasma.cex1.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plasma.cex1.fun/assets/index-BxrQ3l-y.css","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://plasma.cex1.fun/","date":"2026-07-01T04:54:34.373Z","timestamp":1782881674373,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plasma.cex1.fun","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 02:48:06 GMT","end":"Wed, 23 Sep 2026 02:48:05 GMT"},"fingerprint":{"sha1":"97:46:C4:31:6D:48:2C:B4:C0:F7:FD:F3:E3:BC:88:E1:D0:7A:75:1B","sha256":"A3:37:F6:EB:31:23:4D:C9:BE:71:6C:EA:4E:C9:32:84:A7:46:0E:BD:83:1D:16:F5:12:BB:28:F1:EB:EE:37:04"}}},"request":{"raw":"GET /assets/index-BxrQ3l-y.css HTTP/1.1\r\nHost: plasma.cex1.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plasma.cex1.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1942\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index-BxrQ3l-y.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Wed, 01 Jul 2026 04:54:34 GMT\r\netag: W/\"3ec6699e633a8411158a67e2a633e840\"\r\nlast-modified: Wed, 01 Jul 2026 04:22:12 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qwpkw-1782881674391-208c8fadb835\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85135,"size_decoded":15183,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"3ec6699e633a8411158a67e2a633e840","sha1":"840a5dc9beafe79d8e614b22cd4055f7e5ab51cb","sha256":"0f703f506bb82444a9f3f74d3a36675faa1110860e4fa118e04325ad7b729347","sha512":"46fa9c52177a3b48e3c98632de250dcdd4d7e7bb078370ad369f647d3dcb31b8ced2a4983374faa0637091b1079bb3641581e7f265554ee425519a052712ef88","ssdeep":"768:n+q7Bql34Yyka61pEtr4lG1uaGYRo7L7knAe56UJoYBzQmSoKPFEwi:n+q7BpYyka61pkuaGYRo7L7kaYBzQmh","tlshash":"ae83561d7d1c3a3e7c13a2f482d4a4dc620bb386df3e47a7bcc512195ac93f5296a624","first_seen":"2026-07-01T04:22:51.544862Z","last_seen":"2026-07-01T04:55:07.756896Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"plasma.cex1.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plasma.cex1.fun/assets/assets-Q6ZU7ZJ5-P8HioiAD.js","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plasma.cex1.fun/","date":"2026-07-01T04:54:34.894Z","timestamp":1782881674894,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plasma.cex1.fun","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 02:48:06 GMT","end":"Wed, 23 Sep 2026 02:48:05 GMT"},"fingerprint":{"sha1":"97:46:C4:31:6D:48:2C:B4:C0:F7:FD:F3:E3:BC:88:E1:D0:7A:75:1B","sha256":"A3:37:F6:EB:31:23:4D:C9:BE:71:6C:EA:4E:C9:32:84:A7:46:0E:BD:83:1D:16:F5:12:BB:28:F1:EB:EE:37:04"}}},"request":{"raw":"GET /assets/assets-Q6ZU7ZJ5-P8HioiAD.js HTTP/1.1\r\nHost: plasma.cex1.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plasma.cex1.fun/assets/index-vDhp1o3g.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1941\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"assets-Q6ZU7ZJ5-P8HioiAD.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 01 Jul 2026 04:54:34 GMT\r\netag: W/\"0be1e539d9c370f71c5ed19f66fb0870\"\r\nlast-modified: Wed, 01 Jul 2026 04:22:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::48kdb-1782881674901-0f4158980d63\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":23619,"size_decoded":4807,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (23618)","md5":"0be1e539d9c370f71c5ed19f66fb0870","sha1":"b42033f215024e2008bf0d5e032eb8b0df4cd953","sha256":"312c407a303fa7679b7eeccd85173ad7c0967df4f417c4b9e3ce05519ff3e591","sha512":"07bb4c57bd73df5ac1b0031e9d9c94be7ed97758dc07e0cda507b4fafafae3928b59ccdf403a19b3516bcd4721be0242c004c6f0408a52a707380c0b36c36dec","ssdeep":"384:ppByhqW2xs3dwktSu6foTLEQD4zrlqPqo:ppBSqQ3p8BrlqPqo","tlshash":"f8b278ada2320d497c3bed6bfa89790db0203fcb8919a4b98f61b154cbd354df2d0651","first_seen":"2025-06-30T17:29:04.8722Z","last_seen":"2026-07-12T22:22:18.743443Z","times_seen":292,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"plasma.cex1.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plasma.cex1.fun/assets/CERTIK2-D42izUPa.webp","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plasma.cex1.fun/","date":"2026-07-01T04:54:34.947Z","timestamp":1782881674947,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plasma.cex1.fun","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 02:48:06 GMT","end":"Wed, 23 Sep 2026 02:48:05 GMT"},"fingerprint":{"sha1":"97:46:C4:31:6D:48:2C:B4:C0:F7:FD:F3:E3:BC:88:E1:D0:7A:75:1B","sha256":"A3:37:F6:EB:31:23:4D:C9:BE:71:6C:EA:4E:C9:32:84:A7:46:0E:BD:83:1D:16:F5:12:BB:28:F1:EB:EE:37:04"}}},"request":{"raw":"GET /assets/CERTIK2-D42izUPa.webp HTTP/1.1\r\nHost: plasma.cex1.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plasma.cex1.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1941\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"CERTIK2-D42izUPa.webp\"\r\ncontent-type: image/webp\r\ndate: Wed, 01 Jul 2026 04:54:34 GMT\r\netag: \"22fef3204b651a7a53f7688b2a065987\"\r\nlast-modified: Wed, 01 Jul 2026 04:22:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::cc6xk-1782881674954-298ac2314de5\r\ncontent-length: 39720\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":39720,"size_decoded":40243,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 579x779, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"22fef3204b651a7a53f7688b2a065987","sha1":"1a677814ede98b1290deb6b8b1d4dbe8b67f52c0","sha256":"ff7881799ef79c32507e355286d79e451947486ffa3b7a90f5a181978d360f4b","sha512":"694c4d7c2727631a22e9ffa4e340aee9f40055a942b0010af6513fab2f855b9cde9849e56fc690deedd343de819cbb46bb6d259190e4a9ff1be76e7fc9791422","ssdeep":"768:1jJLwAOePuyZ6w3kI5UYewuAQ/oIM+PteSqc6abk7Y7xIWz8mtd:1j6APpgw3ADdbPb1xIA8q","tlshash":"b403f183fb5614f7553a68743d961321a8052aa67a36e4c8dc3e8f381bac2d53940de7","first_seen":"2026-07-01T04:22:51.526688Z","last_seen":"2026-07-01T04:55:07.758391Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"plasma.cex1.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plasma.cex1.fun/assets/02-BIeqzjZ4.mp4","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://plasma.cex1.fun/","date":"2026-07-01T04:54:35.054Z","timestamp":1782881675054,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plasma.cex1.fun","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 02:48:06 GMT","end":"Wed, 23 Sep 2026 02:48:05 GMT"},"fingerprint":{"sha1":"97:46:C4:31:6D:48:2C:B4:C0:F7:FD:F3:E3:BC:88:E1:D0:7A:75:1B","sha256":"A3:37:F6:EB:31:23:4D:C9:BE:71:6C:EA:4E:C9:32:84:A7:46:0E:BD:83:1D:16:F5:12:BB:28:F1:EB:EE:37:04"}}},"request":{"raw":"GET /assets/02-BIeqzjZ4.mp4 HTTP/1.1\r\nHost: plasma.cex1.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plasma.cex1.fun/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1941\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"02-BIeqzjZ4.mp4\"\r\ncontent-range: bytes 0-674959/674960\r\ncontent-type: video/mp4\r\ndate: Wed, 01 Jul 2026 04:54:35 GMT\r\netag: \"378de493a6c67690791aaa8e2b19752b\"\r\nlast-modified: Wed, 01 Jul 2026 04:22:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::cc6xk-1782881675062-b99b71820a78\r\ncontent-length: 674960\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":674960,"size_decoded":675515,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"378de493a6c67690791aaa8e2b19752b","sha1":"808041c0b8d3643f9f022a0d7801265351751899","sha256":"e9e914d74333bb66e17283fa308eccb535593fca90daaa4f0c28e971e3c0b354","sha512":"91620cacda0c001e7eff26104dffaa74b33e39ea0de5e2f764dee1d350d4aefd837ef3db466715fa7b24e579ed11b4219e8c80ab69abd9f1230e5a386a439733","ssdeep":"12288:oXAPPEhvsY9yZhgaLHtsTc1rETAPELNZ0017bmIQrzIeduZHFn:own0EY9y0aLNvNELNP3szlCln","tlshash":"98e4125417e1b242ddb8837d89fd0b4237a7f527d986c3cb91887a4a18b23c4df6a4d8","first_seen":"2026-07-01T04:22:51.527667Z","last_seen":"2026-07-01T04:55:07.759504Z","times_seen":2,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"plasma.cex1.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plasma.cex1.fun/assets/core-DfWaspEm.js","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plasma.cex1.fun/","date":"2026-07-01T04:54:35.153Z","timestamp":1782881675153,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plasma.cex1.fun","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 02:48:06 GMT","end":"Wed, 23 Sep 2026 02:48:05 GMT"},"fingerprint":{"sha1":"97:46:C4:31:6D:48:2C:B4:C0:F7:FD:F3:E3:BC:88:E1:D0:7A:75:1B","sha256":"A3:37:F6:EB:31:23:4D:C9:BE:71:6C:EA:4E:C9:32:84:A7:46:0E:BD:83:1D:16:F5:12:BB:28:F1:EB:EE:37:04"}}},"request":{"raw":"GET /assets/core-DfWaspEm.js HTTP/1.1\r\nHost: plasma.cex1.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plasma.cex1.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1941\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"core-DfWaspEm.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 01 Jul 2026 04:54:35 GMT\r\netag: W/\"b073977a89c8a16924a56ea2f767653c\"\r\nlast-modified: Wed, 01 Jul 2026 04:22:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::cc6xk-1782881675161-8f113e8455f4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":472641,"size_decoded":132493,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (39303)","md5":"b073977a89c8a16924a56ea2f767653c","sha1":"b7b11a2697dc9074c4e26e2a8e5d92e86b7948b0","sha256":"88d3ce02e6d5efb96faa34e043f305f607071befcac2ff1288469a11b3e9b61e","sha512":"757576a07102fc7460916fc2c59b349ed64a7adfc22c0f074f905f99777ef9f9bf5519ea8447e4fe69cfb7a43a1e2921fa101c330be9ebeb0a61e2d03b7ccfa9","ssdeep":"12288:7uA4t4u4GmfjwUyIg5+ho0jXj2pH6HNg4iIFhM:7H4t4u4fLtyb5+fXj2paHN6km","tlshash":"99a44b40b2a6a43603a751edb8b52201f2341858301ad0adfefc9debdf955864a3ff75","first_seen":"2026-07-01T04:22:51.552292Z","last_seen":"2026-07-01T04:55:07.760619Z","times_seen":2,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"plasma.cex1.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plasma.cex1.fun/","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://plasma.cex1.fun/","date":"2026-07-01T04:54:35.444Z","timestamp":1782881675444,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plasma.cex1.fun","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 02:48:06 GMT","end":"Wed, 23 Sep 2026 02:48:05 GMT"},"fingerprint":{"sha1":"97:46:C4:31:6D:48:2C:B4:C0:F7:FD:F3:E3:BC:88:E1:D0:7A:75:1B","sha256":"A3:37:F6:EB:31:23:4D:C9:BE:71:6C:EA:4E:C9:32:84:A7:46:0E:BD:83:1D:16:F5:12:BB:28:F1:EB:EE:37:04"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: plasma.cex1.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plasma.cex1.fun/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 3526\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-range: bytes 0-492/493\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 01 Jul 2026 04:54:35 GMT\r\netag: \"4a0e700e541d0d9356c5a730a750a576\"\r\nlast-modified: Wed, 01 Jul 2026 03:55:49 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::4b5tx-1782881675450-5e8c70224eff\r\ncontent-length: 493\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T07:17:51.133293Z","times_seen":17207279,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"plasma.cex1.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plasma.cex1.fun/assets/okxWallet-QOP2OIPE-KJdrgOlU.js","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plasma.cex1.fun/","date":"2026-07-01T04:54:34.885Z","timestamp":1782881674885,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plasma.cex1.fun","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 02:48:06 GMT","end":"Wed, 23 Sep 2026 02:48:05 GMT"},"fingerprint":{"sha1":"97:46:C4:31:6D:48:2C:B4:C0:F7:FD:F3:E3:BC:88:E1:D0:7A:75:1B","sha256":"A3:37:F6:EB:31:23:4D:C9:BE:71:6C:EA:4E:C9:32:84:A7:46:0E:BD:83:1D:16:F5:12:BB:28:F1:EB:EE:37:04"}}},"request":{"raw":"GET /assets/okxWallet-QOP2OIPE-KJdrgOlU.js HTTP/1.1\r\nHost: plasma.cex1.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plasma.cex1.fun/assets/index-vDhp1o3g.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1941\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"okxWallet-QOP2OIPE-KJdrgOlU.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 01 Jul 2026 04:54:35 GMT\r\netag: W/\"745fafc5ee4f190912aad251c476676b\"\r\nlast-modified: Wed, 01 Jul 2026 04:22:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::kk5rg-1782881674896-ddc379de5773\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1116,"size_decoded":982,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1115)","md5":"745fafc5ee4f190912aad251c476676b","sha1":"2a7fd7c59e1ad15e73419dc1b163ef791957880c","sha256":"c147b0f7266346a92be097df1d47321ece872d21a1f4f0f52449055bc758e180","sha512":"f37135bbe6dfae486bf21ad0d8106002c9d372a5acbec19eea3f9b0c6b6cd76029e787638108b8ab19b47deb8eeed8bb99842ee175abb5ffecddcaa18927a919","ssdeep":"","tlshash":"ac21b64f60750adefc2d98a7e37931a682312efa7934d1350988790427dd9ecf024e1c","first_seen":"2025-06-30T17:29:04.860413Z","last_seen":"2026-07-11T20:34:45.570338Z","times_seen":138,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"plasma.cex1.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plasma.cex1.fun/assets/bitgetWallet-F7U5Y4MR-C5MU6z4Q.js","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plasma.cex1.fun/","date":"2026-07-01T04:54:34.888Z","timestamp":1782881674888,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plasma.cex1.fun","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 02:48:06 GMT","end":"Wed, 23 Sep 2026 02:48:05 GMT"},"fingerprint":{"sha1":"97:46:C4:31:6D:48:2C:B4:C0:F7:FD:F3:E3:BC:88:E1:D0:7A:75:1B","sha256":"A3:37:F6:EB:31:23:4D:C9:BE:71:6C:EA:4E:C9:32:84:A7:46:0E:BD:83:1D:16:F5:12:BB:28:F1:EB:EE:37:04"}}},"request":{"raw":"GET /assets/bitgetWallet-F7U5Y4MR-C5MU6z4Q.js HTTP/1.1\r\nHost: plasma.cex1.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plasma.cex1.fun/assets/index-vDhp1o3g.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1941\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"bitgetWallet-F7U5Y4MR-C5MU6z4Q.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 01 Jul 2026 04:54:34 GMT\r\netag: W/\"0b2d63466dc22d6ba49175a5d4c80251\"\r\nlast-modified: Wed, 01 Jul 2026 04:22:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::4b5tx-1782881674895-2bdbc235ac3a\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1142,"size_decoded":1057,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1141)","md5":"0b2d63466dc22d6ba49175a5d4c80251","sha1":"acec3c5bf9ba18a0198d0dedf77d012417433106","sha256":"be5ce5f71bc3be4dc4431bfddc59c3367420b1c631ca4503efc199d50307e0a9","sha512":"ca8107e8898f388106d3f448aa75f2b232ecb0a2882825d4a03a435e54c4300417ec93e04389f12498e98adc010406671ca7cbb8b26d698f72981a257d0f3eb9","ssdeep":"","tlshash":"93215bcd10722ac549294013cb99264ed4327f6beef94da6fcb673483d1991054e8eb4","first_seen":"2025-08-07T03:33:22.875541Z","last_seen":"2026-07-11T20:34:45.574127Z","times_seen":91,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"plasma.cex1.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plasma.cex1.fun/assets/login-UP3DZBGS-Db_wM5oQ.js","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plasma.cex1.fun/","date":"2026-07-01T04:54:34.895Z","timestamp":1782881674895,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plasma.cex1.fun","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 02:48:06 GMT","end":"Wed, 23 Sep 2026 02:48:05 GMT"},"fingerprint":{"sha1":"97:46:C4:31:6D:48:2C:B4:C0:F7:FD:F3:E3:BC:88:E1:D0:7A:75:1B","sha256":"A3:37:F6:EB:31:23:4D:C9:BE:71:6C:EA:4E:C9:32:84:A7:46:0E:BD:83:1D:16:F5:12:BB:28:F1:EB:EE:37:04"}}},"request":{"raw":"GET /assets/login-UP3DZBGS-Db_wM5oQ.js HTTP/1.1\r\nHost: plasma.cex1.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plasma.cex1.fun/assets/index-vDhp1o3g.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1941\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"login-UP3DZBGS-Db_wM5oQ.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 01 Jul 2026 04:54:34 GMT\r\netag: W/\"28b65459ef616c41fcbc14d2cd2d5b6b\"\r\nlast-modified: Wed, 01 Jul 2026 04:22:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::cc6xk-1782881674901-c9d7845f67ca\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":11995,"size_decoded":3588,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (11994)","md5":"28b65459ef616c41fcbc14d2cd2d5b6b","sha1":"86909f4bf8887dfaab1476058affbb145ba960dd","sha256":"0495b387d34305302644928b6531de715906a7792bebd23443255a5511c0b713","sha512":"fdecb6cdd43226b57fa759a6a88fc4c2506b38d4e7ed7ca28edb702c0a20b8e0890fa9f63e9b893f6a1754389ca8cd213c1ade58be385ff3525960176a01b8b6","ssdeep":"192:CQSYk2qSl2qlEW1QSDdvWwMAuLT+JjisSE44ovGSqyPedtqPq2qrN4qrNdOZ:e4pjZWQufLsSEBovGSjedtqPq2qSqC","tlshash":"1c32dbbca5711b5ebc73d417cb55b61990313fefad6488a8dfaab208cb9691cf5e0010","first_seen":"2025-06-30T17:29:04.849297Z","last_seen":"2026-07-12T22:22:18.765059Z","times_seen":294,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"plasma.cex1.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plasma.cex1.fun/assets/GitHub-4kjWYguC.webp","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plasma.cex1.fun/","date":"2026-07-01T04:54:34.949Z","timestamp":1782881674949,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plasma.cex1.fun","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 02:48:06 GMT","end":"Wed, 23 Sep 2026 02:48:05 GMT"},"fingerprint":{"sha1":"97:46:C4:31:6D:48:2C:B4:C0:F7:FD:F3:E3:BC:88:E1:D0:7A:75:1B","sha256":"A3:37:F6:EB:31:23:4D:C9:BE:71:6C:EA:4E:C9:32:84:A7:46:0E:BD:83:1D:16:F5:12:BB:28:F1:EB:EE:37:04"}}},"request":{"raw":"GET /assets/GitHub-4kjWYguC.webp HTTP/1.1\r\nHost: plasma.cex1.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plasma.cex1.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1941\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"GitHub-4kjWYguC.webp\"\r\ncontent-type: image/webp\r\ndate: Wed, 01 Jul 2026 04:54:34 GMT\r\netag: \"c3ede27162b195ec5798a8f98e43ae21\"\r\nlast-modified: Wed, 01 Jul 2026 04:22:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::lc2gg-1782881674955-5ce20714ea55\r\ncontent-length: 76178\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":76178,"size_decoded":76700,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 579x779, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c3ede27162b195ec5798a8f98e43ae21","sha1":"1c8840606ac2a8825e09d5c0b07b0bbad2f72998","sha256":"003f376305218323ef6d8d53b5f4f3b087eedd2a5341848e2e0be1dc2c22016f","sha512":"e05b5f2f6098a55ff26e3ad270f3fccdc3410ee4c13ae1ba2c8fcf66c431c35401557aa08817f871c59dd27bff8bd4a844405ff558baa83a8b879f2845c85415","ssdeep":"1536:b+tQL19lPdFunm0yUWB82j3oyLpr7kLo15m/XYynY+6+apjHNuZeg:i6F0yUozoyLpvy2m/XYuhCov","tlshash":"aa7301126649f2a843009f653fbea3d0a753a25eb61761dcde4dd075c804bbbf44b2b2","first_seen":"2026-07-01T04:22:51.529974Z","last_seen":"2026-07-01T04:55:07.765601Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"plasma.cex1.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plasma.cex1.fun/vite.svg","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plasma.cex1.fun/","date":"2026-07-01T04:54:35.052Z","timestamp":1782881675052,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plasma.cex1.fun","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 02:48:06 GMT","end":"Wed, 23 Sep 2026 02:48:05 GMT"},"fingerprint":{"sha1":"97:46:C4:31:6D:48:2C:B4:C0:F7:FD:F3:E3:BC:88:E1:D0:7A:75:1B","sha256":"A3:37:F6:EB:31:23:4D:C9:BE:71:6C:EA:4E:C9:32:84:A7:46:0E:BD:83:1D:16:F5:12:BB:28:F1:EB:EE:37:04"}}},"request":{"raw":"GET /vite.svg HTTP/1.1\r\nHost: plasma.cex1.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plasma.cex1.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1941\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"vite.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 01 Jul 2026 04:54:35 GMT\r\netag: W/\"17d8e6e57eeac170ca21f7c92096ffca\"\r\nlast-modified: Wed, 01 Jul 2026 04:22:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::cc6xk-1782881675207-475fd1f8b93f\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":5966,"size_decoded":3297,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"17d8e6e57eeac170ca21f7c92096ffca","sha1":"bc665742cdf51ee3bde27ecd55b6b7f5e1fddac7","sha256":"f8f25843fab7e55b01ae7ad40b840f8ef2a186b516df560eebfdaaaa040a8089","sha512":"4b92d92958069d2b1dca4b381e42054b106fadbf0cfdab4ab144816797d0a0e2ef074f6fa42e7bbc1568c568f732fb7098b616e1ca210dae1f17e39b44777e0a","ssdeep":"96:naC8akHY6bIm1ay548RC35jM1fg8KFLrD5CrTeepAUn0GK7/6ni/x:nJkHVbzay5fP1fRKFNvenn0H/6Ux","tlshash":"1bc176f2f7d4a2d0e00befe0e9328835395734f67f9ada8942d25a91e5225dcc81dc94","first_seen":"2026-07-01T04:22:51.53084Z","last_seen":"2026-07-01T04:55:07.766841Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"plasma.cex1.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plasma.cex1.fun/assets/metaMaskWallet-SITXT2FV-Cvftx4Bc.js","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plasma.cex1.fun/","date":"2026-07-01T04:54:34.890Z","timestamp":1782881674890,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plasma.cex1.fun","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 02:48:06 GMT","end":"Wed, 23 Sep 2026 02:48:05 GMT"},"fingerprint":{"sha1":"97:46:C4:31:6D:48:2C:B4:C0:F7:FD:F3:E3:BC:88:E1:D0:7A:75:1B","sha256":"A3:37:F6:EB:31:23:4D:C9:BE:71:6C:EA:4E:C9:32:84:A7:46:0E:BD:83:1D:16:F5:12:BB:28:F1:EB:EE:37:04"}}},"request":{"raw":"GET /assets/metaMaskWallet-SITXT2FV-Cvftx4Bc.js HTTP/1.1\r\nHost: plasma.cex1.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plasma.cex1.fun/assets/index-vDhp1o3g.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1941\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"metaMaskWallet-SITXT2FV-Cvftx4Bc.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 01 Jul 2026 04:54:34 GMT\r\netag: W/\"8445b8e282509da5cafea9043c6d95e3\"\r\nlast-modified: Wed, 01 Jul 2026 04:22:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::cc6xk-1782881674896-e96772d481b5\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":8512,"size_decoded":1779,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (8511)","md5":"8445b8e282509da5cafea9043c6d95e3","sha1":"8b2ebbfa045bbcb0f56f1286b5ddcc823368eba4","sha256":"92ff713c04a290fb50a5f2087d2fc25137db5896938ef0ab268ccfb6257b565a","sha512":"355f6528c25875c8660edc3e0b1858c8100cd769b63099dcda48b87a804737e1e623a05c41a49ce572e6172c1700e97fe025cf7480230bdeb82b03fbc41c5677","ssdeep":"96:cnPntyXlz+UaqFSRbSCGC7KwT64jP/MVINaO4G:cM0M8RbPGCGq64Ic9","tlshash":"c1020b5f16b80c99e9378c2fc285764d70b4bfc32a28e7f58aa680b58e5110577f39b0","first_seen":"2025-06-30T18:28:52.657268Z","last_seen":"2026-07-11T20:34:45.569384Z","times_seen":274,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"plasma.cex1.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plasma.cex1.fun/assets/01-BavmMx1T.webp","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plasma.cex1.fun/","date":"2026-07-01T04:54:34.927Z","timestamp":1782881674927,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plasma.cex1.fun","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 02:48:06 GMT","end":"Wed, 23 Sep 2026 02:48:05 GMT"},"fingerprint":{"sha1":"97:46:C4:31:6D:48:2C:B4:C0:F7:FD:F3:E3:BC:88:E1:D0:7A:75:1B","sha256":"A3:37:F6:EB:31:23:4D:C9:BE:71:6C:EA:4E:C9:32:84:A7:46:0E:BD:83:1D:16:F5:12:BB:28:F1:EB:EE:37:04"}}},"request":{"raw":"GET /assets/01-BavmMx1T.webp HTTP/1.1\r\nHost: plasma.cex1.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plasma.cex1.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1941\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"01-BavmMx1T.webp\"\r\ncontent-type: image/webp\r\ndate: Wed, 01 Jul 2026 04:54:34 GMT\r\netag: \"e2326c9a4060a51e252f4f6c90653456\"\r\nlast-modified: Wed, 01 Jul 2026 04:22:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::cc6xk-1782881674933-ad0c87526bf9\r\ncontent-length: 17772\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":17772,"size_decoded":18290,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 854x470, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e2326c9a4060a51e252f4f6c90653456","sha1":"e8ef5d2f9e952a3672f967a3a1f637bd4efb2c57","sha256":"142d8a76964a427e4603bceb704f8c91b02ac9f1eb9dc3967eef27a82c2979e0","sha512":"2f01e437ea14ffb69bc85ebb4b60a8299dd30e50289032530f5d34a09778c4e3b0ae412c8986b74e8e6757841190e1aa5b4309280f91010210b25be80a16f2c3","ssdeep":"384:j0ukGKSPNeNNw19UZ2+z3HMeJQxc+I8bT4vu0NHYF8a6neJX:jj9KSleNNqaZ2yHp1DTN4+aHX","tlshash":"fb82d0cbf344017e6d9c286b98cffe8207d216ea1620d46cded359f60e622d4c1994ab","first_seen":"2026-07-01T04:22:51.532985Z","last_seen":"2026-07-01T04:55:07.769032Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"plasma.cex1.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.web3modal.org/appkit/v1/config?projectId=497f09c5a7528641d51b5996281682eb\u0026st=appkit\u0026sv=html-core-1.7.8","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://plasma.cex1.fun/","date":"2026-07-01T04:54:35.320Z","timestamp":1782881675320,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Jun 2026 20:58:28 GMT","end":"Thu, 10 Sep 2026 21:58:10 GMT"},"fingerprint":{"sha1":"5A:9F:85:4A:51:F4:8A:04:CC:1C:A1:DE:31:3C:94:C7:C5:F6:F0:FB","sha256":"3A:D7:9D:20:F2:66:99:35:F7:6E:20:B7:CC:CE:F1:C5:DA:4D:43:50:10:EA:CF:1E:B1:2C:71:20:5F:2F:70:C4"}}},"request":{"raw":"GET /appkit/v1/config?projectId=497f09c5a7528641d51b5996281682eb\u0026st=appkit\u0026sv=html-core-1.7.8 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plasma.cex1.fun/\r\nOrigin: https://plasma.cex1.fun\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 01 Jul 2026 04:54:35 GMT\r\ncontent-type: application/json; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=30\r\nx-robots-tag: noindex\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a142d046dc045690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":595,"size_decoded":527,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"1c3a4908ed2367c1c7aa4becb3405028","sha1":"38ae3e154b0c6327abe105b076013b1bbdfd6cc6","sha256":"b8dbbceec8a5443a9a13f936934d90172636d6481952765b2b803dbb876c208b","sha512":"2a169854233efc51af48e78395a576108b5b1dcd5a2cf741800bce6f2d55ac8f5acc922b1d3c6db9b188930bf103eebbcaa85e62f4d71071edc822275202b832","ssdeep":"","tlshash":"71f05427598c39dac546cd73d64397430fae4bb7ea05ed2cd81c9a0913deab11120d3b","first_seen":"2026-05-23T13:27:26.606318Z","last_seen":"2026-07-13T06:47:25.404225Z","times_seen":801,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":0,"dns":3,"connect":12,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plasma.cex1.fun/assets/banner-BiYw4Dpc.splinecode","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://plasma.cex1.fun/","date":"2026-07-01T04:54:35.450Z","timestamp":1782881675450,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plasma.cex1.fun","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 02:48:06 GMT","end":"Wed, 23 Sep 2026 02:48:05 GMT"},"fingerprint":{"sha1":"97:46:C4:31:6D:48:2C:B4:C0:F7:FD:F3:E3:BC:88:E1:D0:7A:75:1B","sha256":"A3:37:F6:EB:31:23:4D:C9:BE:71:6C:EA:4E:C9:32:84:A7:46:0E:BD:83:1D:16:F5:12:BB:28:F1:EB:EE:37:04"}}},"request":{"raw":"GET /assets/banner-BiYw4Dpc.splinecode HTTP/1.1\r\nHost: plasma.cex1.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plasma.cex1.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1941\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"banner-BiYw4Dpc.splinecode\"\r\ncontent-encoding: br\r\ncontent-type: application/octet-stream\r\ndate: Wed, 01 Jul 2026 04:54:35 GMT\r\netag: W/\"3a6af520ff3488d17fe893ef8a377f85\"\r\nlast-modified: Wed, 01 Jul 2026 04:22:14 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::4b5tx-1782881675456-28e8fcc8deec\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":24326,"size_decoded":21914,"mime_type":"application/octet-stream","magic":"data","md5":"3a6af520ff3488d17fe893ef8a377f85","sha1":"4b917414b4fd68022921704a0e1d5cfce6c8064f","sha256":"165f0754bb3821cbf67cf520882d8677edad58c194b29f77a22891f97adbed35","sha512":"48435184e2f3ec73bc5783564da808e034938aa1fd843e9dc740b3bee2bd734c561d380b92f54a35fb433a0ee9b1d0babc0c538468c71d74f1d338b1f1245b40","ssdeep":"384:LlFVjM9ayC1bzR/QAXZKCsTjAbP0Q/b/AYrEhoIDFj0hBquZRl1:BjM9addzR//pOjAbXPG0PNRn","tlshash":"c3b2bfa43ee07957dd1bd1b8901609e1af287cc0dd66832de467216838a018c0d7bfdd","first_seen":"2026-07-01T04:22:51.560849Z","last_seen":"2026-07-01T04:55:07.771088Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"plasma.cex1.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.spline.design/_assets/_icons/icon_favicon32x32.png","fqdn":"app.spline.design","domain":"spline.design","tld":"design"},"ip":{"addr":"66.33.60.129","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plasma.cex1.fun/","date":"2026-07-01T04:54:36.527Z","timestamp":1782881676527,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.spline.design","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Jun 2026 17:42:57 GMT","end":"Sun, 13 Sep 2026 17:42:56 GMT"},"fingerprint":{"sha1":"E0:A5:4E:59:92:0D:58:EE:57:10:C1:87:74:A0:7B:EF:E6:49:EF:1E","sha256":"21:8E:88:76:32:5E:5B:7A:A6:DB:EC:17:8A:9A:57:7E:47:06:BA:E2:B6:B6:D3:8F:44:89:A2:D2:F6:14:30:5C"}}},"request":{"raw":"GET /_assets/_icons/icon_favicon32x32.png HTTP/1.1\r\nHost: app.spline.design\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plasma.cex1.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 88736\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"icon_favicon32x32.png\"\r\ncontent-type: image/png\r\ndate: Wed, 01 Jul 2026 04:54:36 GMT\r\netag: \"f10a3012022845632db32ba6f0bbe196\"\r\nlast-modified: Tue, 30 Jun 2026 03:31:54 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::frdl8-1782881676581-e305792f0109\r\ncontent-length: 5560\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5560,"size_decoded":6082,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"f10a3012022845632db32ba6f0bbe196","sha1":"6c27ea6411b610bfba9f9130a2cab501302948ab","sha256":"5b0b02e77f5af36bfa4938d9a3e8a345d463ec0248391c11a99f36ec7cc601a2","sha512":"428a07264fa34d1e2a66f33921b227c9133757cd4eb8ce6242cb04ec9d06b0d6d8ba30a1266941b5fe0b16ca9f7d2d3588cec0383bf4be453422711f8bc33b5b","ssdeep":"96:TShMl0UAa3EMsxJW9sUZzBUxM2Yn8wmQ/4J3cOpz78h5UyDB+bL3p/ef3b9UHzky:2hI3EMgYqyBU+h8wV/4J39AXd+bjp2r4","tlshash":"1eb19e04d9a2a40560a31f5e3735f503c4575ea089c5a4c3f9d8a9b48bef5b7513f1ac","first_seen":"2023-11-27T05:56:09Z","last_seen":"2026-07-11T10:58:29.90089Z","times_seen":146,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":20,"connect":1,"send":0,"wait":22,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plasma.cex1.fun/assets/tokenPocketWallet-U7KE4MQK-Sz_KyiLe.js","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plasma.cex1.fun/","date":"2026-07-01T04:54:34.886Z","timestamp":1782881674886,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plasma.cex1.fun","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 02:48:06 GMT","end":"Wed, 23 Sep 2026 02:48:05 GMT"},"fingerprint":{"sha1":"97:46:C4:31:6D:48:2C:B4:C0:F7:FD:F3:E3:BC:88:E1:D0:7A:75:1B","sha256":"A3:37:F6:EB:31:23:4D:C9:BE:71:6C:EA:4E:C9:32:84:A7:46:0E:BD:83:1D:16:F5:12:BB:28:F1:EB:EE:37:04"}}},"request":{"raw":"GET /assets/tokenPocketWallet-U7KE4MQK-Sz_KyiLe.js HTTP/1.1\r\nHost: plasma.cex1.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plasma.cex1.fun/assets/index-vDhp1o3g.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1941\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"tokenPocketWallet-U7KE4MQK-Sz_KyiLe.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 01 Jul 2026 04:54:34 GMT\r\netag: W/\"f3305b8181443ea9732d61d2727a6208\"\r\nlast-modified: Wed, 01 Jul 2026 04:22:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qwpkw-1782881674894-d2668c5148b4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":4369,"size_decoded":1932,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (4368)","md5":"f3305b8181443ea9732d61d2727a6208","sha1":"ebe84c224cb10e01464a62e076444b9c0f6cc1a2","sha256":"08ea6201aa54041e3bca3f8adb23772672890881f1c06dce7f1e295107be3c8d","sha512":"facc5f7d0d426808e0d3e0addc5cbd63c99023915b40d0304f6bf4d3f4006c5b0e79f30d832c54f27b495335b12f87797e49bf97d62da3f59c8d1e36b1c59aa1","ssdeep":"96:wJ3J+GBxLxlxLOoUt2W4314KFJCBISY8KRgegNegHhnghTN14XDrry:wJ35JxLat2W45FJC6SA8h25mXG","tlshash":"ba910ccd22360c45a83bc557e813320d1635bedfbe34797aceea13a5af20659b1db020","first_seen":"2025-06-30T17:29:04.864038Z","last_seen":"2026-07-01T04:55:07.773119Z","times_seen":21,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"plasma.cex1.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plasma.cex1.fun/assets/partners_2-DNdinjC4.svg","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plasma.cex1.fun/","date":"2026-07-01T04:54:34.938Z","timestamp":1782881674938,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plasma.cex1.fun","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 02:48:06 GMT","end":"Wed, 23 Sep 2026 02:48:05 GMT"},"fingerprint":{"sha1":"97:46:C4:31:6D:48:2C:B4:C0:F7:FD:F3:E3:BC:88:E1:D0:7A:75:1B","sha256":"A3:37:F6:EB:31:23:4D:C9:BE:71:6C:EA:4E:C9:32:84:A7:46:0E:BD:83:1D:16:F5:12:BB:28:F1:EB:EE:37:04"}}},"request":{"raw":"GET /assets/partners_2-DNdinjC4.svg HTTP/1.1\r\nHost: plasma.cex1.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plasma.cex1.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1941\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"partners_2-DNdinjC4.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 01 Jul 2026 04:54:34 GMT\r\netag: W/\"a20cb1cc9ba5bf6ce5f27783d9e4c08a\"\r\nlast-modified: Wed, 01 Jul 2026 04:22:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::48kdb-1782881674944-f95fec11933b\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":10138,"size_decoded":3994,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a20cb1cc9ba5bf6ce5f27783d9e4c08a","sha1":"0829c4666e935033b0347cc3cb683668fd89e78d","sha256":"367093be407cbce8bb73d16b5c752553da3db9df39c349396cd7bc4624fee733","sha512":"db4447b45bbab111096e8e96208ea61957dc272d7b158c3d0e8a9dba5d742d908e071f1082ebff06ae70493321aa7f39a66f4f011c6ddf6893ea16243b9672ab","ssdeep":"192:L2cmbvXcwltalidWqyIP1EcDx86z/cu+dMhQEqi:LeDtalsWTO1h6Ycumfi","tlshash":"e3227595f3a5e3f4e40ec7cd5b13d8b8315e20fe75b1a69ccf6ea9a0414228d8c91891","first_seen":"2026-07-01T04:22:51.559468Z","last_seen":"2026-07-01T04:55:07.773747Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"plasma.cex1.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plasma.cex1.fun/assets/partners_5-DCQ1AM1k.png","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plasma.cex1.fun/","date":"2026-07-01T04:54:34.940Z","timestamp":1782881674940,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plasma.cex1.fun","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 02:48:06 GMT","end":"Wed, 23 Sep 2026 02:48:05 GMT"},"fingerprint":{"sha1":"97:46:C4:31:6D:48:2C:B4:C0:F7:FD:F3:E3:BC:88:E1:D0:7A:75:1B","sha256":"A3:37:F6:EB:31:23:4D:C9:BE:71:6C:EA:4E:C9:32:84:A7:46:0E:BD:83:1D:16:F5:12:BB:28:F1:EB:EE:37:04"}}},"request":{"raw":"GET /assets/partners_5-DCQ1AM1k.png HTTP/1.1\r\nHost: plasma.cex1.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plasma.cex1.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1941\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"partners_5-DCQ1AM1k.png\"\r\ncontent-type: image/png\r\ndate: Wed, 01 Jul 2026 04:54:34 GMT\r\netag: \"6e7d2c8857ce8dce7c90b65b10e7790d\"\r\nlast-modified: Wed, 01 Jul 2026 04:22:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::cc6xk-1782881674946-1e42ddbedbc2\r\ncontent-length: 10020\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10020,"size_decoded":10544,"mime_type":"image/png","magic":"PNG image data, 180 x 66, 8-bit/color RGBA, non-interlaced","md5":"6e7d2c8857ce8dce7c90b65b10e7790d","sha1":"0e42586e6a9569d5b8e1ebf2be5ded9d2a782023","sha256":"cd300dc75d9bf9e0ad5571e249be8297501d02e9aef5ae3e1b956b76f58006aa","sha512":"f4e1bf2cdb6c94155e303f26ed6830ad60802e1d06a4a95d5d8a7103013d40d5c058dfcfbadec36a9081dcbf6781fb05ed034c8d08a29c2eae7752ac83c23be9","ssdeep":"192:W2mf1tLFh5JtoA1+DbnmG05fQswbEmNrniH7v6t1hjyLsghM9w1:UtLFProXDji1mzibv69asghM4","tlshash":"ef22bf515d3162a1c943d43eb20435af7a26e1d276a72d45c481f37df08172f2fa878b","first_seen":"2025-05-23T15:24:13.18448Z","last_seen":"2026-07-01T04:55:07.774825Z","times_seen":6,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"plasma.cex1.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plasma.cex1.fun/assets/index-vDhp1o3g.js","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plasma.cex1.fun/","date":"2026-07-01T04:54:34.372Z","timestamp":1782881674372,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plasma.cex1.fun","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 02:48:06 GMT","end":"Wed, 23 Sep 2026 02:48:05 GMT"},"fingerprint":{"sha1":"97:46:C4:31:6D:48:2C:B4:C0:F7:FD:F3:E3:BC:88:E1:D0:7A:75:1B","sha256":"A3:37:F6:EB:31:23:4D:C9:BE:71:6C:EA:4E:C9:32:84:A7:46:0E:BD:83:1D:16:F5:12:BB:28:F1:EB:EE:37:04"}}},"request":{"raw":"GET /assets/index-vDhp1o3g.js HTTP/1.1\r\nHost: plasma.cex1.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plasma.cex1.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1942\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index-vDhp1o3g.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 01 Jul 2026 04:54:34 GMT\r\netag: W/\"d7cc3f602cc7c13397bee16fa65aeb24\"\r\nlast-modified: Wed, 01 Jul 2026 04:22:12 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::kk5rg-1782881674378-9eea48276676\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1515227,"size_decoded":463613,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (41553)","md5":"2406ee7fca3d8761fc5927a798bea66a","sha1":"2c2c5f347b65d8d8377ac23f70c86e9a7df7fc99","sha256":"dd66f9c19b0ff2b8718f73c0b835269dc650d016e0a5693f0ac461768a69e174","sha512":"570d2a964105502df08e34336f71793477dad90f3f744eadea2fcc7f4392a5eaf18402e397324e46316f2bf0db62364b9e4e52163ac82c17d7d9b6f9099f55a9","ssdeep":"12288:W5+V4w1OqyQ7s+oWH2B8b6QYP9f5UMqW+73lcMWD/NI6kK9FUfL:k+VBroS2ebTYhvTuaqj","tlshash":"e2358d9cb3a97166069352a520af1002b2349d5af40c4464b5acd9be3fb9cc9d1fbf7c","first_seen":"2026-07-01T04:55:07.775538Z","last_seen":"2026-07-01T04:55:07.775538Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"plasma.cex1.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plasma.cex1.fun/assets/walletConnectWallet-YHWKVTDY-BcMJSWZw.js","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plasma.cex1.fun/","date":"2026-07-01T04:54:34.892Z","timestamp":1782881674892,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plasma.cex1.fun","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 02:48:06 GMT","end":"Wed, 23 Sep 2026 02:48:05 GMT"},"fingerprint":{"sha1":"97:46:C4:31:6D:48:2C:B4:C0:F7:FD:F3:E3:BC:88:E1:D0:7A:75:1B","sha256":"A3:37:F6:EB:31:23:4D:C9:BE:71:6C:EA:4E:C9:32:84:A7:46:0E:BD:83:1D:16:F5:12:BB:28:F1:EB:EE:37:04"}}},"request":{"raw":"GET /assets/walletConnectWallet-YHWKVTDY-BcMJSWZw.js HTTP/1.1\r\nHost: plasma.cex1.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plasma.cex1.fun/assets/index-vDhp1o3g.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1941\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"walletConnectWallet-YHWKVTDY-BcMJSWZw.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 01 Jul 2026 04:54:34 GMT\r\netag: W/\"07c75d659ccf42b0f285650d330effed\"\r\nlast-modified: Wed, 01 Jul 2026 04:22:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qwpkw-1782881674899-0a1613a75a84\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1877,"size_decoded":1272,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1876)","md5":"07c75d659ccf42b0f285650d330effed","sha1":"19d69164e8b8b965c069816691c1fc636af06f75","sha256":"6fa7eb15946d4f1b38ee89dca64f3b772eac28e8903c81001dc35bd32edb5649","sha512":"f057b9ccbabd042aabcc602f3b801bb22a17905c07263e13bb305676a6143a7608ff43a4e1e16d79041cd5cd3c1f2a7a1fe6eb3a5ff1f8f2f46d46d2c75ecbae","ssdeep":"","tlshash":"1a416bef24b03cd9d43bc5639429301d61722a3bff2d5a559aab62647e65c5020d4633","first_seen":"2025-06-30T17:29:04.865387Z","last_seen":"2026-07-12T22:22:18.741366Z","times_seen":281,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"plasma.cex1.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plasma.cex1.fun/assets/injectedWallet-AWJSZPMG-Df9x-YJA.js","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plasma.cex1.fun/","date":"2026-07-01T04:54:34.893Z","timestamp":1782881674893,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plasma.cex1.fun","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 02:48:06 GMT","end":"Wed, 23 Sep 2026 02:48:05 GMT"},"fingerprint":{"sha1":"97:46:C4:31:6D:48:2C:B4:C0:F7:FD:F3:E3:BC:88:E1:D0:7A:75:1B","sha256":"A3:37:F6:EB:31:23:4D:C9:BE:71:6C:EA:4E:C9:32:84:A7:46:0E:BD:83:1D:16:F5:12:BB:28:F1:EB:EE:37:04"}}},"request":{"raw":"GET /assets/injectedWallet-AWJSZPMG-Df9x-YJA.js HTTP/1.1\r\nHost: plasma.cex1.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plasma.cex1.fun/assets/index-vDhp1o3g.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1941\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"injectedWallet-AWJSZPMG-Df9x-YJA.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 01 Jul 2026 04:54:34 GMT\r\netag: W/\"a971717af526c8f946a4d93b33192d20\"\r\nlast-modified: Wed, 01 Jul 2026 04:22:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::lc2gg-1782881674899-4524785a024c\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":1053,"size_decoded":1032,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1052)","md5":"a971717af526c8f946a4d93b33192d20","sha1":"fded70a2d718a84a030c502775b24050fdae4bc0","sha256":"032e7a7a2003a7bb638b13940b03e3a4485dda5828ce29fe702dd9e6dbd2f6be","sha512":"58dbe7cb3bc33f2f9a2c866bba801f8d4c0e46a75c830ce389721358a28eef2d07308aeafe4a274ea918ee80b4e95005b3ca6b43fd782fc7504b9ffc1c5e9214","ssdeep":"","tlshash":"9e119e9db5373d092c3fa017da49bb1f8021bf9fee0895715eac62041f9a62cf4e4625","first_seen":"2025-06-30T18:28:52.673862Z","last_seen":"2026-07-12T22:22:18.72754Z","times_seen":149,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"plasma.cex1.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.plasma1.online/Api/Index/global_config","fqdn":"api.plasma1.online","domain":"plasma1.online","tld":"online"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://plasma.cex1.fun/","date":"2026-07-01T04:54:34.897Z","timestamp":1782881674897,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"OPTIONS /Api/Index/global_config HTTP/1.1\r\nHost: api.plasma1.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://plasma.cex1.fun/\r\nOrigin: https://plasma.cex1.fun\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T07:17:51.133293Z","times_seen":17207279,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plasma.cex1.fun/assets/one-card-icon-3-CngTpPss.svg","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plasma.cex1.fun/","date":"2026-07-01T04:54:34.935Z","timestamp":1782881674935,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plasma.cex1.fun","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 02:48:06 GMT","end":"Wed, 23 Sep 2026 02:48:05 GMT"},"fingerprint":{"sha1":"97:46:C4:31:6D:48:2C:B4:C0:F7:FD:F3:E3:BC:88:E1:D0:7A:75:1B","sha256":"A3:37:F6:EB:31:23:4D:C9:BE:71:6C:EA:4E:C9:32:84:A7:46:0E:BD:83:1D:16:F5:12:BB:28:F1:EB:EE:37:04"}}},"request":{"raw":"GET /assets/one-card-icon-3-CngTpPss.svg HTTP/1.1\r\nHost: plasma.cex1.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plasma.cex1.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1941\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"one-card-icon-3-CngTpPss.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 01 Jul 2026 04:54:34 GMT\r\netag: W/\"f642360eb884a59ab16b9accf42c8fda\"\r\nlast-modified: Wed, 01 Jul 2026 04:22:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::48kdb-1782881674941-46a567b41486\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4141,"size_decoded":1817,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f642360eb884a59ab16b9accf42c8fda","sha1":"57b7e22bf56e3aa50af0987e2635373ee46b2fbb","sha256":"a0598c4558c5fc190f825f71ac9f0fb8e090bfe2a67f33c34cdf33ba6e5f85b3","sha512":"4f235e4201b5692c46e270d06934f7e0a8781e20f6a86241b3b55c17963823e570000a84012499df70fa144bcedb2be6384e3a6921c7023ee34b1b8ea5578b8c","ssdeep":"96:1JtJxtUhKnBne0lQcHKegw9kRNjpyVW0/H8K8D:hBnvpSPAQMHU","tlshash":"87817be0e7de97e8a650dbc0c3aa3534b8a7257e3411c61847f1bef0e92055d84dd8d1","first_seen":"2026-07-01T04:22:51.547708Z","last_seen":"2026-07-01T04:55:07.778136Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"plasma.cex1.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plasma.cex1.fun/assets/index.es-4STUl15x.js","fqdn":"plasma.cex1.fun","domain":"cex1.fun","tld":"fun"},"ip":{"addr":"216.198.79.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plasma.cex1.fun/","date":"2026-07-01T04:54:34.646Z","timestamp":1782881674646,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plasma.cex1.fun","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jun 2026 02:48:06 GMT","end":"Wed, 23 Sep 2026 02:48:05 GMT"},"fingerprint":{"sha1":"97:46:C4:31:6D:48:2C:B4:C0:F7:FD:F3:E3:BC:88:E1:D0:7A:75:1B","sha256":"A3:37:F6:EB:31:23:4D:C9:BE:71:6C:EA:4E:C9:32:84:A7:46:0E:BD:83:1D:16:F5:12:BB:28:F1:EB:EE:37:04"}}},"request":{"raw":"GET /assets/index.es-4STUl15x.js HTTP/1.1\r\nHost: plasma.cex1.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plasma.cex1.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 1941\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"index.es-4STUl15x.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 01 Jul 2026 04:54:34 GMT\r\netag: W/\"772277a5fdd7aea08e5570174b11fcc6\"\r\nlast-modified: Wed, 01 Jul 2026 04:22:12 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::kk5rg-1782881674653-c1cd36d5fc28\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":407333,"size_decoded":111796,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (46578)","md5":"772277a5fdd7aea08e5570174b11fcc6","sha1":"25e85ca292907ddb16f46307bcb1b277bb499063","sha256":"cf4f3181e2fe08d1d768efef9c49fb031670f4f5724b6da80d94924083681c20","sha512":"cb10ba7bd1046b7202d49611af740d2d83c5adde6619b363a386630b424e30e555fa068dab4e4e53e5817c761dfeff3f8c9481b14a9bf782660e4da998690b96","ssdeep":"6144:mdBvAxFNBgk/ZPDAcdcpuze0gViry4gTrXP8bwAh4gwsJgNs66eIq:mzvajZLvy4gTbiwAh4gwsY6eIq","tlshash":"33844d5073b6a07603e665d9e8762201f2395864704cd06cfbacadefae844858b3ff75","first_seen":"2026-07-01T04:22:51.563183Z","last_seen":"2026-07-01T04:55:07.779257Z","times_seen":2,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-01","alert":"Sinkholed","trigger":"plasma.cex1.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}