{"report_id":"29c376bf-576b-49a6-9573-496a0dbc7453","version":6,"status":"done","tags":[],"date":"2026-02-14T10:07:31Z","url":{"schema":"https","addr":"plggycell-llve.xyz/","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"172.67.204.212","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"plggycell-llve.xyz/","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"title":"Piggycell","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T00:37:19.234622Z","times_seen":17946405,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"plggycell-llve.xyz/","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"172.67.204.212","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T10:07:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":6,"urlquery":0,"analyzer":3}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-14T10:07:20Z","timestamp":1771063640,"ip_dst":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":50202,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2026-02-14T10:07:20.033009+0000\",\"flow_id\":695208259367752,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":50202,\"dest_ip\":\"104.26.13.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3435,\"start\":\"2026-02-14T10:07:20.013128+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-14T10:07:20Z","timestamp":1771063640,"ip_dst":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":50208,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2026-02-14T10:07:20.035464+0000\",\"flow_id\":714200604751039,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":50208,\"dest_ip\":\"104.26.13.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3437,\"start\":\"2026-02-14T10:07:20.013503+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-14T10:07:20Z","timestamp":1771063640,"ip_dst":{"addr":"34.241.56.170","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"Client IP","port":33272,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (binance .nodereal .io)","source":"{\"timestamp\":\"2026-02-14T10:07:20.113466+0000\",\"flow_id\":472443338142692,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":33272,\"dest_ip\":\"34.241.56.170\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058791,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (binance .nodereal .io)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"binance.nodereal.io\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":921,\"bytes_toclient\":3168,\"start\":\"2026-02-14T10:07:20.046052+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-14T10:07:20Z","timestamp":1771063640,"ip_dst":{"addr":"34.241.56.170","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"Client IP","port":33286,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (binance .nodereal .io)","source":"{\"timestamp\":\"2026-02-14T10:07:20.121898+0000\",\"flow_id\":689412201039507,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":33286,\"dest_ip\":\"34.241.56.170\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058791,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (binance .nodereal .io)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"binance.nodereal.io\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":3168,\"start\":\"2026-02-14T10:07:20.050835+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-14T10:07:20Z","timestamp":1771063640,"ip_dst":{"addr":"3.248.65.63","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"Client IP","port":40592,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed4 .bnbchain .org)","source":"{\"timestamp\":\"2026-02-14T10:07:20.125554+0000\",\"flow_id\":1244163061900063,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":40592,\"dest_ip\":\"3.248.65.63\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058798,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed4 .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed4.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":3168,\"start\":\"2026-02-14T10:07:20.058143+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-14T10:07:20Z","timestamp":1771063640,"ip_dst":{"addr":"3.248.65.63","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"ip_src":{"addr":"Client IP","port":40578,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed4 .bnbchain .org)","source":"{\"timestamp\":\"2026-02-14T10:07:20.130347+0000\",\"flow_id\":1169050526343830,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.17\",\"src_port\":40578,\"dest_ip\":\"3.248.65.63\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2058798,\"rev\":1,\"signature\":\"ET INFO Observed Smart Chain Domain in TLS SNI (bsc-dataseed4 .bnbchain .org)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Windows_XP_Vista_7_8_10_Server_32_64_Bit\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_01_03\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\",\"TA_Abused_Service\"],\"updated_at\":[\"2025_01_03\"]}},\"tls\":{\"sni\":\"bsc-dataseed4.bnbchain.org\",\"version\":\"TLS 1.2\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"50a9e7b112931e541503e8a2499252b9\",\"string\":\"771,49199,0-11-65281-16-23\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":928,\"bytes_toclient\":3168,\"start\":\"2026-02-14T10:07:20.058006+0000\"}}"}],"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-02-08T22:25:44.117365Z","alert_count":0,"request_count":4,"received_data":1597737,"sent_data":1812,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"plggycell-llve.xyz","ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-28","domain_rank":0,"first_seen":"2026-02-13T10:22:45.297233Z","last_seen":"2026-02-13T10:22:45.297233Z","alert_count":273,"request_count":91,"received_data":25536647,"sent_data":41120,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Ant Design","description":"Ant Design is a UI library that can be used with data flow solutions and application frameworks in any React ecosystem.","website":"https://ant.design","common_platform_enumeration":"","icon":"Ant Design.svg","categories":["UI frameworks"]}]},{"fqdn":"bsc-dataseed4.bnbchain.org","ip":{"addr":"3.248.65.63","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2020-01-13","domain_rank":4946679,"first_seen":"2023-09-19T15:40:37Z","last_seen":"2026-02-12T23:46:25.125706Z","alert_count":0,"request_count":2,"received_data":5971,"sent_data":1041,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.ipify.org","ip":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-05","domain_rank":8166,"first_seen":"2014-10-06T12:38:43Z","last_seen":"2026-02-09T08:52:44.317696Z","alert_count":0,"request_count":2,"received_data":512,"sent_data":874,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"binance.nodereal.io","ip":{"addr":"34.241.56.170","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2021-07-19","domain_rank":1804985,"first_seen":"2022-10-20T10:44:48Z","last_seen":"2026-02-08T14:08:48.808882Z","alert_count":0,"request_count":2,"received_data":7443,"sent_data":1027,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"plggycell-llve.xyz/599cbc20-15ee-4441-82a3-91be4a9a3ae4","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec26a722169cb2cef03353fcf8dd144a","sha1":"6eec6673abcde3d29547796a38361256d9efde1c","sha256":"01861fcd47bc63bb7be76c480bad4c6cc987c8996ab0e023a4e692b68c94b05c","sha512":"c885e5d94bd96fa4a573524356e0ca7398b1489f5a39fc1120cf7f4e469950630ad3e9f48dd0392acd36da390c27a4be1e81da943d1d9ecd48890d1691e416cf","ssdeep":"6144:Ufg7z90bnvLZqnWTI9esVTMuyEvtzXNglxQP92L:VzBe6kEdOxQoL","tlshash":"bf740980b261b07247da24e10477540af339e96c744a40acf6a8d8fb7dbd589957ff38","size":357754,"data":"","first_seen":"2025-07-12T22:38:09.13306Z","last_seen":"2026-08-09T15:35:30.742044Z","times_seen":5092,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/index_1.html","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1d8aec854fd6104f6f3aae4ed5e6c0f2","sha1":"bee4acb6d0fd4a863f6be0e372d91be1109f9a0a","sha256":"9dddf45923a025ed7d8fd972fdf0045b139932f70bfe7896d5fdfac61dfd09da","sha512":"49c40285ffa4d052e176da4bb9664df37e5f3c7b6b4d6b0a1b1dea3b289da4880456997341b05721eb441081b3f0e04440e383e7dc7d179d70b23277aeaab3d4","ssdeep":"","tlshash":"8ad0135d70205565058e797d4cdf148f7e255411920445c9d9dcd5547fb1f6c51d444c","size":204,"data":"","first_seen":"2025-09-12T17:11:18.709323Z","last_seen":"2026-06-13T04:20:47.410573Z","times_seen":246,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/index_1.html","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1d8aec854fd6104f6f3aae4ed5e6c0f2","sha1":"bee4acb6d0fd4a863f6be0e372d91be1109f9a0a","sha256":"9dddf45923a025ed7d8fd972fdf0045b139932f70bfe7896d5fdfac61dfd09da","sha512":"49c40285ffa4d052e176da4bb9664df37e5f3c7b6b4d6b0a1b1dea3b289da4880456997341b05721eb441081b3f0e04440e383e7dc7d179d70b23277aeaab3d4","ssdeep":"","tlshash":"8ad0135d70205565058e797d4cdf148f7e255411920445c9d9dcd5547fb1f6c51d444c","size":204,"data":"","first_seen":"2025-09-12T17:11:18.709323Z","last_seen":"2026-06-13T04:20:47.410573Z","times_seen":246,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/68e447e7-cad7-4c33-aaff-ac704e59862d","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e859325c4db72a7a71bb4cc911c21ad7","sha1":"61525a0bce36c1689eaa9a2d34a613b9e01d8950","sha256":"f8226ca8f41f616dc7773ba37d7b73197eb7674954597dbeda5ee8ed91f4e275","sha512":"1376a8fec1f044c86c13482a73caa69109e3bd5700edb402e4d895aa47540bc6d60bf155fe65f7bb8fd45b54386f7616a391cb94b8228fd546bb37a83d9a3907","ssdeep":"98304:kbBHBlBBfZ9ahJ9RPQUG+PyBstBB3ReyX:kbFdxZ9ahJ9RPQUGzCbBBeyX","tlshash":"ac367ee473a5b0a2479751e8543b5006f339ac59580c846cf6d8e8fb3ab8d8c51bbf39","size":4880407,"data":"","first_seen":"2024-09-04T22:24:40Z","last_seen":"2026-08-09T15:35:30.731473Z","times_seen":1438,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-18T00:37:09.784588Z","times_seen":237954,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/0f3ab71c-bb56-4f88-80da-1172ba3acb87","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e859325c4db72a7a71bb4cc911c21ad7","sha1":"61525a0bce36c1689eaa9a2d34a613b9e01d8950","sha256":"f8226ca8f41f616dc7773ba37d7b73197eb7674954597dbeda5ee8ed91f4e275","sha512":"1376a8fec1f044c86c13482a73caa69109e3bd5700edb402e4d895aa47540bc6d60bf155fe65f7bb8fd45b54386f7616a391cb94b8228fd546bb37a83d9a3907","ssdeep":"98304:kbBHBlBBfZ9ahJ9RPQUG+PyBstBB3ReyX:kbFdxZ9ahJ9RPQUGzCbBBeyX","tlshash":"ac367ee473a5b0a2479751e8543b5006f339ac59580c846cf6d8e8fb3ab8d8c51bbf39","size":4880407,"data":"","first_seen":"2024-09-04T22:24:40Z","last_seen":"2026-08-09T15:35:30.731473Z","times_seen":1438,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-18T00:37:09.7853Z","times_seen":745293,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/index_1.html","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-18T00:37:09.784588Z","times_seen":237954,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e834a77a8dafe1c234028ff6768633f","sha1":"2fb1864406b785064515581d20a7725440dae398","sha256":"afa1ca985c6f84e156d07f52f806e4afbbfc59e70ebf9ab9426f47297d766357","sha512":"28ac32f241b55d4d9a4e16ea6568523c61c549de26ee02a57229fef72c98e8f6d3143f1813f1f0a22c121fff2b3e8c5b83b11109e5bdb380f544fd18042a7104","ssdeep":"","tlshash":"2a11590aad12f08513b150bda23f960b7025583f53ac93f0b354c9f868f408b8226eb9","size":1000,"data":"","first_seen":"2025-04-07T11:34:31.002785Z","last_seen":"2026-06-06T03:37:51.768046Z","times_seen":954,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1d8aec854fd6104f6f3aae4ed5e6c0f2","sha1":"bee4acb6d0fd4a863f6be0e372d91be1109f9a0a","sha256":"9dddf45923a025ed7d8fd972fdf0045b139932f70bfe7896d5fdfac61dfd09da","sha512":"49c40285ffa4d052e176da4bb9664df37e5f3c7b6b4d6b0a1b1dea3b289da4880456997341b05721eb441081b3f0e04440e383e7dc7d179d70b23277aeaab3d4","ssdeep":"","tlshash":"8ad0135d70205565058e797d4cdf148f7e255411920445c9d9dcd5547fb1f6c51d444c","size":204,"data":"","first_seen":"2025-09-12T17:11:18.709323Z","last_seen":"2026-06-13T04:20:47.410573Z","times_seen":246,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/index_1.html","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-18T00:37:09.7853Z","times_seen":745293,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1d8aec854fd6104f6f3aae4ed5e6c0f2","sha1":"bee4acb6d0fd4a863f6be0e372d91be1109f9a0a","sha256":"9dddf45923a025ed7d8fd972fdf0045b139932f70bfe7896d5fdfac61dfd09da","sha512":"49c40285ffa4d052e176da4bb9664df37e5f3c7b6b4d6b0a1b1dea3b289da4880456997341b05721eb441081b3f0e04440e383e7dc7d179d70b23277aeaab3d4","ssdeep":"","tlshash":"8ad0135d70205565058e797d4cdf148f7e255411920445c9d9dcd5547fb1f6c51d444c","size":204,"data":"","first_seen":"2025-09-12T17:11:18.709323Z","last_seen":"2026-06-13T04:20:47.410573Z","times_seen":246,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/3ed28a10-96bc-4ea4-8160-79f70cb2f80d","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec26a722169cb2cef03353fcf8dd144a","sha1":"6eec6673abcde3d29547796a38361256d9efde1c","sha256":"01861fcd47bc63bb7be76c480bad4c6cc987c8996ab0e023a4e692b68c94b05c","sha512":"c885e5d94bd96fa4a573524356e0ca7398b1489f5a39fc1120cf7f4e469950630ad3e9f48dd0392acd36da390c27a4be1e81da943d1d9ecd48890d1691e416cf","ssdeep":"6144:Ufg7z90bnvLZqnWTI9esVTMuyEvtzXNglxQP92L:VzBe6kEdOxQoL","tlshash":"bf740980b261b07247da24e10477540af339e96c744a40acf6a8d8fb7dbd589957ff38","size":357754,"data":"","first_seen":"2025-07-12T22:38:09.13306Z","last_seen":"2026-08-09T15:35:30.742044Z","times_seen":5092,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/bb7dea4a-a26e-46af-a424-6f473f7d8edd","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c6cf4f5d75280d298d2b5e3205afdf3","sha1":"c1c865a87e6bd5308f6fd151d5f85ef08c9fe334","sha256":"d7c78ca2faa4f7a234653c07e8a7f43272a3f442a27462cb660fd207a2acf34c","sha512":"3a583c31cf34eca43c26ef86ae64f838345ccc26ac0bc4bb6f382aac9fe18bf1971d568b1717705761d80a7959f6f7cc8f35200f2bf2d4c3b75a55879b8ebdd1","ssdeep":"24576:P1rIZyZADEkuXt9WDo1ee5RpZ0KGWfB5CEqK:9H/28sXsqK","tlshash":"8236a464b8a7acf04d6642e8423bc594cc99afc2894875e4f67c9ce6bb6cfd74d81013","size":4913678,"data":"","first_seen":"2025-10-28T18:31:17.922734Z","last_seen":"2026-02-14T10:07:43.801385Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e834a77a8dafe1c234028ff6768633f","sha1":"2fb1864406b785064515581d20a7725440dae398","sha256":"afa1ca985c6f84e156d07f52f806e4afbbfc59e70ebf9ab9426f47297d766357","sha512":"28ac32f241b55d4d9a4e16ea6568523c61c549de26ee02a57229fef72c98e8f6d3143f1813f1f0a22c121fff2b3e8c5b83b11109e5bdb380f544fd18042a7104","ssdeep":"","tlshash":"2a11590aad12f08513b150bda23f960b7025583f53ac93f0b354c9f868f408b8226eb9","size":1000,"data":"","first_seen":"2025-04-07T11:34:31.002785Z","last_seen":"2026-06-06T03:37:51.768046Z","times_seen":954,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"plggycell-llve.xyz/galxe.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/","date":"2026-02-14T10:07:04.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /galxe.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:04 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3QE93GFJp2S2NiHnGujZomfY%2FtXAezgPXd1u4pm2E8sRxrmdDtcDwovslnlaaEHVdFqzsiKZPn4fg3oFKQJmgmNbspaUilS3%2BgplqsiDPePurQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"8792821e23874547c8f8041c3e5d12b3\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1a4a9c9ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4255,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c4c5fda75359002ed6ee1e242f3540c7","sha1":"c474affee2dd1809f73718ebf9740dff13e448c1","sha256":"b14e2f5b1344a0ac3b4932e7cfb80a0a12df33792d7d70fa600ac9a23a3d5e5e","sha512":"4189a7b8876202b207e9793b4a5575744d72c1ed1c90eb8d47ced39a7e66eb851229f962c139bda2970cd578ad1c06ea73b95a63070119b4f7ce179d89e88971","ssdeep":"96:4ndiUhjVbk823OnmHntQtSbK9UXtIRyx9tMuvHnU/YhL1u:4diUnk8qWmHCmK693t/vHn5hJu","tlshash":"8d91b5dc6bf586e8fe06dbfab742a6357442a4bba9964e1cc3e44f14b50244cc844ce2","first_seen":"2026-02-13T10:22:49.116494Z","last_seen":"2026-02-14T10:07:43.761019Z","times_seen":2,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/circle-gradient.webp","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/","date":"2026-02-14T10:07:04.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /circle-gradient.webp HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 86900\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/webp\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"9f70a7df24552ccc410115508ee6d47f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ehh0ar9sCEexYkAhlFNywYYHFxaqZC%2FoHoL0o9XcsQ7KMl3TrkEakU8l2g7aRhsNyTsaf9cYZAyl5Qafssj1leYLux9tRE1xe3rhmupBMsl7jw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 10:07:04 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cdbc1a489a9ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86900,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 730x730, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"261cec29d87fd870a52f0d4667d7422b","sha1":"cff3d45a1ed9fe91bf7a18ce4ae2e7c170a418da","sha256":"7a22b6f37c225391e872bf77e6a12659380247e1a4ff7e2275b0c90a3ae2efed","sha512":"f738ba091e4e0d5df27f4575914817a02ac2773aeba8eb112b9d6fc9505f3b4bf474aca2408fc9dc8d70e7974e5518971e2107c3d86ad650611cafcf2aaef59f","ssdeep":"1536:63xrhm/rj6CtbIbIdi1Q4bR7XF2RL6YzYGiI4J1HFbTgq:6h0/VtvyTxXF8LN/ZoTgq","tlshash":"a88312bba96e35e8b5065886baef5e45cf0ff1d37720e393a47249f90a411f2345104d","first_seen":"2026-02-13T10:22:49.157733Z","last_seen":"2026-02-14T10:07:43.762066Z","times_seen":2,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/animoca.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/","date":"2026-02-14T10:07:04.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /animoca.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:04 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vjuckXfP4Bab%2Fu%2F43HkDL%2FvEJo1T%2FX1Cy8VCBdiW8n6Twmn5Jj6xaPg%2BbQJ1bRp%2BldH%2BktF%2FmIJYUJ05wcMnu1M4MDAH9n0baGbeTvswlOGZWw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"78f454904cb180fd4a3b6f0ba191ea5a\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1a499bbddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15568,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a0a6c6820c423fb25dd7d8b511a47309","sha1":"deda54684cf344efba5cf8298ef15f01badcd7af","sha256":"b67b4dd98b5d87afc31fd05d03ca7b161e3dca3e02a122d6de53d1ef0ff0311b","sha512":"72e00d4001b0428ed13e9516859114bdda0120cd62c7cfaade5a44bd9e1732e7d7ce79834dc3f1fa1ee74d6ce98c1967e079608d9a14a84fd97953e087e32cbb","ssdeep":"384:1hm4pne0gHbjs45x8ziLbqHld0C2Zd6+mDp4:1QidgHbjs4H8GyHf6","tlshash":"e262b39567baa3f8f402fbf8ca2398617e5a28f53e00d1a9c3e26d61c52105dcd56cc7","first_seen":"2026-02-13T10:22:49.129727Z","last_seen":"2026-02-14T10:07:43.763074Z","times_seen":2,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/hana.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:09.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /hana.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:09 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sGbvIe%2BnbRZ58COKUjQ79fmWnaeQyh47mz0q8jZZI3uapY%2BwwHFu%2BTM%2FDP6o1OZqJzW76NSyUG1d3595mNy7Zzxw6NaZzuBTKyYc80XZsZU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"42cb709bed4ace00d85acfd198be4f10\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1c16ed2ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10131,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6c5f5e1585962ca5343c92e2842dc8d4","sha1":"6cea13fc75c35b59115ca13fc111e0d7671f2c0b","sha256":"7de8db128cc86d41e331058e3a0cadf2e23c0a421e8e18b7bae7e84cc56f2f49","sha512":"ef329eae8772516a952d1f42aef613d7a279683159dc5a199a28adb2296e7e5084bd44d84e10ba540fe3323e8c407e5063f681efc257b0b4323e02e644409d0f","ssdeep":"192:ILfiUxlKG+1feGJUS1I+gcnzJ4yOaylPn6wDgpu3JXkJ4zoVfjuwL:IuUxgGO5J91IG4yO9nDB3JXgrZ","tlshash":"9022bfb6a00d4f7fc918263649fb853c8fed0c9b666ad497c1d10c08458c75a7aa2b8f","first_seen":"2026-02-13T10:22:49.162062Z","last_seen":"2026-02-14T10:07:43.764235Z","times_seen":2,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bsc-dataseed4.bnbchain.org/","fqdn":"bsc-dataseed4.bnbchain.org","domain":"bnbchain.org","tld":"org"},"ip":{"addr":"3.248.65.63","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://plggycell-llve.xyz/","date":"2026-02-14T10:07:20.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnbchain.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 09 May 2025 00:00:00 GMT","end":"Mon, 08 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"60:A4:BE:0F:33:E9:DC:36:3B:B7:3C:5A:E4:42:EE:DE:F1:46:52:E4","sha256":"15:55:B7:24:9E:06:40:29:6B:D0:0D:FD:D2:2B:02:D8:1B:63:50:F2:26:B3:56:69:5D:9D:DF:3E:40:64:99:5E"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: bsc-dataseed4.bnbchain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://plggycell-llve.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"method\":\"eth_call\",\"params\":[{\"to\":\"0xd24aeC3254652B0ab565E41A945b491e98Bb5FFC\",\"data\":\"0x73d4a13a\"},\"latest\"],\"id\":1,\"jsonrpc\":\"2.0\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 10:07:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-nr-trace-id: 1c724d5ac40b0784b02fbcbee949465f\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4902,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2188b7f1b90a143020f7faf12d10e91f","sha1":"e6a95e4d574d05948b7c8517861a71e6f69b38b8","sha256":"4a8dd94310fc027a042dc9ca0311f20e9341084839e00b8d7a830ab52cdc8096","sha512":"08e8f648099fac2b075f96396f2f9056ac526f12e5843bc16d07fd725fcd74abeed4021a9ed64f53ef3e1dbb57a707ebee71bc51b230f5b5ee4200c2da1d7b1c","ssdeep":"96:oigW53TB2SzrZYpTbDaOTkSO6mdSInccYGS9FzelVLY:r5TB2SzAT/7kSRRrze3k","tlshash":"e6a179f0ee02c891f1be4768f2ddbe0461383726eedc5a4604b45a991ee5a51bd0dccd","first_seen":"2025-01-17T17:24:07.906471Z","last_seen":"2026-08-09T15:35:30.717016Z","times_seen":4827,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/features1.png","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:08.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /features1.png HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 7590\r\ncf-cache-status: MISS\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"c96d2840070fc618334b23e2cc075bbc\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5MgxJiJptlEtaz1TOBgH0mheIzdrxmL%2F4sjnj2h2QZwgV1eBUQgDlpr8I9SgYODfbwOsXvIrH5ZRej4ct7l8TfSXKfUAKZWjA%2FxD0z1MAdGQeg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 10:07:09 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cdbc1c13ec4ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7590,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"f0af88f09cedf244f37a8dfd25352ec7","sha1":"b7c5fd2ca018f1fa9f691efd7eb68d0d9948c8ef","sha256":"cf6110ed3fce3e78d392985cbf9961cdb067246423a24e9b6e3ea3c462a90c0b","sha512":"d92bb55d0b932e2aaf2bec9914e95e2c4579f060f2f7003a29979de2c2d7886042a6418913bffe854a9bfe32c57c0f66b29ff65db94631e3ba53ea62981139a8","ssdeep":"192:pSEPhRZes6B3IuFQy9O+wbnS7dOYqEm7+cM/+sM:QEPjyIuFQH+gSMTM/+D","tlshash":"f8f1ae8eb00058753bde61613de96874ecb060f81a577178c752b7a39f0a9d63b6b2c8","first_seen":"2026-02-13T10:22:49.156617Z","last_seen":"2026-02-14T10:07:43.765654Z","times_seen":2,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/kt.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:09.057Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /kt.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:09 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=88DpX3PepCeKxtRaAElmoddcY9XUsXZc2dD1sRDfxwAj8XmX4dYVcKTBZUw8%2B7VvIJznDxESZM1p5Onp0wD45qOsxzeG8Kfrjv908PJNkB7mYA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"caa47c0d35bd4c4cb1565e694f655be8\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1c17ed6ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7059,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ff1631b09e5277cf7605b807bf5f3874","sha1":"e2f2fd3768cc7febe95ae236271c4cad3128f3d0","sha256":"920b06aa9059bd2ef4302cc97a36697170960e0dea0edee9b21e5728bd3c2546","sha512":"dbcd4fedaa359f81dc93e100f1b2edcd96458807bef3d7889be046ce266acd6ab12cbdefcc9c6a88bbf540fe7a592015320c4b986dc6dae8dc3c60f24d3ca7dd","ssdeep":"192:FSmInYgoICnoiL6nboObboKLVeSipHf3/C:S/uoi6bNbF8fPC","tlshash":"efe19e73331885eac18a755926ed7402ec2d20c5d69cd2c646d0f2761f1961baf337ee","first_seen":"2026-02-13T10:22:49.13339Z","last_seen":"2026-02-14T10:07:43.766569Z","times_seen":2,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/meta.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:09.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /meta.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:09 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JhnE8ejUV7ET%2BvbW%2ByVb8Tc4ABIdoPsrM9ADnw1SiLqauXhRPCuMDjSlt9SrguTx7tjoLu2Ocfk0UgXVFKCvhqdD%2FChRcXX7hFUKhq7hlLCGFA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"99b12e2739b47fdefa4e1f68e1ce15b5\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1c1bef2ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74510,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8f5a4bd15a536555d7a9ceec7295978a","sha1":"52e1b1ad8f36aeab4014bdf594d2e5ef456ee92a","sha256":"915656fcf71af98167173d3eae68e31f9f719aedac1647d47e0bd995bf142b6b","sha512":"a72d5f8044444bfb58212bc221f632aaa4c8dc466993b85f115757497e53ccb3ebee55b5e62cdf45ea206a791b649ea69b3d1e9471828a3f7593c5eccef183f0","ssdeep":"768:1vRHxSk+KAJw3Ch8w9Jo7nHH61/fracUD2MUp/2dNkFzKgUWvQ:RRH0pJJvJobOfecUyMxCzKgUWvQ","tlshash":"71739c528a9d3bad3ab74cbf6bdb052f7e1468ee284045cf8d2dc6d1917a090d70cca1","first_seen":"2026-02-13T10:22:49.131468Z","last_seen":"2026-02-14T10:07:43.76772Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/features3.png","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:13.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /features3.png HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 8468\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"e8912af076923106b934e8215886c64f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PLJOxamdnSA3GWUNcNGgnDXTDqpsJX7aMTd9Hhq5LjaKqERRnrUvJKZxiTTWJ5Q11ctj7V6zPVwGL%2BBP2e9BwRf7RWnQKwlyGocWXDi9Ss7Riw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 10:07:13 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cdbc1dcfd44ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8468,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"9b3d6b8981edb17640f9f88a4bdc7074","sha1":"086cb1125af3d556e07a66c1e63331a54847d770","sha256":"6c913714827b3ba0686aa85be32d560b52283f3e9ca9802b97f08eecffa695b7","sha512":"3ef365fef1a54b15aa2470992e227a67b787539c6c6de7d8ec089ae0ba6d509fd616229ca4658afb1cc1ded81d4c5bf1bb30037728825dc57e9cab463e008195","ssdeep":"192:pSkfQTHIzfsylEYdRmXegqw5rxsB6veEY1wRhE6gd:QkfgHITvlEYd1gf5rxsC46y","tlshash":"e902bfd8160cea3dcb4e1f4d2b17b6fcfe616100dda96092cc11dc25d5685d18d27bd6","first_seen":"2026-02-13T10:22:49.139427Z","last_seen":"2026-02-14T10:07:43.768549Z","times_seen":2,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/circle-gradient.webp","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:13.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /circle-gradient.webp HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 86900\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/webp\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"9f70a7df24552ccc410115508ee6d47f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ehh0ar9sCEexYkAhlFNywYYHFxaqZC%2FoHoL0o9XcsQ7KMl3TrkEakU8l2g7aRhsNyTsaf9cYZAyl5Qafssj1leYLux9tRE1xe3rhmupBMsl7jw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 10:07:13 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cdbc1dcfd45ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86900,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 730x730, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"261cec29d87fd870a52f0d4667d7422b","sha1":"cff3d45a1ed9fe91bf7a18ce4ae2e7c170a418da","sha256":"7a22b6f37c225391e872bf77e6a12659380247e1a4ff7e2275b0c90a3ae2efed","sha512":"f738ba091e4e0d5df27f4575914817a02ac2773aeba8eb112b9d6fc9505f3b4bf474aca2408fc9dc8d70e7974e5518971e2107c3d86ad650611cafcf2aaef59f","ssdeep":"1536:63xrhm/rj6CtbIbIdi1Q4bR7XF2RL6YzYGiI4J1HFbTgq:6h0/VtvyTxXF8LN/ZoTgq","tlshash":"a88312bba96e35e8b5065886baef5e45cf0ff1d37720e393a47249f90a411f2345104d","first_seen":"2026-02-13T10:22:49.157733Z","last_seen":"2026-02-14T10:07:43.762066Z","times_seen":2,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://plggycell-llve.xyz/","date":"2026-02-14T10:07:20.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 12:15:50 GMT","end":"Wed, 01 Apr 2026 13:15:39 GMT"},"fingerprint":{"sha1":"E8:04:3F:4D:91:E2:52:D3:E0:EA:F7:1A:C8:8C:94:50:7C:2E:FF:FF","sha256":"A1:8E:F1:BF:52:25:E4:EE:2D:91:8B:1E:0B:E7:A1:C3:B9:7D:DF:7D:D1:57:11:6A:14:CF:F2:A6:DF:D1:B0:18"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/\r\nOrigin: https://plggycell-llve.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 10:07:20 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9cdbc2065f58dd81-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"35b0bce9d250429df012c0426f88d0bd","sha1":"f81d80af9cbeb0011316fbba3da8002b32251f7a","sha256":"da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d","sha512":"32c9df1064e730e1a2358dae62aff741118007187d89510bfbdf93efaaa7356b71a570ea8c5d96bdc0b47155bbaa77df86b6847cc4d95d2d1b7fa2a1484a7144","ssdeep":"","tlshash":"dd600003000000000c00c00cc303030303c00003c30f0000ccc00f000c003300300000","first_seen":"2023-03-07T01:19:04Z","last_seen":"2026-06-07T08:12:19.538389Z","times_seen":27001,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":12,"dns":2,"connect":8,"send":0,"wait":126,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/meta.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/","date":"2026-02-14T10:07:04.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /meta.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:04 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JhnE8ejUV7ET%2BvbW%2ByVb8Tc4ABIdoPsrM9ADnw1SiLqauXhRPCuMDjSlt9SrguTx7tjoLu2Ocfk0UgXVFKCvhqdD%2FChRcXX7hFUKhq7hlLCGFA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"99b12e2739b47fdefa4e1f68e1ce15b5\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1a4a9c5ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74510,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8f5a4bd15a536555d7a9ceec7295978a","sha1":"52e1b1ad8f36aeab4014bdf594d2e5ef456ee92a","sha256":"915656fcf71af98167173d3eae68e31f9f719aedac1647d47e0bd995bf142b6b","sha512":"a72d5f8044444bfb58212bc221f632aaa4c8dc466993b85f115757497e53ccb3ebee55b5e62cdf45ea206a791b649ea69b3d1e9471828a3f7593c5eccef183f0","ssdeep":"768:1vRHxSk+KAJw3Ch8w9Jo7nHH61/fracUD2MUp/2dNkFzKgUWvQ:RRH0pJJvJobOfecUyMxCzKgUWvQ","tlshash":"71739c528a9d3bad3ab74cbf6bdb052f7e1468ee284045cf8d2dc6d1917a090d70cca1","first_seen":"2026-02-13T10:22:49.131468Z","last_seen":"2026-02-14T10:07:43.76772Z","times_seen":2,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/ultraplugin-2.4.4.min.js","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plggycell-llve.xyz/","date":"2026-02-14T10:07:04.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /ultraplugin-2.4.4.min.js HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 10:07:04 GMT\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\netag: W/\"6cddd3b57b388912ac243ca1e816e478\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ncf-cache-status: REVALIDATED\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AIDCaOWcu2ud0BBexK6Fqt2cTyIFm00IhCyHn4O03BZgEAOeysFgT3Kw206E7bwHZtTQq6eYzuCq4bY9VwAkxXgFL5D4iESTQeJPz3bb0NUyVA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9cdbc1a4a9caddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6908800,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f804d40cabcc4d6a232d02dfc3189037","sha1":"e78f71719c5cefa0219a4703c6c965745cdc5e68","sha256":"a9de3cb503115a4e01c8bc8859df283561bfbfa4dba455cbb31957895a4c0a5e","sha512":"8dbb4c2956965c4e121744349637809a13763670ad76acf3372494d3500cbfa635be402a36dc9441febc77f4d9cd98a010e367c2a47259bf9293523f0f1d341c","ssdeep":"24576:dVz0Rksywxe+KifQk+REruk6hqDC+ksmlg372JjX2Ktf:Lz5sy5+bfQrhNhJS0L2sf","tlshash":"ce252326e034da5c952e3eddb79238e03ad71997e5811b84f98df8a334a15bc076c4b3","first_seen":"2025-10-28T18:31:17.880854Z","last_seen":"2026-02-14T10:07:43.76996Z","times_seen":8,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":243,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/favicon.ico","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/","date":"2026-02-14T10:07:05.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\ncontent-type: image/vnd.microsoft.icon\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:06 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mc60UaBUY8rq%2Fd%2BDKJADRGMdzxmIdepdtJUQGFT5tHSop3yv8XlLA2ky5QdBAjZkOCQ5duqbubX88xBfHlt93jpyzwLEdcQ0AqU3uDdooHs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"d2ecca291e208819c15c2ba823e5b0a6\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1ae8b6eddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85886,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, -112x-112, 32 bits/pixel","md5":"255e0107ad898fc76a75544d27f2b16d","sha1":"5a7e3e2c4221c98ce53dde5ef04357e107840423","sha256":"38592c2a47086a00ff5c91883d5e28daa687ccaa8157e3e0893741a5bba003fb","sha512":"7ab675b2fe8d21c64a709073c5b1385317d75afddbb09550714677fd91708cc2ad312075798f3023ea216067c7e23ad0ccb5b3dcd1835b05cf8bd6bd05742f5e","ssdeep":"384:OKvufWU/A6/avI6U2eWsAgbNLNTX9MW5PBs8fxTdGmhquUb4kt:fUBjJO","tlshash":"5a837a3b1c5a5cd9d3a83a30422e9386169aa3a4f7cc1217065c91f9d07c7e652ffc6b","first_seen":"2026-02-13T10:22:49.160451Z","last_seen":"2026-02-14T10:07:43.770561Z","times_seen":2,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/features3.png","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:09.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /features3.png HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 8468\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"e8912af076923106b934e8215886c64f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PLJOxamdnSA3GWUNcNGgnDXTDqpsJX7aMTd9Hhq5LjaKqERRnrUvJKZxiTTWJ5Q11ctj7V6zPVwGL%2BBP2e9BwRf7RWnQKwlyGocWXDi9Ss7Riw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 10:07:09 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cdbc1c14ec7ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8468,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"9b3d6b8981edb17640f9f88a4bdc7074","sha1":"086cb1125af3d556e07a66c1e63331a54847d770","sha256":"6c913714827b3ba0686aa85be32d560b52283f3e9ca9802b97f08eecffa695b7","sha512":"3ef365fef1a54b15aa2470992e227a67b787539c6c6de7d8ec089ae0ba6d509fd616229ca4658afb1cc1ded81d4c5bf1bb30037728825dc57e9cab463e008195","ssdeep":"192:pSkfQTHIzfsylEYdRmXegqw5rxsB6veEY1wRhE6gd:QkfgHITvlEYd1gf5rxsC46y","tlshash":"e902bfd8160cea3dcb4e1f4d2b17b6fcfe616100dda96092cc11dc25d5685d18d27bd6","first_seen":"2026-02-13T10:22:49.139427Z","last_seen":"2026-02-14T10:07:43.768549Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/card3.png","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:09.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /card3.png HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 204482\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"079ce924be08842eecd37ba27121cd72\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JlnJemslstsfSiwaZG0LA9jiiiNkihka0kP6%2BQniRjHF7%2F18cnbX1liAMrVSq4Sf8Wp%2FJ0mDBcCFllzi2qCxdIiJwCCbsYJ9mMQ2tMgIVYZFPQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 10:07:09 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cdbc1c16ecfddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":204482,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 472 x 315, 8-bit/color RGBA, non-interlaced","md5":"907e211f33c90c5ef5198d6c9c0fe940","sha1":"5078a4e4210c36d5201a528ea6fd3e3539067b0a","sha256":"fef01a89df6fbdfac6325874e3f328bfbdc9e0c38f843e1bb9d318cceba61540","sha512":"bac31f9bce6d45c2a32ae2789ff054cdff63d0008abe3fbe3ad1e358161b2ac632fceff97a3b8ab4a9ce5fbfa9c977d274eb12a8ee60a66e3427b4cb62c9d505","ssdeep":"6144:W6abUMjb/NFjTs2Pqzj7Dx/asjX8QRTFvZlEut:nabUQ/NFRPm7DFasjXDRFvTb","tlshash":"9a14225c40e82f26b2b5968e12f734ab973b6532c9e1136833d8bdc6d7e0c09dd81996","first_seen":"2026-02-13T10:22:49.143877Z","last_seen":"2026-02-14T10:07:43.771323Z","times_seen":2,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/shinhan.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:13.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /shinhan.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:13 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DL9t36RCoELqkfwJaGZ701H9Cx%2BpFkqHuDfW2cw%2Bg4SMg0PajRwv3TqjBQ2T5HDp3WNeC2jnskBaIIKjuOoiAZILNHayD1foTmQ7v3UcNAS05w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"25d2edc3bbb6116a21b7f86067f188ea\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1dd6d58ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22980,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"da18b50c604fac35ebeb66f5787612b4","sha1":"dc8eb9cebdb2c45514e0a17a080bf953251c5c69","sha256":"0699d678b3e38d2e1d9fba28b071b4f5c37c7ec3834787611409d9228e5d102f","sha512":"c3c89fa0ce103d272ad489cc3aaa95e59aad7c3fa9dabc192ce1a43cd1980f564875f3b67107864f13957f7663b7c21056d68fb6a0ac035d6b42c58c7ba5c529","ssdeep":"384:qOJHY1RA8ZFKwnry7vXUf7gmwcPUqZq01mwosrvOLlOceeHLqlSBWO5bIkB:vC1RZPuvcpxFqOR+ISz","tlshash":"95a2daf9a3e565e4a846e3f5fd214026ba2f68fe7b9fcb54c348dd5824524288c8dcc1","first_seen":"2026-02-13T10:22:49.150002Z","last_seen":"2026-02-14T10:07:43.772653Z","times_seen":2,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://plggycell-llve.xyz/","date":"2026-02-14T10:07:20.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 12:15:50 GMT","end":"Wed, 01 Apr 2026 13:15:39 GMT"},"fingerprint":{"sha1":"E8:04:3F:4D:91:E2:52:D3:E0:EA:F7:1A:C8:8C:94:50:7C:2E:FF:FF","sha256":"A1:8E:F1:BF:52:25:E4:EE:2D:91:8B:1E:0B:E7:A1:C3:B9:7D:DF:7D:D1:57:11:6A:14:CF:F2:A6:DF:D1:B0:18"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/\r\nOrigin: https://plggycell-llve.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 10:07:20 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9cdbc2065f6bdd81-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"35b0bce9d250429df012c0426f88d0bd","sha1":"f81d80af9cbeb0011316fbba3da8002b32251f7a","sha256":"da9add592d7eb9cca7705cb4870d7fd4e9718ccd51486c4261a727a8d566960d","sha512":"32c9df1064e730e1a2358dae62aff741118007187d89510bfbdf93efaaa7356b71a570ea8c5d96bdc0b47155bbaa77df86b6847cc4d95d2d1b7fa2a1484a7144","ssdeep":"","tlshash":"dd600003000000000c00c00cc303030303c00003c30f0000ccc00f000c003300300000","first_seen":"2023-03-07T01:19:04Z","last_seen":"2026-06-07T08:12:19.538389Z","times_seen":27001,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":7,"dns":1,"connect":10,"send":0,"wait":124,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/features3.png","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/","date":"2026-02-14T10:07:04.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /features3.png HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 8468\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"e8912af076923106b934e8215886c64f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PLJOxamdnSA3GWUNcNGgnDXTDqpsJX7aMTd9Hhq5LjaKqERRnrUvJKZxiTTWJ5Q11ctj7V6zPVwGL%2BBP2e9BwRf7RWnQKwlyGocWXDi9Ss7Riw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 10:07:04 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cdbc1a489a8ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8468,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"9b3d6b8981edb17640f9f88a4bdc7074","sha1":"086cb1125af3d556e07a66c1e63331a54847d770","sha256":"6c913714827b3ba0686aa85be32d560b52283f3e9ca9802b97f08eecffa695b7","sha512":"3ef365fef1a54b15aa2470992e227a67b787539c6c6de7d8ec089ae0ba6d509fd616229ca4658afb1cc1ded81d4c5bf1bb30037728825dc57e9cab463e008195","ssdeep":"192:pSkfQTHIzfsylEYdRmXegqw5rxsB6veEY1wRhE6gd:QkfgHITvlEYd1gf5rxsC46y","tlshash":"e902bfd8160cea3dcb4e1f4d2b17b6fcfe616100dda96092cc11dc25d5685d18d27bd6","first_seen":"2026-02-13T10:22:49.139427Z","last_seen":"2026-02-14T10:07:43.768549Z","times_seen":2,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/evo.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:09.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /evo.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:09 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pgBJxFyKHPZT1LZ3QfGsC2QSDBxm6TEglj%2BxMeAy3SPFWKgGJWlZn%2FxzOQAcY1FmtMkgrmS7hHX5zexXEL7bFXwx33SRIPivk9DXM%2B1AioqDCg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"2b32d0a32327ac2fa37e32928a0a0048\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1c17ed7ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7921,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"53101704a32eabcfe92902dac24d16b3","sha1":"0f9e4da935753d8e352727ce33f06b31db8b87c6","sha256":"da557bdb2f423bb523982906e31d4ee7e1c833152dbd263d65a5e9d413b97143","sha512":"36e5707eadc67ee362b741070a526a8da1eb9f8b1cf948ba94494ded60b4ae4605d8354bd49717195b87d07b9ac523062d9c70018627ed77355ac7418ae06850","ssdeep":"192:DvnnXL6edNf79Ps50N+RW8okI4jER5MRVOTME/4rqEfppdA:Dv76+NTyu+RWmI4jcOLOIO4rLfRA","tlshash":"caf1c8ddabb5dce9e841e3f6a74240bc364d4eb63e26cd1dc3a50c49a45286d9850cc3","first_seen":"2026-02-13T10:22:49.14593Z","last_seen":"2026-02-14T10:07:43.773565Z","times_seen":2,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/animoca.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:13.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /animoca.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:13 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vjuckXfP4Bab%2Fu%2F43HkDL%2FvEJo1T%2FX1Cy8VCBdiW8n6Twmn5Jj6xaPg%2BbQJ1bRp%2BldH%2BktF%2FmIJYUJ05wcMnu1M4MDAH9n0baGbeTvswlOGZWw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"78f454904cb180fd4a3b6f0ba191ea5a\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1ddbd6eddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15568,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a0a6c6820c423fb25dd7d8b511a47309","sha1":"deda54684cf344efba5cf8298ef15f01badcd7af","sha256":"b67b4dd98b5d87afc31fd05d03ca7b161e3dca3e02a122d6de53d1ef0ff0311b","sha512":"72e00d4001b0428ed13e9516859114bdda0120cd62c7cfaade5a44bd9e1732e7d7ce79834dc3f1fa1ee74d6ce98c1967e079608d9a14a84fd97953e087e32cbb","ssdeep":"384:1hm4pne0gHbjs45x8ziLbqHld0C2Zd6+mDp4:1QidgHbjs4H8GyHf6","tlshash":"e262b39567baa3f8f402fbf8ca2398617e5a28f53e00d1a9c3e26d61c52105dcd56cc7","first_seen":"2026-02-13T10:22:49.129727Z","last_seen":"2026-02-14T10:07:43.763074Z","times_seen":2,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":48,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/mocaverse.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:09.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /mocaverse.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:09 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ReTMjBWBynvMg40Qx%2FTievmqkxoR0SpFoLv%2BUyWwb9poZm5yF105n1mJ3aWYM%2FIFYgTsTlMKt8DoF%2FwtXVK7CYXLDuvTSgy6%2FhOSnOg2Fj8oYg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"bc3bb6da8e4c328889c5944177537f0c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1c17ed8ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":232675,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"16d1388e08f47e739adfc138e8239115","sha1":"9b5f4f99b73d6238eedfc6422abc746e7418a33d","sha256":"cb03d6520f09bfdc1877b402d6dcf41e85561ab1f879d66f8b06029d78e79a7a","sha512":"cdb3222d253a8873880e62b2866d21f6f975a23d7aa6fffcdb985952c1d7444fb5e85aaa62c7426aa19319fbcfafd367f588bac1459619889394f53581b9f8c2","ssdeep":"6144:N5BJO8wz5gDP/qJxomMOCYZC4BOsfH68VotJ2s:NHJQ9+momMLYZSsfH68itJ2s","tlshash":"0c3423247be9354c833f87793136cf8d21bc09a79a4cdbd5316b7611a9ca3d2d26170a","first_seen":"2026-02-13T10:22:49.143022Z","last_seen":"2026-02-14T10:07:43.774445Z","times_seen":2,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/dwf.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:09.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /dwf.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:09 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5NqIHlTbL9EbYQyiB2Rt%2FQt5Mj%2Bshpsm8fHcPV%2FmMuFmy5%2FgI5nGTlq6esC1%2BJdV8utTdM%2BOzepHo7l8vl163ue6sOseQlL%2BCH4fXT7%2FPYiMYQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"a82711bac5986b5dcdd46256fd4bdbfb\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1c17edbddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55964,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3b50aba589bc4d7780e09af030aa7fc3","sha1":"9c748fe72b41372f2dd132944045d7b2c790323c","sha256":"cf00c3770e119ff1c37ab8780c572e5fbddd749d1d02e9f8e7f4247da5d91edf","sha512":"aa69e3531a9e89f14de459b6fbc2acbc48e932f297cc06eb38418596cdb6e4f47f1b0da0a0f39153e00474509dac15855285549d354432cd619e911304d6b72a","ssdeep":"1536:DBZmbbqVkorL/Y8D3nA2tV9Tre96yqDM/j5KuiAwMn4MKY:DHaCkon/YI3A2tnre/V/j5V56MKY","tlshash":"4143d022b4928f2efce79d28f1565ce5ac77e8cfc0934529e7245344136f2218699ee1","first_seen":"2026-02-13T10:22:49.147991Z","last_seen":"2026-02-14T10:07:43.775339Z","times_seen":2,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/f087287d9d5fdaa8.css","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://plggycell-llve.xyz/","date":"2026-02-14T10:07:04.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /f087287d9d5fdaa8.css HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:04 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FhhcMqwYdrGQ7Jyeozjb5GgTDvuArGMmcjDngv3kQFE8gv3EQRxn3nU9SRSLznhgJ2wsvmhoNwdyH0B8xzW7N4Q%2Ba2TckecqZTVp6G6kEEqOgg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"4058071a38c2593341adb95feacde290\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1a4899fddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20334,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (20334), with no line terminators","md5":"c28d5c00e51c9069bdf5a00d6b39bd11","sha1":"27327b6f8637d0e6ee1c54a43e7ab1f63947ab07","sha256":"61ee5456f787fd0083ae716f7ea19525d0aa593b492bfcf478fa5a34dd2e4a5b","sha512":"3f63edd495e8f8dbbe03ac36824975ac0e588fe7566029ed67d13e6ecc961c4713eb2dc2cfd471033ce9a31fb7de4c1376c5dff691c314de967b05642ff1cf30","ssdeep":"192:M0KsKvExv2FgLUb1TxkefcogfM4a6xHK/45AGvndS6YiY5YAYPYGYlYZfmJYLYmO:M2KvIveff3gf/sKKL6JAPmZfmKcmO9/P","tlshash":"f39255336338335de822b856f1f46f333c2d5011d1528b75aa9c6756cb8bc6a6da2b08","first_seen":"2026-02-13T10:22:49.148984Z","last_seen":"2026-02-14T10:07:43.776304Z","times_seen":2,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/index_1.html","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://plggycell-llve.xyz/","date":"2026-02-14T10:07:04.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sat, 14 Feb 2026 10:07:04 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nvary: accept-encoding\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mZj7dJoHYFNw4GDexvY9snGzCpbNMZc2J3k%2BDPzM7rOgTWLd1Sjhlp19Iy1DCrI3Z2ZAH4RKGuI%2FDUDXZeFFR4IGvYh8s%2FR0fxg79QOlVhZqWg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncf-ray: 9cdbc1a5da0dddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Ant Design","description":"Ant Design is a UI library that can be used with data flow solutions and application frameworks in any React ecosystem.","website":"https://ant.design","common_platform_enumeration":"","icon":"Ant Design.svg","categories":["UI frameworks"]}],"data":{"size":47034,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (46994)","md5":"0a52547f4047819344c8995eb4126e52","sha1":"0f856c30c0c1fc8963fe1e25bfb0801e4f169bb6","sha256":"ce669993b262de7daa6295b0ac3fe22773fd0216dd8b04d8d665b060524721af","sha512":"92c030cfcbaeddec016fdef721a36802fa8bd6a7aa1295f68218098563ba942dc09d6c126859e3f79d8100a6331610c359f968f12c427bf88bc9818a429da29d","ssdeep":"768:4+xD4/LU/LZLQoS9LTrRpErorCrCrUGRQkDUJnRrRpErorCrCr9Rp:4s4/A/Mpxpqjpn","tlshash":"3723e9746341237bb2074bf4f422b667f02af2a8cb6bc58c76bdd1d057d6c48899a741","first_seen":"2026-02-13T10:22:49.138487Z","last_seen":"2026-02-14T10:07:43.777164Z","times_seen":2,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/logo-with-txt.png","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://plggycell-llve.xyz/","date":"2026-02-14T10:07:04.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /logo-with-txt.png HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 6146\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"2a0e3b2563f0e454232442e134e0fa2e\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ra2XIwmroTXZ0oSfj7MPZG4o6Hjn7vsEX62XtRgeWjvb9S5mLmQEsgBJSdR%2FfZmENYTDw%2FI2f7GskFooZLaN778tK3cmAfw%2F9H4JgmA3SIarSg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 10:07:04 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cdbc1a6ba37ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6146,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 58, 8-bit colormap, non-interlaced","md5":"3e4d204320a3f9932a53b2225331e8f6","sha1":"e6650b506b22ea874925e3376d997426ecae791d","sha256":"bf9a01f0fed9016dbb16947dd9b776393fbef02a03ebe1ce81493b217b66922c","sha512":"306a9864fc6971a8b9878b3db28cca4e7b08b4190b30fce3c17cb1f8ff8691c4bacb1b55b23aefa37fdf394110eac8407032f9f37fcb2b985a38d4b3d8d8bd5d","ssdeep":"96:aeWsrK9Ejo0Cua8kUzxeVjXGzy+LpYfKg+tVgdGD3l7FRK7t4YG2bRzWdaClON0:ZlY7uaJp22uNtgGDFFROHG29+Oa","tlshash":"71c18deede403aaa735f02a82c5808454b7d866039977fab845478898acfa8194b4c4f","first_seen":"2026-02-13T10:22:49.137298Z","last_seen":"2026-02-14T10:07:43.77796Z","times_seen":2,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/elevate.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:09.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /elevate.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:09 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iCVk04iH8Pt7MukW6SY2muoCQiqvD7NfxlN62vhEwa543s4GhjT6JYARBPRSROyOfWYHeJFDpedVPe%2F8LOhy2HKVHelFKD8UJwALyD9Bp%2FqCUA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"5f87ca4e85aa85a76af75f88e978e0a1\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1c1beefddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5610,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"291fe8be37b5e5f8e6f5f8579167009c","sha1":"5c7996a9a765393fce0977507bb1651f5534b8be","sha256":"0f3ffa2a44e8b118f8ca6aa89729e64494659c52fe79dad916d9496a8a99386f","sha512":"2f52ed44d98197c1ae9b6c19d0199b18bee20736cc49fcecd96768428dc78a69c117a0ebd174fceaafaada13f015baf2ffd617f739ddf8fae027a7a09a9b352d","ssdeep":"96:Wl5x8t3d9LduOfMvmAVtf7pP7MKSLDaOGIiVJ9kDooQZDnEbGiukjQdHn5oCmve:wajkua7B7MLQVJ9qooQZIuKQH5","tlshash":"44c129f186eb1499e460fa8c711e3e086d0a6ca3b724e07ca084ab745772c3e9d4dd34","first_seen":"2026-02-13T10:22:49.141266Z","last_seen":"2026-02-14T10:07:43.778779Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/bsk.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:13.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /bsk.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:13 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HyurimUIvpOIYh%2BkfPsqsNn%2BB%2FAw50qGKj5DzMQPLpNlE%2Bawx4mSAcm9XMxpfvygQdwPCrKW6q2Xvoz76psPTv9w6J8xKNuodu9gymRkaORRkQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"a4548f71f346dae7e9d84d3b1a97e424\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1dd6d5dddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17263,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e8feaf0e1e07fd5e214ee396488f9312","sha1":"d8d28c496f28d06aad2380230d57fb8ca12e7790","sha256":"2d2ea2eff13db7757916fcb7c2c7c8bdb82aa22035eb1a63628ee902de10afd9","sha512":"5aaa99ebca128ab730804bd90c644db507f1afb94639b65eec5c51165b6da8187ac25f0769fabf58d54fc1714c513a4d314e47bc775f7ef154795e97bd4bf464","ssdeep":"384:qaSyVLGT5F33FQRklijO+Nq6BdYQwJXv8MiQr+lHCo:qAGTP3f7+Nq8dSVv1iQKJCo","tlshash":"f572d0b4b61c588f58245bbc267e9e0c3c24228310fb00dad11b775bdc6b8f729280de","first_seen":"2026-02-13T10:22:49.147075Z","last_seen":"2026-02-14T10:07:43.779752Z","times_seen":2,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/shinhan.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/","date":"2026-02-14T10:07:04.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /shinhan.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:04 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DL9t36RCoELqkfwJaGZ701H9Cx%2BpFkqHuDfW2cw%2Bg4SMg0PajRwv3TqjBQ2T5HDp3WNeC2jnskBaIIKjuOoiAZILNHayD1foTmQ7v3UcNAS05w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"25d2edc3bbb6116a21b7f86067f188ea\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1a499aeddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22980,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"da18b50c604fac35ebeb66f5787612b4","sha1":"dc8eb9cebdb2c45514e0a17a080bf953251c5c69","sha256":"0699d678b3e38d2e1d9fba28b071b4f5c37c7ec3834787611409d9228e5d102f","sha512":"c3c89fa0ce103d272ad489cc3aaa95e59aad7c3fa9dabc192ce1a43cd1980f564875f3b67107864f13957f7663b7c21056d68fb6a0ac035d6b42c58c7ba5c529","ssdeep":"384:qOJHY1RA8ZFKwnry7vXUf7gmwcPUqZq01mwosrvOLlOceeHLqlSBWO5bIkB:vC1RZPuvcpxFqOR+ISz","tlshash":"95a2daf9a3e565e4a846e3f5fd214026ba2f68fe7b9fcb54c348dd5824524288c8dcc1","first_seen":"2026-02-13T10:22:49.150002Z","last_seen":"2026-02-14T10:07:43.772653Z","times_seen":2,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/ultraplugin-2.4.4.min.js","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:04.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /ultraplugin-2.4.4.min.js HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 10:07:04 GMT\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\netag: W/\"6cddd3b57b388912ac243ca1e816e478\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ncf-cache-status: REVALIDATED\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AIDCaOWcu2ud0BBexK6Fqt2cTyIFm00IhCyHn4O03BZgEAOeysFgT3Kw206E7bwHZtTQq6eYzuCq4bY9VwAkxXgFL5D4iESTQeJPz3bb0NUyVA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9cdbc1a72a59ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6908800,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f804d40cabcc4d6a232d02dfc3189037","sha1":"e78f71719c5cefa0219a4703c6c965745cdc5e68","sha256":"a9de3cb503115a4e01c8bc8859df283561bfbfa4dba455cbb31957895a4c0a5e","sha512":"8dbb4c2956965c4e121744349637809a13763670ad76acf3372494d3500cbfa635be402a36dc9441febc77f4d9cd98a010e367c2a47259bf9293523f0f1d341c","ssdeep":"24576:dVz0Rksywxe+KifQk+REruk6hqDC+ksmlg372JjX2Ktf:Lz5sy5+bfQrhNhJS0L2sf","tlshash":"ce252326e034da5c952e3eddb79238e03ad71997e5811b84f98df8a334a15bc076c4b3","first_seen":"2025-10-28T18:31:17.880854Z","last_seen":"2026-02-14T10:07:43.76996Z","times_seen":8,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":125,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/sky.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:13.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /sky.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:13 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R6rTjAg1Irqj%2B4ZcbhDXyt%2B6o4orZVs08GBZZfFdWDA1zYSpKmksikCGPU6yMGgziqNcRfz1ub%2F1pJxEXh%2Bw2mrmJ8k8LCkYqaNxM69TPbK19w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"eee0fe8397c4ad962abab26a9ae88d59\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1ddbd76ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114143,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9fcf8a435fb9ea9d138e1c32c4df7c85","sha1":"9605669bdc8e19023141510943b6433c0e3e3035","sha256":"cd49d92b68c32d626db8d8bfd948d3d70e1e74cd23a64dd10a9419ec742e10de","sha512":"49b1da931722404db711f30a136e2886ae2ed4d123b57cc60fda293ebf0c617d93eb80c0bed46403583bcf8b6937af3a2ac4ae44f9bf9028a72659996ce3544a","ssdeep":"3072:ZcAmwHNZLuc0YBF0kLDp4houg0Eh5otspQMRZxz:ZccNZLZDBEM0oOtK5Zt","tlshash":"94b30277960c8c0d95f6f3ff40f260a8ebe685d32698e7e1b092ea55e3458d4cd49388","first_seen":"2026-02-13T10:22:49.151039Z","last_seen":"2026-02-14T10:07:43.780586Z","times_seen":2,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":40,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bsc-dataseed4.bnbchain.org/","fqdn":"bsc-dataseed4.bnbchain.org","domain":"bnbchain.org","tld":"org"},"ip":{"addr":"3.248.65.63","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://plggycell-llve.xyz/","date":"2026-02-14T10:07:20.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"bnbchain.org","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 09 May 2025 00:00:00 GMT","end":"Mon, 08 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"60:A4:BE:0F:33:E9:DC:36:3B:B7:3C:5A:E4:42:EE:DE:F1:46:52:E4","sha256":"15:55:B7:24:9E:06:40:29:6B:D0:0D:FD:D2:2B:02:D8:1B:63:50:F2:26:B3:56:69:5D:9D:DF:3E:40:64:99:5E"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: bsc-dataseed4.bnbchain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://plggycell-llve.xyz/\r\nOrigin: https://plggycell-llve.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 14 Feb 2026 10:07:20 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T00:37:19.234622Z","times_seen":17946405,"resource_available":true,"data":null}},"time_used":820,"timings":{"blocked":357,"dns":44,"connect":36,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"binance.nodereal.io/","fqdn":"binance.nodereal.io","domain":"nodereal.io","tld":"io"},"ip":{"addr":"34.241.56.170","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://plggycell-llve.xyz/","date":"2026-02-14T10:07:20.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.nodereal.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0C:EC:8E:68:9E:56:EA:CE:48:DE:13:D2:0C:5B:55:18:C3:74:A8:48","sha256":"09:E3:92:97:59:92:96:9A:A3:FC:76:BF:B6:57:D8:2B:24:69:0C:72:DB:30:57:8C:4A:F2:4B:56:9E:2E:65:1F"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: binance.nodereal.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://plggycell-llve.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"method\":\"eth_call\",\"params\":[{\"to\":\"0x158862Ec60B7934f1333e53AC1e148811A2E3BeB\",\"data\":\"0x53ed5143\"},\"latest\"],\"id\":1,\"jsonrpc\":\"2.0\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 10:07:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-nr-trace-id: fe81d6a122d7c1e40e2ccc995abc46a7\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6374,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fa3dbe9e7a67f351ee2d52c99850bf9c","sha1":"294cd26f4c0198841057707ed0b44b3cf616e5a8","sha256":"efe3b5e2a041edfb73e010d9c7b8321b7c075c78f0b5d972fe7783da8844f87b","sha512":"d46f4edc8d511404ba6bb32a1a375a1a1c66b24a11f072dbe332243df7b1489af0816a8506fb648a97dd28b0c5ceac714915bc46221ef78d12e9a8a5f1d51d45","ssdeep":"24:YUtXa257vaoWH3eGZsthXvUzZ5+hdex1qx1xxNU6xvQaNBtXX60jv:YKam3QytxvU15+doY1jNNTt9jv","tlshash":"52d108f098c98e50f19baa81b798bc9400213caf7fdf8f40415cf8b6a0f54a176a448f","first_seen":"2025-04-07T11:53:19.749574Z","last_seen":"2026-08-09T15:35:30.721565Z","times_seen":5261,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/card3.png","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/","date":"2026-02-14T10:07:04.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /card3.png HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 204482\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"079ce924be08842eecd37ba27121cd72\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JlnJemslstsfSiwaZG0LA9jiiiNkihka0kP6%2BQniRjHF7%2F18cnbX1liAMrVSq4Sf8Wp%2FJ0mDBcCFllzi2qCxdIiJwCCbsYJ9mMQ2tMgIVYZFPQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 10:07:04 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cdbc1a499adddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":204482,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 472 x 315, 8-bit/color RGBA, non-interlaced","md5":"907e211f33c90c5ef5198d6c9c0fe940","sha1":"5078a4e4210c36d5201a528ea6fd3e3539067b0a","sha256":"fef01a89df6fbdfac6325874e3f328bfbdc9e0c38f843e1bb9d318cceba61540","sha512":"bac31f9bce6d45c2a32ae2789ff054cdff63d0008abe3fbe3ad1e358161b2ac632fceff97a3b8ab4a9ce5fbfa9c977d274eb12a8ee60a66e3427b4cb62c9d505","ssdeep":"6144:W6abUMjb/NFjTs2Pqzj7Dx/asjX8QRTFvZlEut:nabUQ/NFRPm7DFasjXDRFvTb","tlshash":"9a14225c40e82f26b2b5968e12f734ab973b6532c9e1136833d8bdc6d7e0c09dd81996","first_seen":"2026-02-13T10:22:49.143877Z","last_seen":"2026-02-14T10:07:43.771323Z","times_seen":2,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/rwa.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/","date":"2026-02-14T10:07:04.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /rwa.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:04 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BdkevJszMkBF5Bs%2F1zrnBsPVsdCe6pKHJ1GMcYeE8a%2BRDatso%2BMHWptM4ZKC7ElA%2FDWyJzh9b6Obf6JG2gKSdh2N%2BmcCcYaonoS0BnORDSbFUg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"ce9909f9c05f4c4a399c55dd6ae82a45\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1a4a9c4ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2229,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"67888d752c45838b60527ac95cff7b32","sha1":"c2403b4dc4a7f236e849ecbf3e1e4ef6d8df8bc3","sha256":"38315624ed62a0d77b1291a0f2c54f90e1fd33814a4f9ab75b2eb1aa8d2e9d21","sha512":"759dd9a64ea18f4d46de963aa7c072f00e74109fbffa2559d4040222d973e4ec9d0a71a06819167eb7936902ed3a33bbc6bae184b085953c94483e2e9140071e","ssdeep":"","tlshash":"af4174fa7589f116f008e7fdca08f479142769e26746d060c3a76e0fb86049e694cdc7","first_seen":"2026-02-13T10:22:49.14487Z","last_seen":"2026-02-14T10:07:43.783456Z","times_seen":2,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/f087287d9d5fdaa8.css","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:04.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /f087287d9d5fdaa8.css HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:04 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FhhcMqwYdrGQ7Jyeozjb5GgTDvuArGMmcjDngv3kQFE8gv3EQRxn3nU9SRSLznhgJ2wsvmhoNwdyH0B8xzW7N4Q%2Ba2TckecqZTVp6G6kEEqOgg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"4058071a38c2593341adb95feacde290\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1a72a4eddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20334,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (20334), with no line terminators","md5":"c28d5c00e51c9069bdf5a00d6b39bd11","sha1":"27327b6f8637d0e6ee1c54a43e7ab1f63947ab07","sha256":"61ee5456f787fd0083ae716f7ea19525d0aa593b492bfcf478fa5a34dd2e4a5b","sha512":"3f63edd495e8f8dbbe03ac36824975ac0e588fe7566029ed67d13e6ecc961c4713eb2dc2cfd471033ce9a31fb7de4c1376c5dff691c314de967b05642ff1cf30","ssdeep":"192:M0KsKvExv2FgLUb1TxkefcogfM4a6xHK/45AGvndS6YiY5YAYPYGYlYZfmJYLYmO:M2KvIveff3gf/sKKL6JAPmZfmKcmO9/P","tlshash":"f39255336338335de822b856f1f46f333c2d5011d1528b75aa9c6756cb8bc6a6da2b08","first_seen":"2026-02-13T10:22:49.148984Z","last_seen":"2026-02-14T10:07:43.776304Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/cb3500299af9588b.css","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:04.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /cb3500299af9588b.css HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:04 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=or7suSuCcmQLndStnu2S7qZV5mXymrEkkGvB43gMVxbReG7T1NK68ZhBmeGaWDwaGkbhU3bfJS4SK32kLXAYHoaVH%2FJxrWLfiBy5uBULoGusWA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"3e46a1fca53676441b27d089d3130a6c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1a72a58ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38014,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (35784)","md5":"dbedaef61a2bb7974e948a389731b85c","sha1":"b593e185ea65238b8214a2c27ee2039c2fa6e4dd","sha256":"6be134dc675b9caf5c05e314197898c15793f57ade3e10b9c78a77d8aefeaf08","sha512":"791e63cc6fa2df20048379e3b94e99c91932856f4c47477cfbca403ea482a0e2c5c87eef022cb5b6e97fd9a80c7a312d82a6ebbb1f9764cb11bc7b4eeea6bfeb","ssdeep":"768:GnSIZOrvaU42hRykE+EoB2qlPWrJ8I6h1kC7sbBcACaEeVXJ:GnSIZOrvaU42hRykE+7B2qlPK8I6h1kh","tlshash":"0a03b89eab59213fbc2b81f1c0f57aac7127e180df2255e6fd025220db92af71963714","first_seen":"2026-02-13T10:22:49.155555Z","last_seen":"2026-02-14T10:07:43.78423Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/card2.png","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:09.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /card2.png HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 148406\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"643ce379bb7ffdfd05c74bccc8ba67c0\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fg0jPVZ1aq5gN9GaYXg3DNUG4Wfr4qx67H2RXVtCrE4Iq2n5ci7SJuwsqKiOfUn1Og%2FlLxa53HED6U%2Favby%2B3eIkL5s0YlrwSDDcmE%2F3xcc3jQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 10:07:09 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cdbc1c16ecdddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":148406,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 472 x 315, 8-bit/color RGBA, non-interlaced","md5":"8097c5ea3809b733eff29a3ae84b27b2","sha1":"6e0ac3e4e770183ab7825cd0ca7b9c067b1e4294","sha256":"d5f09236ac6ca4ad9c34f66f124995b35d6099253398644babfd5104eae1bd5e","sha512":"c01585e1457209aa9d4088e9f3ce1f2f00793b96a4c86dd3ca57e72efee17b2133fae45779015f2bf2f012a21c421cb32a4bd85e46215ead9256751e84b962f5","ssdeep":"3072:Q/a6S/ZPRtAUDfudcIXa62/hE7OzFG6aLoumBGlUmxZqg6O9TD:QS6SBJtAt9v2P+IBGug6O9TD","tlshash":"28e3135bd0a1efbbd302b76cdff532644948f385658eb18093ab366266789f3c860641","first_seen":"2026-02-13T10:22:49.159312Z","last_seen":"2026-02-14T10:07:43.785038Z","times_seen":2,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/sky.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:09.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /sky.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:09 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R6rTjAg1Irqj%2B4ZcbhDXyt%2B6o4orZVs08GBZZfFdWDA1zYSpKmksikCGPU6yMGgziqNcRfz1ub%2F1pJxEXh%2Bw2mrmJ8k8LCkYqaNxM69TPbK19w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"eee0fe8397c4ad962abab26a9ae88d59\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1c1bef4ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114143,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9fcf8a435fb9ea9d138e1c32c4df7c85","sha1":"9605669bdc8e19023141510943b6433c0e3e3035","sha256":"cd49d92b68c32d626db8d8bfd948d3d70e1e74cd23a64dd10a9419ec742e10de","sha512":"49b1da931722404db711f30a136e2886ae2ed4d123b57cc60fda293ebf0c617d93eb80c0bed46403583bcf8b6937af3a2ac4ae44f9bf9028a72659996ce3544a","ssdeep":"3072:ZcAmwHNZLuc0YBF0kLDp4houg0Eh5otspQMRZxz:ZccNZLZDBEM0oOtK5Zt","tlshash":"94b30277960c8c0d95f6f3ff40f260a8ebe685d32698e7e1b092ea55e3458d4cd49388","first_seen":"2026-02-13T10:22:49.151039Z","last_seen":"2026-02-14T10:07:43.780586Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/galxe.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:09.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /galxe.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:09 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3QE93GFJp2S2NiHnGujZomfY%2FtXAezgPXd1u4pm2E8sRxrmdDtcDwovslnlaaEHVdFqzsiKZPn4fg3oFKQJmgmNbspaUilS3%2BgplqsiDPePurQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"8792821e23874547c8f8041c3e5d12b3\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1c1bef5ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4255,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c4c5fda75359002ed6ee1e242f3540c7","sha1":"c474affee2dd1809f73718ebf9740dff13e448c1","sha256":"b14e2f5b1344a0ac3b4932e7cfb80a0a12df33792d7d70fa600ac9a23a3d5e5e","sha512":"4189a7b8876202b207e9793b4a5575744d72c1ed1c90eb8d47ced39a7e66eb851229f962c139bda2970cd578ad1c06ea73b95a63070119b4f7ce179d89e88971","ssdeep":"96:4ndiUhjVbk823OnmHntQtSbK9UXtIRyx9tMuvHnU/YhL1u:4diUnk8qWmHCmK693t/vHn5hJu","tlshash":"8d91b5dc6bf586e8fe06dbfab742a6357442a4bba9964e1cc3e44f14b50244cc844ce2","first_seen":"2026-02-13T10:22:49.116494Z","last_seen":"2026-02-14T10:07:43.761019Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/f087287d9d5fdaa8.css","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:13.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /f087287d9d5fdaa8.css HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:13 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FhhcMqwYdrGQ7Jyeozjb5GgTDvuArGMmcjDngv3kQFE8gv3EQRxn3nU9SRSLznhgJ2wsvmhoNwdyH0B8xzW7N4Q%2Ba2TckecqZTVp6G6kEEqOgg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"4058071a38c2593341adb95feacde290\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1dc9d32ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20334,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (20334), with no line terminators","md5":"c28d5c00e51c9069bdf5a00d6b39bd11","sha1":"27327b6f8637d0e6ee1c54a43e7ab1f63947ab07","sha256":"61ee5456f787fd0083ae716f7ea19525d0aa593b492bfcf478fa5a34dd2e4a5b","sha512":"3f63edd495e8f8dbbe03ac36824975ac0e588fe7566029ed67d13e6ecc961c4713eb2dc2cfd471033ce9a31fb7de4c1376c5dff691c314de967b05642ff1cf30","ssdeep":"192:M0KsKvExv2FgLUb1TxkefcogfM4a6xHK/45AGvndS6YiY5YAYPYGYlYZfmJYLYmO:M2KvIveff3gf/sKKL6JAPmZfmKcmO9/P","tlshash":"f39255336338335de822b856f1f46f333c2d5011d1528b75aa9c6756cb8bc6a6da2b08","first_seen":"2026-02-13T10:22:49.148984Z","last_seen":"2026-02-14T10:07:43.776304Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/sky.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/","date":"2026-02-14T10:07:04.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /sky.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:04 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R6rTjAg1Irqj%2B4ZcbhDXyt%2B6o4orZVs08GBZZfFdWDA1zYSpKmksikCGPU6yMGgziqNcRfz1ub%2F1pJxEXh%2Bw2mrmJ8k8LCkYqaNxM69TPbK19w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"eee0fe8397c4ad962abab26a9ae88d59\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1a4a9c8ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114143,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9fcf8a435fb9ea9d138e1c32c4df7c85","sha1":"9605669bdc8e19023141510943b6433c0e3e3035","sha256":"cd49d92b68c32d626db8d8bfd948d3d70e1e74cd23a64dd10a9419ec742e10de","sha512":"49b1da931722404db711f30a136e2886ae2ed4d123b57cc60fda293ebf0c617d93eb80c0bed46403583bcf8b6937af3a2ac4ae44f9bf9028a72659996ce3544a","ssdeep":"3072:ZcAmwHNZLuc0YBF0kLDp4houg0Eh5otspQMRZxz:ZccNZLZDBEM0oOtK5Zt","tlshash":"94b30277960c8c0d95f6f3ff40f260a8ebe685d32698e7e1b092ea55e3458d4cd49388","first_seen":"2026-02-13T10:22:49.151039Z","last_seen":"2026-02-14T10:07:43.780586Z","times_seen":2,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/cb3500299af9588b.css","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://plggycell-llve.xyz/","date":"2026-02-14T10:07:04.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /cb3500299af9588b.css HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:04 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=or7suSuCcmQLndStnu2S7qZV5mXymrEkkGvB43gMVxbReG7T1NK68ZhBmeGaWDwaGkbhU3bfJS4SK32kLXAYHoaVH%2FJxrWLfiBy5uBULoGusWA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"3e46a1fca53676441b27d089d3130a6c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1a489a3ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38014,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (35784)","md5":"dbedaef61a2bb7974e948a389731b85c","sha1":"b593e185ea65238b8214a2c27ee2039c2fa6e4dd","sha256":"6be134dc675b9caf5c05e314197898c15793f57ade3e10b9c78a77d8aefeaf08","sha512":"791e63cc6fa2df20048379e3b94e99c91932856f4c47477cfbca403ea482a0e2c5c87eef022cb5b6e97fd9a80c7a312d82a6ebbb1f9764cb11bc7b4eeea6bfeb","ssdeep":"768:GnSIZOrvaU42hRykE+EoB2qlPWrJ8I6h1kC7sbBcACaEeVXJ:GnSIZOrvaU42hRykE+7B2qlPK8I6h1kh","tlshash":"0a03b89eab59213fbc2b81f1c0f57aac7127e180df2255e6fd025220db92af71963714","first_seen":"2026-02-13T10:22:49.155555Z","last_seen":"2026-02-14T10:07:43.78423Z","times_seen":2,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/features1.png","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/","date":"2026-02-14T10:07:04.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /features1.png HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 7590\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"c96d2840070fc618334b23e2cc075bbc\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MgVbKG5d%2B59NWs6Put86EdTaPcDrhCxiQoz7PF3cZgB3cmA0Bs%2BrnMWqq5pxktSYI9rUrxITKlU2l%2FtxycReGe8QryF7Iw6mNjn5yMgnppG%2Fig%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 10:07:08 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cdbc1a489a6ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7590,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"f0af88f09cedf244f37a8dfd25352ec7","sha1":"b7c5fd2ca018f1fa9f691efd7eb68d0d9948c8ef","sha256":"cf6110ed3fce3e78d392985cbf9961cdb067246423a24e9b6e3ea3c462a90c0b","sha512":"d92bb55d0b932e2aaf2bec9914e95e2c4579f060f2f7003a29979de2c2d7886042a6418913bffe854a9bfe32c57c0f66b29ff65db94631e3ba53ea62981139a8","ssdeep":"192:pSEPhRZes6B3IuFQy9O+wbnS7dOYqEm7+cM/+sM:QEPjyIuFQH+gSMTM/+D","tlshash":"f8f1ae8eb00058753bde61613de96874ecb060f81a577178c752b7a39f0a9d63b6b2c8","first_seen":"2026-02-13T10:22:49.156617Z","last_seen":"2026-02-14T10:07:43.765654Z","times_seen":2,"resource_available":false,"data":null}},"time_used":4021,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4020,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/hana.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/","date":"2026-02-14T10:07:04.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /hana.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:04 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sGbvIe%2BnbRZ58COKUjQ79fmWnaeQyh47mz0q8jZZI3uapY%2BwwHFu%2BTM%2FDP6o1OZqJzW76NSyUG1d3595mNy7Zzxw6NaZzuBTKyYc80XZsZU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"42cb709bed4ace00d85acfd198be4f10\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1a499afddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10131,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6c5f5e1585962ca5343c92e2842dc8d4","sha1":"6cea13fc75c35b59115ca13fc111e0d7671f2c0b","sha256":"7de8db128cc86d41e331058e3a0cadf2e23c0a421e8e18b7bae7e84cc56f2f49","sha512":"ef329eae8772516a952d1f42aef613d7a279683159dc5a199a28adb2296e7e5084bd44d84e10ba540fe3323e8c407e5063f681efc257b0b4323e02e644409d0f","ssdeep":"192:ILfiUxlKG+1feGJUS1I+gcnzJ4yOaylPn6wDgpu3JXkJ4zoVfjuwL:IuUxgGO5J91IG4yO9nDB3JXgrZ","tlshash":"9022bfb6a00d4f7fc918263649fb853c8fed0c9b666ad497c1d10c08458c75a7aa2b8f","first_seen":"2026-02-13T10:22:49.162062Z","last_seen":"2026-02-14T10:07:43.764235Z","times_seen":2,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/bg-hero.webp","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/","date":"2026-02-14T10:07:04.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /bg-hero.webp HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 129596\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/webp\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"aa7209c76a89c0376c6ef7b16f356b47\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hbv3P9g55QRSYmRJucCTpYvOZjUaPcx%2FYzxlOTFVu6bbdl6kts4N5IKbf4Qc0gr8QixWkXofMVNfXrJsQQVegqUCeqagHfOq6pziH9xxirLmFQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 10:07:04 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cdbc1a62a1addf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":129596,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4d39b85067df495a0ffc5d86bf0fb88a","sha1":"5e547720bdeebb70520e66d297775b9f5925f07a","sha256":"0a738063998ac30ee71105087c5c633efc3b376ffd42051521f570bb277b7e97","sha512":"c3dd60a3d1fc91f8ef2e48211193bfd69672be7ea651f6ba8547ef1866fc7362e167c9651e8a17fbffb067ff747b3540631d1ef0c891b54f32242177b93617c3","ssdeep":"3072:TApXTsMddJBTiyAVrZuj7Mk6FmOEe89WAn93nENW8vMGH4knxTB:UpjsGHAhQMk6mOj2WKnQxZH4SB","tlshash":"0fc312d833df185bca5cf26002f79e19bd4d78145ac269a2f5069cb5e31b8fb828f245","first_seen":"2026-02-13T10:22:49.163123Z","last_seen":"2026-02-14T10:07:43.785918Z","times_seen":2,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/card1.png","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:09.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /card1.png HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 191079\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"0f5f65ba5c45291985e851ebe5a3d284\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dkO3l7K2LmEYtYE4duBpelFfO2MKRcgJaFQVgP9cxbiShGXuIXOwl9q9ZUm9NtBcs2OWu36Bde90fMcVuJOiFWyOPaoTOAR4QDjLVBiCn1s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 10:07:09 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cdbc1c16eccddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":191079,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 472 x 315, 8-bit/color RGBA, non-interlaced","md5":"1165ba4bde0c2a72824c74a22675bb5e","sha1":"53fdc773f9e489d122fec6c07bd3483f485bbf0a","sha256":"d23a9cfde140dc25aa67ac1a40a845f3b6166be994a8f65de591a0c1de35a2ec","sha512":"2b071a7ac856108edf9dbabc78365750cee58d42da722122337341c47f11ffe2f634cba0728d2bb553208fd7796fe28e83976e6f040538c25fa5c8e3faac2cd2","ssdeep":"3072:23BhcprB8kBwO+9QKWXMUmgplaeQEQ4P5Wdv2OVxvTg0S15PZieVCeI5MVZdKpWB:UcdTBw39QlX7KEQK4Fx21Zi5JoZdKMv5","tlshash":"e7141256e141ed9190e8af130a8213db3dda726ac5f70fe609da0f2a31d11de524efe4","first_seen":"2026-02-13T10:22:49.13597Z","last_seen":"2026-02-14T10:07:43.786776Z","times_seen":2,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/jb.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:09.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /jb.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:09 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7ysKAaPdrWL9xsBZQnHM3%2Bctl7QsDzVX7uIXmL1NEb3J0Do3%2BN2sQOwBmbI%2B37L1ITqzP4AzIls8CtEc39JUYU1HmB3Q0vQDGf1TSqgW2ko%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"783bf23fec309d0e98df8b5706b5cf43\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1c16ed4ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11485,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b244384d07feccdb2b66a759687694f4","sha1":"cf874cbd5666e401fab0481f87d2a1c2b143b6e1","sha256":"9adeb3bed4ad44fcba877b7249a5149196e08c8086edbe22833b51480dcd8dd3","sha512":"503fb22a2283a474e11beb216df8a1662ec69f8aec7e24c1a910db7b8755553a54f1d5106190f8f82fa22c197a41026aec1388ab93ab9c6244c438925c803487","ssdeep":"192:Vh6VEVL4+URzIaV96OwclxLC/3zTAYxbPhBJQEayWKiClVRZKXg/o:P6VEVoIAC/PAavaFpClLe+o","tlshash":"7732b070d609ed0d0e6822d7e12c2fec7ad315835bad06ffc8511b8e21168f6a4775a7","first_seen":"2026-02-13T10:22:49.151932Z","last_seen":"2026-02-14T10:07:43.787693Z","times_seen":2,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/index_1.html","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:09.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sat, 14 Feb 2026 10:07:09 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nvary: accept-encoding\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QVaKimKvVnbcBVVdo9tWE5x3hM5h0zSHStR%2BYjmZnI97XE5mjTcUy1QL8ci3KNY%2BWvMPs%2BqOFPyCI3QX5GTkFVqt6Ifol6tjF7BDh58nfXqchQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncf-ray: 9cdbc1c17edcddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ant Design","description":"Ant Design is a UI library that can be used with data flow solutions and application frameworks in any React ecosystem.","website":"https://ant.design","common_platform_enumeration":"","icon":"Ant Design.svg","categories":["UI frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47034,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (46994)","md5":"0a52547f4047819344c8995eb4126e52","sha1":"0f856c30c0c1fc8963fe1e25bfb0801e4f169bb6","sha256":"ce669993b262de7daa6295b0ac3fe22773fd0216dd8b04d8d665b060524721af","sha512":"92c030cfcbaeddec016fdef721a36802fa8bd6a7aa1295f68218098563ba942dc09d6c126859e3f79d8100a6331610c359f968f12c427bf88bc9818a429da29d","ssdeep":"768:4+xD4/LU/LZLQoS9LTrRpErorCrCrUGRQkDUJnRrRpErorCrCr9Rp:4s4/A/Mpxpqjpn","tlshash":"3723e9746341237bb2074bf4f422b667f02af2a8cb6bc58c76bdd1d057d6c48899a741","first_seen":"2026-02-13T10:22:49.138487Z","last_seen":"2026-02-14T10:07:43.777164Z","times_seen":2,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/icp.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/","date":"2026-02-14T10:07:04.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /icp.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:04 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=weRW3Tr6ltpd1ueTlsT50CC9zANpF9UfB9NoLSlP5mUC7JFyrr2W%2FTQlB8ZxgNJDFzsi4e2a7nf77K82ORdNzgKuKvGdgpTeALYs09OgWGEZkw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"ec3b59c86b02fa5b4a293ae8051ff061\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1a4a9beddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5807,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a057d6931ba0bfddc2cd0f04c120e8f4","sha1":"2ec6184d33577c89a12a1aee5180d3a800da8513","sha256":"a92b648a7d2d56e9b3eb3844e54398afbcbf29f04dfa397113e25901870f4e52","sha512":"0fe58a470d7c631f72477da46554a20659717d208c2778848e20d68a914614159886506c62c37caf9f90767d61912ced54dfee80f450b86128e28e07d829a005","ssdeep":"96:mw26/X1ao5P+VViv8PZgeranB98kHtux4HP4UDwgE96Cajj5rpWd1NDgJmxratUx:ml6/X1ao5Ucv8x1anB9dHUx4vbkICSj8","tlshash":"1ac1a5dd2bf5cba8e58462fdee22543d310408f66915c219c3e06eaab41645d9e0fac3","first_seen":"2026-02-13T10:22:49.15292Z","last_seen":"2026-02-14T10:07:43.788559Z","times_seen":2,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/animoca.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:09.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /animoca.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:09 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vjuckXfP4Bab%2Fu%2F43HkDL%2FvEJo1T%2FX1Cy8VCBdiW8n6Twmn5Jj6xaPg%2BbQJ1bRp%2BldH%2BktF%2FmIJYUJ05wcMnu1M4MDAH9n0baGbeTvswlOGZWw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"78f454904cb180fd4a3b6f0ba191ea5a\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1c17ed9ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15568,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a0a6c6820c423fb25dd7d8b511a47309","sha1":"deda54684cf344efba5cf8298ef15f01badcd7af","sha256":"b67b4dd98b5d87afc31fd05d03ca7b161e3dca3e02a122d6de53d1ef0ff0311b","sha512":"72e00d4001b0428ed13e9516859114bdda0120cd62c7cfaade5a44bd9e1732e7d7ce79834dc3f1fa1ee74d6ce98c1967e079608d9a14a84fd97953e087e32cbb","ssdeep":"384:1hm4pne0gHbjs45x8ziLbqHld0C2Zd6+mDp4:1QidgHbjs4H8GyHf6","tlshash":"e262b39567baa3f8f402fbf8ca2398617e5a28f53e00d1a9c3e26d61c52105dcd56cc7","first_seen":"2026-02-13T10:22:49.129727Z","last_seen":"2026-02-14T10:07:43.763074Z","times_seen":2,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/kt.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:13.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /kt.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:13 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=88DpX3PepCeKxtRaAElmoddcY9XUsXZc2dD1sRDfxwAj8XmX4dYVcKTBZUw8%2B7VvIJznDxESZM1p5Onp0wD45qOsxzeG8Kfrjv908PJNkB7mYA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"caa47c0d35bd4c4cb1565e694f655be8\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1dd6d5cddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7059,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ff1631b09e5277cf7605b807bf5f3874","sha1":"e2f2fd3768cc7febe95ae236271c4cad3128f3d0","sha256":"920b06aa9059bd2ef4302cc97a36697170960e0dea0edee9b21e5728bd3c2546","sha512":"dbcd4fedaa359f81dc93e100f1b2edcd96458807bef3d7889be046ce266acd6ab12cbdefcc9c6a88bbf540fe7a592015320c4b986dc6dae8dc3c60f24d3ca7dd","ssdeep":"192:FSmInYgoICnoiL6nboObboKLVeSipHf3/C:S/uoi6bNbF8fPC","tlshash":"efe19e73331885eac18a755926ed7402ec2d20c5d69cd2c646d0f2761f1961baf337ee","first_seen":"2026-02-13T10:22:49.13339Z","last_seen":"2026-02-14T10:07:43.766569Z","times_seen":2,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/rwa.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:13.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /rwa.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:13 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BdkevJszMkBF5Bs%2F1zrnBsPVsdCe6pKHJ1GMcYeE8a%2BRDatso%2BMHWptM4ZKC7ElA%2FDWyJzh9b6Obf6JG2gKSdh2N%2BmcCcYaonoS0BnORDSbFUg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"ce9909f9c05f4c4a399c55dd6ae82a45\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1ddbd74ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2229,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"67888d752c45838b60527ac95cff7b32","sha1":"c2403b4dc4a7f236e849ecbf3e1e4ef6d8df8bc3","sha256":"38315624ed62a0d77b1291a0f2c54f90e1fd33814a4f9ab75b2eb1aa8d2e9d21","sha512":"759dd9a64ea18f4d46de963aa7c072f00e74109fbffa2559d4040222d973e4ec9d0a71a06819167eb7936902ed3a33bbc6bae184b085953c94483e2e9140071e","ssdeep":"","tlshash":"af4174fa7589f116f008e7fdca08f479142769e26746d060c3a76e0fb86049e694cdc7","first_seen":"2026-02-13T10:22:49.14487Z","last_seen":"2026-02-14T10:07:43.783456Z","times_seen":2,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":39,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"binance.nodereal.io/","fqdn":"binance.nodereal.io","domain":"nodereal.io","tld":"io"},"ip":{"addr":"34.241.56.170","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://plggycell-llve.xyz/","date":"2026-02-14T10:07:20.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.nodereal.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"0C:EC:8E:68:9E:56:EA:CE:48:DE:13:D2:0C:5B:55:18:C3:74:A8:48","sha256":"09:E3:92:97:59:92:96:9A:A3:FC:76:BF:B6:57:D8:2B:24:69:0C:72:DB:30:57:8C:4A:F2:4B:56:9E:2E:65:1F"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: binance.nodereal.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://plggycell-llve.xyz/\r\nOrigin: https://plggycell-llve.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 14 Feb 2026 10:07:20 GMT\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 600\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubdomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-18T00:37:19.234622Z","times_seen":17946405,"resource_available":true,"data":null}},"time_used":717,"timings":{"blocked":305,"dns":31,"connect":32,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/foundation.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:09.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /foundation.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:09 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CYNxvhKT2MV4KBRACuMRSWoA7EPkWHjnbBCgOQWMj2SoGXzj%2FP2bWJ0qW%2BZwDo%2BAL%2Ba7Rb3NcQqqwB8ZTA0C%2Fa%2FiXJGOaO4F96d64hhC0WSJRw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"55d55e29ea236c9565c63fe82cfb9491\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1c1bef0ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99402,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f2bb3949a694a2d4892ddcb1f94159a1","sha1":"2ebfe329a2115ff505fa8104e39c78613b70dcbc","sha256":"8847d00ab18acff2e9231c6efdef86940a8907a781957af7d8649ce777785ee0","sha512":"51ced2c59a8cf92ef3777b060db84d0d4837764a21209c4298ccc97fa9c1fdefae4977a02ab91532d2b2692852a5d28f9c42090f1819e017e09973a4cc66ae79","ssdeep":"3072:MjPbz1G6R/YHyjoIeHh6F2bsvvj75q04e5kT:EdVNuuYYTv4eWT","tlshash":"f6a3024359a66c720858b474613b0e053cdd056fc9e6ebff8bfad395518812b03f62a3","first_seen":"2026-02-13T10:22:49.134587Z","last_seen":"2026-02-14T10:07:43.789687Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/ibc.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:09.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /ibc.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:09 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7fBG%2BVIDKhfPwou6848u%2BdrqYNqxlHf%2F5dvoDDJcozPG5DVAfcHxeVIkDsPsraoV0kZjmt1lqqge2OvsT07WH8IkN3R1hCLwJ1QcnmSBoVb%2B3A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6dd84d2144e2368cb3c21d59843e9b02\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1c1bef3ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19928,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fb766182b8feaa5dc0b5aa446a62c18f","sha1":"515294de31a614c7a4231c965c5a5d884a10f5f1","sha256":"25e71ae01fd369e3c00f5f76d8f1d163b7b48de61d73349b77cec595f818f23b","sha512":"cb4a79ef7f1bfbcaabb2872535933469ad34f429469b10b840d650e75b6b292fcf20d42d5fb95c4a559fc8e5300f23eb4a36da422cea319aba04d0c9680af652","ssdeep":"384:AuPph63tAv2Yidfjnxyz2HS4liCX4uUytGGj66xqOV77sozlpRNFB+:Ayy3tkBidfjo6HS4QWtquIKnFB+","tlshash":"cd92b7dd77b452f8b844d7fb9763106a342278fa7aa9d710c2886f4da4428cc5c2e9d3","first_seen":"2026-02-13T10:22:49.124046Z","last_seen":"2026-02-14T10:07:43.790472Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/features2.png","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:13.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /features2.png HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 10435\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"f1215d50ab8e12e888bf9d215af90964\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9srkkkMfGBcVNqbvuSynRPVRTgw0eKJ3cKiOx2tEvOUQPKRK6CsaYDAE%2BHAtwWFX4xutfnWRXCPsqsLaZ4X6MC6WswB6J79rMZHGyxNBBxEifQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 10:07:13 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cdbc1dcfd43ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10435,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"102d007706296f78140d29a0724418f8","sha1":"cd5ea1390c523158055074b132fb3343bf237401","sha256":"f90556594df7013192ce7f3962b8b70a2e501f0d2b6f993ee8d02bdba3e47e68","sha512":"036d6f20280d74c26870fd50ca4f6a098d81cd8b59efc7a696bf01cf75ef0ade9252ca28a9d4b8448baeaa4d5abd70f6881509f63771617064b97333e9610dec","ssdeep":"192:pS4uAUZfwUJXwgU15d2V6ltleSXOFDF4b6j0V0hO+XdbbMGPXjxLZs0tobG3:Q4uAUZfw2xU1b2V6lfew6wItbvtL+0tF","tlshash":"2b22a027f48101d461101bad1afc6a375e555f8085393278df2b6f9c3250e8af3dba6d","first_seen":"2026-02-13T10:22:49.15457Z","last_seen":"2026-02-14T10:07:43.791328Z","times_seen":2,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/hitenjiro.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:13.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /hitenjiro.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:13 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=icsfFz85VBrpTUIAE7UrLqp%2BG%2BQNMxH%2BV7%2F%2Bj6qK2s2ASGXByg4IeNR76xghb76%2BwUpfvcTndjmEZ406Pa7gWgncm5fVZzMZojDaqrRGnucF3Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"7812a650c6256f514060457018caa208\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1dd6d5bddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19980,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"15bc2280c10db22934f2dad73dba3a63","sha1":"88cbc4d8643c185a7cd3c8d5b5aa0863b63f6b23","sha256":"179bb4d0178e264aa8fa6dabcdefa202220ef5a2950f4e78284e35cd9ee72ad6","sha512":"7cddb6a730bfe0917bce38f382d642bfae6c13c65fd716fa5f434397fdd7d133d65f01fd0a000072a7b7ce8ca416167c430cb8482ea2f84c814c8bcc90600b99","ssdeep":"384:Gl2EC40OWpBu7tBi+CHOkjmJonl4GC/nmphQYvQXvGNOlGVv4FKLv5k+sc0tP0:GUEC/luhB1QrjmJml2khzQfZQVPLhk+P","tlshash":"6f92d1b4691205bf1ecc8a29e3442d87f418a077c6b4f1af10de034b650994b3d15efe","first_seen":"2026-02-13T10:22:49.14039Z","last_seen":"2026-02-14T10:07:43.792121Z","times_seen":2,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/dwf.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:13.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /dwf.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:13 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5NqIHlTbL9EbYQyiB2Rt%2FQt5Mj%2Bshpsm8fHcPV%2FmMuFmy5%2FgI5nGTlq6esC1%2BJdV8utTdM%2BOzepHo7l8vl163ue6sOseQlL%2BCH4fXT7%2FPYiMYQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"a82711bac5986b5dcdd46256fd4bdbfb\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1ddbd6fddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55964,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3b50aba589bc4d7780e09af030aa7fc3","sha1":"9c748fe72b41372f2dd132944045d7b2c790323c","sha256":"cf00c3770e119ff1c37ab8780c572e5fbddd749d1d02e9f8e7f4247da5d91edf","sha512":"aa69e3531a9e89f14de459b6fbc2acbc48e932f297cc06eb38418596cdb6e4f47f1b0da0a0f39153e00474509dac15855285549d354432cd619e911304d6b72a","ssdeep":"1536:DBZmbbqVkorL/Y8D3nA2tV9Tre96yqDM/j5KuiAwMn4MKY:DHaCkon/YI3A2tnre/V/j5V56MKY","tlshash":"4143d022b4928f2efce79d28f1565ce5ac77e8cfc0934529e7245344136f2218699ee1","first_seen":"2026-02-13T10:22:49.147991Z","last_seen":"2026-02-14T10:07:43.775339Z","times_seen":2,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":41,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/elevate.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:13.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /elevate.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:13 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iCVk04iH8Pt7MukW6SY2muoCQiqvD7NfxlN62vhEwa543s4GhjT6JYARBPRSROyOfWYHeJFDpedVPe%2F8LOhy2HKVHelFKD8UJwALyD9Bp%2FqCUA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"5f87ca4e85aa85a76af75f88e978e0a1\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1ddbd72ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5610,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"291fe8be37b5e5f8e6f5f8579167009c","sha1":"5c7996a9a765393fce0977507bb1651f5534b8be","sha256":"0f3ffa2a44e8b118f8ca6aa89729e64494659c52fe79dad916d9496a8a99386f","sha512":"2f52ed44d98197c1ae9b6c19d0199b18bee20736cc49fcecd96768428dc78a69c117a0ebd174fceaafaada13f015baf2ffd617f739ddf8fae027a7a09a9b352d","ssdeep":"96:Wl5x8t3d9LduOfMvmAVtf7pP7MKSLDaOGIiVJ9kDooQZDnEbGiukjQdHn5oCmve:wajkua7B7MLQVJ9qooQZIuKQH5","tlshash":"44c129f186eb1499e460fa8c711e3e086d0a6ca3b724e07ca084ab745772c3e9d4dd34","first_seen":"2026-02-13T10:22:49.141266Z","last_seen":"2026-02-14T10:07:43.778779Z","times_seen":2,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":43,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/jb.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/","date":"2026-02-14T10:07:04.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /jb.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:04 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7ysKAaPdrWL9xsBZQnHM3%2Bctl7QsDzVX7uIXmL1NEb3J0Do3%2BN2sQOwBmbI%2B37L1ITqzP4AzIls8CtEc39JUYU1HmB3Q0vQDGf1TSqgW2ko%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"783bf23fec309d0e98df8b5706b5cf43\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1a499b5ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11485,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b244384d07feccdb2b66a759687694f4","sha1":"cf874cbd5666e401fab0481f87d2a1c2b143b6e1","sha256":"9adeb3bed4ad44fcba877b7249a5149196e08c8086edbe22833b51480dcd8dd3","sha512":"503fb22a2283a474e11beb216df8a1662ec69f8aec7e24c1a910db7b8755553a54f1d5106190f8f82fa22c197a41026aec1388ab93ab9c6244c438925c803487","ssdeep":"192:Vh6VEVL4+URzIaV96OwclxLC/3zTAYxbPhBJQEayWKiClVRZKXg/o:P6VEVoIAC/PAavaFpClLe+o","tlshash":"7732b070d609ed0d0e6822d7e12c2fec7ad315835bad06ffc8511b8e21168f6a4775a7","first_seen":"2026-02-13T10:22:49.151932Z","last_seen":"2026-02-14T10:07:43.787693Z","times_seen":2,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/evo.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/","date":"2026-02-14T10:07:04.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /evo.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:04 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pgBJxFyKHPZT1LZ3QfGsC2QSDBxm6TEglj%2BxMeAy3SPFWKgGJWlZn%2FxzOQAcY1FmtMkgrmS7hHX5zexXEL7bFXwx33SRIPivk9DXM%2B1AioqDCg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"2b32d0a32327ac2fa37e32928a0a0048\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1a499b8ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7921,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"53101704a32eabcfe92902dac24d16b3","sha1":"0f9e4da935753d8e352727ce33f06b31db8b87c6","sha256":"da557bdb2f423bb523982906e31d4ee7e1c833152dbd263d65a5e9d413b97143","sha512":"36e5707eadc67ee362b741070a526a8da1eb9f8b1cf948ba94494ded60b4ae4605d8354bd49717195b87d07b9ac523062d9c70018627ed77355ac7418ae06850","ssdeep":"192:DvnnXL6edNf79Ps50N+RW8okI4jER5MRVOTME/4rqEfppdA:Dv76+NTyu+RWmI4jcOLOIO4rLfRA","tlshash":"caf1c8ddabb5dce9e841e3f6a74240bc364d4eb63e26cd1dc3a50c49a45286d9850cc3","first_seen":"2026-02-13T10:22:49.14593Z","last_seen":"2026-02-14T10:07:43.773565Z","times_seen":2,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/elevate.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/","date":"2026-02-14T10:07:04.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /elevate.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:04 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iCVk04iH8Pt7MukW6SY2muoCQiqvD7NfxlN62vhEwa543s4GhjT6JYARBPRSROyOfWYHeJFDpedVPe%2F8LOhy2HKVHelFKD8UJwALyD9Bp%2FqCUA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"5f87ca4e85aa85a76af75f88e978e0a1\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1a4a9c1ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5610,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"291fe8be37b5e5f8e6f5f8579167009c","sha1":"5c7996a9a765393fce0977507bb1651f5534b8be","sha256":"0f3ffa2a44e8b118f8ca6aa89729e64494659c52fe79dad916d9496a8a99386f","sha512":"2f52ed44d98197c1ae9b6c19d0199b18bee20736cc49fcecd96768428dc78a69c117a0ebd174fceaafaada13f015baf2ffd617f739ddf8fae027a7a09a9b352d","ssdeep":"96:Wl5x8t3d9LduOfMvmAVtf7pP7MKSLDaOGIiVJ9kDooQZDnEbGiukjQdHn5oCmve:wajkua7B7MLQVJ9qooQZIuKQH5","tlshash":"44c129f186eb1499e460fa8c711e3e086d0a6ca3b724e07ca084ab745772c3e9d4dd34","first_seen":"2026-02-13T10:22:49.141266Z","last_seen":"2026-02-14T10:07:43.778779Z","times_seen":2,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/features2.png","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:09.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /features2.png HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 10435\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"f1215d50ab8e12e888bf9d215af90964\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9srkkkMfGBcVNqbvuSynRPVRTgw0eKJ3cKiOx2tEvOUQPKRK6CsaYDAE%2BHAtwWFX4xutfnWRXCPsqsLaZ4X6MC6WswB6J79rMZHGyxNBBxEifQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 10:07:09 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cdbc1c14ec6ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10435,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"102d007706296f78140d29a0724418f8","sha1":"cd5ea1390c523158055074b132fb3343bf237401","sha256":"f90556594df7013192ce7f3962b8b70a2e501f0d2b6f993ee8d02bdba3e47e68","sha512":"036d6f20280d74c26870fd50ca4f6a098d81cd8b59efc7a696bf01cf75ef0ade9252ca28a9d4b8448baeaa4d5abd70f6881509f63771617064b97333e9610dec","ssdeep":"192:pS4uAUZfwUJXwgU15d2V6ltleSXOFDF4b6j0V0hO+XdbbMGPXjxLZs0tobG3:Q4uAUZfw2xU1b2V6lfew6wItbvtL+0tF","tlshash":"2b22a027f48101d461101bad1afc6a375e555f8085393278df2b6f9c3250e8af3dba6d","first_seen":"2026-02-13T10:22:49.15457Z","last_seen":"2026-02-14T10:07:43.791328Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/shinhan.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:09.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /shinhan.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:09 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DL9t36RCoELqkfwJaGZ701H9Cx%2BpFkqHuDfW2cw%2Bg4SMg0PajRwv3TqjBQ2T5HDp3WNeC2jnskBaIIKjuOoiAZILNHayD1foTmQ7v3UcNAS05w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"25d2edc3bbb6116a21b7f86067f188ea\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1c16ed3ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22980,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"da18b50c604fac35ebeb66f5787612b4","sha1":"dc8eb9cebdb2c45514e0a17a080bf953251c5c69","sha256":"0699d678b3e38d2e1d9fba28b071b4f5c37c7ec3834787611409d9228e5d102f","sha512":"c3c89fa0ce103d272ad489cc3aaa95e59aad7c3fa9dabc192ce1a43cd1980f564875f3b67107864f13957f7663b7c21056d68fb6a0ac035d6b42c58c7ba5c529","ssdeep":"384:qOJHY1RA8ZFKwnry7vXUf7gmwcPUqZq01mwosrvOLlOceeHLqlSBWO5bIkB:vC1RZPuvcpxFqOR+ISz","tlshash":"95a2daf9a3e565e4a846e3f5fd214026ba2f68fe7b9fcb54c348dd5824524288c8dcc1","first_seen":"2026-02-13T10:22:49.150002Z","last_seen":"2026-02-14T10:07:43.772653Z","times_seen":2,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/features1.png","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:13.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /features1.png HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 7590\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"c96d2840070fc618334b23e2cc075bbc\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5MgxJiJptlEtaz1TOBgH0mheIzdrxmL%2F4sjnj2h2QZwgV1eBUQgDlpr8I9SgYODfbwOsXvIrH5ZRej4ct7l8TfSXKfUAKZWjA%2FxD0z1MAdGQeg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 10:07:13 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cdbc1dcfd42ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7590,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"f0af88f09cedf244f37a8dfd25352ec7","sha1":"b7c5fd2ca018f1fa9f691efd7eb68d0d9948c8ef","sha256":"cf6110ed3fce3e78d392985cbf9961cdb067246423a24e9b6e3ea3c462a90c0b","sha512":"d92bb55d0b932e2aaf2bec9914e95e2c4579f060f2f7003a29979de2c2d7886042a6418913bffe854a9bfe32c57c0f66b29ff65db94631e3ba53ea62981139a8","ssdeep":"192:pSEPhRZes6B3IuFQy9O+wbnS7dOYqEm7+cM/+sM:QEPjyIuFQH+gSMTM/+D","tlshash":"f8f1ae8eb00058753bde61613de96874ecb060f81a577178c752b7a39f0a9d63b6b2c8","first_seen":"2026-02-13T10:22:49.156617Z","last_seen":"2026-02-14T10:07:43.765654Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T10:07:03.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 10:07:04 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iBIKH5i%2FKPylCh%2Feii9Q4nSRCzOrmdc8v258gvmw1bFK%2F8Nqmge%2BLm8gFqkvjzIHWY1QwoA22h7qcbyED0He%2BvJqQSH1bMSiIUoLqWVGEkGvGw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9cdbc1a2adc42f72-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Ant Design","description":"Ant Design is a UI library that can be used with data flow solutions and application frameworks in any React ecosystem.","website":"https://ant.design","common_platform_enumeration":"","icon":"Ant Design.svg","categories":["UI frameworks"]}],"data":{"size":47034,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (46994)","md5":"0a52547f4047819344c8995eb4126e52","sha1":"0f856c30c0c1fc8963fe1e25bfb0801e4f169bb6","sha256":"ce669993b262de7daa6295b0ac3fe22773fd0216dd8b04d8d665b060524721af","sha512":"92c030cfcbaeddec016fdef721a36802fa8bd6a7aa1295f68218098563ba942dc09d6c126859e3f79d8100a6331610c359f968f12c427bf88bc9818a429da29d","ssdeep":"768:4+xD4/LU/LZLQoS9LTrRpErorCrCrUGRQkDUJnRrRpErorCrCr9Rp:4s4/A/Mpxpqjpn","tlshash":"3723e9746341237bb2074bf4f422b667f02af2a8cb6bc58c76bdd1d057d6c48899a741","first_seen":"2026-02-13T10:22:49.138487Z","last_seen":"2026-02-14T10:07:43.777164Z","times_seen":2,"resource_available":false,"data":null}},"time_used":592,"timings":{"blocked":240,"dns":208,"connect":9,"send":0,"wait":107,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/features2.png","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/","date":"2026-02-14T10:07:04.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /features2.png HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 10435\r\ncf-cache-status: MISS\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"f1215d50ab8e12e888bf9d215af90964\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9srkkkMfGBcVNqbvuSynRPVRTgw0eKJ3cKiOx2tEvOUQPKRK6CsaYDAE%2BHAtwWFX4xutfnWRXCPsqsLaZ4X6MC6WswB6J79rMZHGyxNBBxEifQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 10:07:04 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cdbc1a489a7ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10435,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced","md5":"102d007706296f78140d29a0724418f8","sha1":"cd5ea1390c523158055074b132fb3343bf237401","sha256":"f90556594df7013192ce7f3962b8b70a2e501f0d2b6f993ee8d02bdba3e47e68","sha512":"036d6f20280d74c26870fd50ca4f6a098d81cd8b59efc7a696bf01cf75ef0ade9252ca28a9d4b8448baeaa4d5abd70f6881509f63771617064b97333e9610dec","ssdeep":"192:pS4uAUZfwUJXwgU15d2V6ltleSXOFDF4b6j0V0hO+XdbbMGPXjxLZs0tobG3:Q4uAUZfw2xU1b2V6lfew6wItbvtL+0tF","tlshash":"2b22a027f48101d461101bad1afc6a375e555f8085393278df2b6f9c3250e8af3dba6d","first_seen":"2026-02-13T10:22:49.15457Z","last_seen":"2026-02-14T10:07:43.791328Z","times_seen":2,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/bsk.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/","date":"2026-02-14T10:07:04.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /bsk.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:04 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HyurimUIvpOIYh%2BkfPsqsNn%2BB%2FAw50qGKj5DzMQPLpNlE%2Bawx4mSAcm9XMxpfvygQdwPCrKW6q2Xvoz76psPTv9w6J8xKNuodu9gymRkaORRkQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"a4548f71f346dae7e9d84d3b1a97e424\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1a499b6ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17263,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e8feaf0e1e07fd5e214ee396488f9312","sha1":"d8d28c496f28d06aad2380230d57fb8ca12e7790","sha256":"2d2ea2eff13db7757916fcb7c2c7c8bdb82aa22035eb1a63628ee902de10afd9","sha512":"5aaa99ebca128ab730804bd90c644db507f1afb94639b65eec5c51165b6da8187ac25f0769fabf58d54fc1714c513a4d314e47bc775f7ef154795e97bd4bf464","ssdeep":"384:qaSyVLGT5F33FQRklijO+Nq6BdYQwJXv8MiQr+lHCo:qAGTP3f7+Nq8dSVv1iQKJCo","tlshash":"f572d0b4b61c588f58245bbc267e9e0c3c24228310fb00dad11b775bdc6b8f729280de","first_seen":"2026-02-13T10:22:49.147075Z","last_seen":"2026-02-14T10:07:43.779752Z","times_seen":2,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/cb3500299af9588b.css","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:13.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /cb3500299af9588b.css HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\ncontent-type: text/css; charset=utf-8\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:13 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=or7suSuCcmQLndStnu2S7qZV5mXymrEkkGvB43gMVxbReG7T1NK68ZhBmeGaWDwaGkbhU3bfJS4SK32kLXAYHoaVH%2FJxrWLfiBy5uBULoGusWA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"3e46a1fca53676441b27d089d3130a6c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1dc9d33ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38014,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (35784)","md5":"dbedaef61a2bb7974e948a389731b85c","sha1":"b593e185ea65238b8214a2c27ee2039c2fa6e4dd","sha256":"6be134dc675b9caf5c05e314197898c15793f57ade3e10b9c78a77d8aefeaf08","sha512":"791e63cc6fa2df20048379e3b94e99c91932856f4c47477cfbca403ea482a0e2c5c87eef022cb5b6e97fd9a80c7a312d82a6ebbb1f9764cb11bc7b4eeea6bfeb","ssdeep":"768:GnSIZOrvaU42hRykE+EoB2qlPWrJ8I6h1kC7sbBcACaEeVXJ:GnSIZOrvaU42hRykE+7B2qlPK8I6h1kh","tlshash":"0a03b89eab59213fbc2b81f1c0f57aac7127e180df2255e6fd025220db92af71963714","first_seen":"2026-02-13T10:22:49.155555Z","last_seen":"2026-02-14T10:07:43.78423Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/hana.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:13.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /hana.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:13 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sGbvIe%2BnbRZ58COKUjQ79fmWnaeQyh47mz0q8jZZI3uapY%2BwwHFu%2BTM%2FDP6o1OZqJzW76NSyUG1d3595mNy7Zzxw6NaZzuBTKyYc80XZsZU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"42cb709bed4ace00d85acfd198be4f10\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1dd6d5addf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10131,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6c5f5e1585962ca5343c92e2842dc8d4","sha1":"6cea13fc75c35b59115ca13fc111e0d7671f2c0b","sha256":"7de8db128cc86d41e331058e3a0cadf2e23c0a421e8e18b7bae7e84cc56f2f49","sha512":"ef329eae8772516a952d1f42aef613d7a279683159dc5a199a28adb2296e7e5084bd44d84e10ba540fe3323e8c407e5063f681efc257b0b4323e02e644409d0f","ssdeep":"192:ILfiUxlKG+1feGJUS1I+gcnzJ4yOaylPn6wDgpu3JXkJ4zoVfjuwL:IuUxgGO5J91IG4yO9nDB3JXgrZ","tlshash":"9022bfb6a00d4f7fc918263649fb853c8fed0c9b666ad497c1d10c08458c75a7aa2b8f","first_seen":"2026-02-13T10:22:49.162062Z","last_seen":"2026-02-14T10:07:43.764235Z","times_seen":2,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/evo.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:13.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /evo.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:13 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pgBJxFyKHPZT1LZ3QfGsC2QSDBxm6TEglj%2BxMeAy3SPFWKgGJWlZn%2FxzOQAcY1FmtMkgrmS7hHX5zexXEL7bFXwx33SRIPivk9DXM%2B1AioqDCg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"2b32d0a32327ac2fa37e32928a0a0048\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1ddbd6cddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7921,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"53101704a32eabcfe92902dac24d16b3","sha1":"0f9e4da935753d8e352727ce33f06b31db8b87c6","sha256":"da557bdb2f423bb523982906e31d4ee7e1c833152dbd263d65a5e9d413b97143","sha512":"36e5707eadc67ee362b741070a526a8da1eb9f8b1cf948ba94494ded60b4ae4605d8354bd49717195b87d07b9ac523062d9c70018627ed77355ac7418ae06850","ssdeep":"192:DvnnXL6edNf79Ps50N+RW8okI4jER5MRVOTME/4rqEfppdA:Dv76+NTyu+RWmI4jcOLOIO4rLfRA","tlshash":"caf1c8ddabb5dce9e841e3f6a74240bc364d4eb63e26cd1dc3a50c49a45286d9850cc3","first_seen":"2026-02-13T10:22:49.14593Z","last_seen":"2026-02-14T10:07:43.773565Z","times_seen":2,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/mocaverse.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:13.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /mocaverse.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:13 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ReTMjBWBynvMg40Qx%2FTievmqkxoR0SpFoLv%2BUyWwb9poZm5yF105n1mJ3aWYM%2FIFYgTsTlMKt8DoF%2FwtXVK7CYXLDuvTSgy6%2FhOSnOg2Fj8oYg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"bc3bb6da8e4c328889c5944177537f0c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1ddbd6dddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":232675,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"16d1388e08f47e739adfc138e8239115","sha1":"9b5f4f99b73d6238eedfc6422abc746e7418a33d","sha256":"cb03d6520f09bfdc1877b402d6dcf41e85561ab1f879d66f8b06029d78e79a7a","sha512":"cdb3222d253a8873880e62b2866d21f6f975a23d7aa6fffcdb985952c1d7444fb5e85aaa62c7426aa19319fbcfafd367f588bac1459619889394f53581b9f8c2","ssdeep":"6144:N5BJO8wz5gDP/qJxomMOCYZC4BOsfH68VotJ2s:NHJQ9+momMLYZSsfH68itJ2s","tlshash":"0c3423247be9354c833f87793136cf8d21bc09a79a4cdbd5316b7611a9ca3d2d26170a","first_seen":"2026-02-13T10:22:49.143022Z","last_seen":"2026-02-14T10:07:43.774445Z","times_seen":2,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":49,"dns":0,"connect":0,"send":0,"wait":56,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/icp.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:13.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /icp.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:13 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=weRW3Tr6ltpd1ueTlsT50CC9zANpF9UfB9NoLSlP5mUC7JFyrr2W%2FTQlB8ZxgNJDFzsi4e2a7nf77K82ORdNzgKuKvGdgpTeALYs09OgWGEZkw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"ec3b59c86b02fa5b4a293ae8051ff061\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1ddbd70ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5807,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a057d6931ba0bfddc2cd0f04c120e8f4","sha1":"2ec6184d33577c89a12a1aee5180d3a800da8513","sha256":"a92b648a7d2d56e9b3eb3844e54398afbcbf29f04dfa397113e25901870f4e52","sha512":"0fe58a470d7c631f72477da46554a20659717d208c2778848e20d68a914614159886506c62c37caf9f90767d61912ced54dfee80f450b86128e28e07d829a005","ssdeep":"96:mw26/X1ao5P+VViv8PZgeranB98kHtux4HP4UDwgE96Cajj5rpWd1NDgJmxratUx:ml6/X1ao5Ucv8x1anB9dHUx4vbkICSj8","tlshash":"1ac1a5dd2bf5cba8e58462fdee22543d310408f66915c219c3e06eaab41645d9e0fac3","first_seen":"2026-02-13T10:22:49.15292Z","last_seen":"2026-02-14T10:07:43.788559Z","times_seen":2,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":44,"dns":0,"connect":0,"send":0,"wait":77,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/card1.png","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/","date":"2026-02-14T10:07:04.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /card1.png HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 191079\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"0f5f65ba5c45291985e851ebe5a3d284\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dkO3l7K2LmEYtYE4duBpelFfO2MKRcgJaFQVgP9cxbiShGXuIXOwl9q9ZUm9NtBcs2OWu36Bde90fMcVuJOiFWyOPaoTOAR4QDjLVBiCn1s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 10:07:04 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cdbc1a489abddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":191079,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 472 x 315, 8-bit/color RGBA, non-interlaced","md5":"1165ba4bde0c2a72824c74a22675bb5e","sha1":"53fdc773f9e489d122fec6c07bd3483f485bbf0a","sha256":"d23a9cfde140dc25aa67ac1a40a845f3b6166be994a8f65de591a0c1de35a2ec","sha512":"2b071a7ac856108edf9dbabc78365750cee58d42da722122337341c47f11ffe2f634cba0728d2bb553208fd7796fe28e83976e6f040538c25fa5c8e3faac2cd2","ssdeep":"3072:23BhcprB8kBwO+9QKWXMUmgplaeQEQ4P5Wdv2OVxvTg0S15PZieVCeI5MVZdKpWB:UcdTBw39QlX7KEQK4Fx21Zi5JoZdKMv5","tlshash":"e7141256e141ed9190e8af130a8213db3dda726ac5f70fe609da0f2a31d11de524efe4","first_seen":"2026-02-13T10:22:49.13597Z","last_seen":"2026-02-14T10:07:43.786776Z","times_seen":2,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/card2.png","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/","date":"2026-02-14T10:07:04.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /card2.png HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 148406\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"643ce379bb7ffdfd05c74bccc8ba67c0\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fg0jPVZ1aq5gN9GaYXg3DNUG4Wfr4qx67H2RXVtCrE4Iq2n5ci7SJuwsqKiOfUn1Og%2FlLxa53HED6U%2Favby%2B3eIkL5s0YlrwSDDcmE%2F3xcc3jQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 10:07:04 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cdbc1a489acddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":148406,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 472 x 315, 8-bit/color RGBA, non-interlaced","md5":"8097c5ea3809b733eff29a3ae84b27b2","sha1":"6e0ac3e4e770183ab7825cd0ca7b9c067b1e4294","sha256":"d5f09236ac6ca4ad9c34f66f124995b35d6099253398644babfd5104eae1bd5e","sha512":"c01585e1457209aa9d4088e9f3ce1f2f00793b96a4c86dd3ca57e72efee17b2133fae45779015f2bf2f012a21c421cb32a4bd85e46215ead9256751e84b962f5","ssdeep":"3072:Q/a6S/ZPRtAUDfudcIXa62/hE7OzFG6aLoumBGlUmxZqg6O9TD:QS6SBJtAt9v2P+IBGug6O9TD","tlshash":"28e3135bd0a1efbbd302b76cdff532644948f385658eb18093ab366266789f3c860641","first_seen":"2026-02-13T10:22:49.159312Z","last_seen":"2026-02-14T10:07:43.785038Z","times_seen":2,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/kt.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/","date":"2026-02-14T10:07:04.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /kt.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:04 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=88DpX3PepCeKxtRaAElmoddcY9XUsXZc2dD1sRDfxwAj8XmX4dYVcKTBZUw8%2B7VvIJznDxESZM1p5Onp0wD45qOsxzeG8Kfrjv908PJNkB7mYA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"caa47c0d35bd4c4cb1565e694f655be8\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1a499b7ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7059,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ff1631b09e5277cf7605b807bf5f3874","sha1":"e2f2fd3768cc7febe95ae236271c4cad3128f3d0","sha256":"920b06aa9059bd2ef4302cc97a36697170960e0dea0edee9b21e5728bd3c2546","sha512":"dbcd4fedaa359f81dc93e100f1b2edcd96458807bef3d7889be046ce266acd6ab12cbdefcc9c6a88bbf540fe7a592015320c4b986dc6dae8dc3c60f24d3ca7dd","ssdeep":"192:FSmInYgoICnoiL6nboObboKLVeSipHf3/C:S/uoi6bNbF8fPC","tlshash":"efe19e73331885eac18a755926ed7402ec2d20c5d69cd2c646d0f2761f1961baf337ee","first_seen":"2026-02-13T10:22:49.13339Z","last_seen":"2026-02-14T10:07:43.766569Z","times_seen":2,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/dwf.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/","date":"2026-02-14T10:07:04.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /dwf.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:04 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5NqIHlTbL9EbYQyiB2Rt%2FQt5Mj%2Bshpsm8fHcPV%2FmMuFmy5%2FgI5nGTlq6esC1%2BJdV8utTdM%2BOzepHo7l8vl163ue6sOseQlL%2BCH4fXT7%2FPYiMYQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"a82711bac5986b5dcdd46256fd4bdbfb\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1a4a9bdddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55964,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3b50aba589bc4d7780e09af030aa7fc3","sha1":"9c748fe72b41372f2dd132944045d7b2c790323c","sha256":"cf00c3770e119ff1c37ab8780c572e5fbddd749d1d02e9f8e7f4247da5d91edf","sha512":"aa69e3531a9e89f14de459b6fbc2acbc48e932f297cc06eb38418596cdb6e4f47f1b0da0a0f39153e00474509dac15855285549d354432cd619e911304d6b72a","ssdeep":"1536:DBZmbbqVkorL/Y8D3nA2tV9Tre96yqDM/j5KuiAwMn4MKY:DHaCkon/YI3A2tnre/V/j5V56MKY","tlshash":"4143d022b4928f2efce79d28f1565ce5ac77e8cfc0934529e7245344136f2218699ee1","first_seen":"2026-02-13T10:22:49.147991Z","last_seen":"2026-02-14T10:07:43.775339Z","times_seen":2,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/card2.png","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:13.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /card2.png HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 148406\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"643ce379bb7ffdfd05c74bccc8ba67c0\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fg0jPVZ1aq5gN9GaYXg3DNUG4Wfr4qx67H2RXVtCrE4Iq2n5ci7SJuwsqKiOfUn1Og%2FlLxa53HED6U%2Favby%2B3eIkL5s0YlrwSDDcmE%2F3xcc3jQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 10:07:13 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cdbc1dd0d47ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":148406,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 472 x 315, 8-bit/color RGBA, non-interlaced","md5":"8097c5ea3809b733eff29a3ae84b27b2","sha1":"6e0ac3e4e770183ab7825cd0ca7b9c067b1e4294","sha256":"d5f09236ac6ca4ad9c34f66f124995b35d6099253398644babfd5104eae1bd5e","sha512":"c01585e1457209aa9d4088e9f3ce1f2f00793b96a4c86dd3ca57e72efee17b2133fae45779015f2bf2f012a21c421cb32a4bd85e46215ead9256751e84b962f5","ssdeep":"3072:Q/a6S/ZPRtAUDfudcIXa62/hE7OzFG6aLoumBGlUmxZqg6O9TD:QS6SBJtAt9v2P+IBGug6O9TD","tlshash":"28e3135bd0a1efbbd302b76cdff532644948f385658eb18093ab366266789f3c860641","first_seen":"2026-02-13T10:22:49.159312Z","last_seen":"2026-02-14T10:07:43.785038Z","times_seen":2,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/meta.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:13.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /meta.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:13 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JhnE8ejUV7ET%2BvbW%2ByVb8Tc4ABIdoPsrM9ADnw1SiLqauXhRPCuMDjSlt9SrguTx7tjoLu2Ocfk0UgXVFKCvhqdD%2FChRcXX7hFUKhq7hlLCGFA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"99b12e2739b47fdefa4e1f68e1ce15b5\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1ddbd75ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74510,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8f5a4bd15a536555d7a9ceec7295978a","sha1":"52e1b1ad8f36aeab4014bdf594d2e5ef456ee92a","sha256":"915656fcf71af98167173d3eae68e31f9f719aedac1647d47e0bd995bf142b6b","sha512":"a72d5f8044444bfb58212bc221f632aaa4c8dc466993b85f115757497e53ccb3ebee55b5e62cdf45ea206a791b649ea69b3d1e9471828a3f7593c5eccef183f0","ssdeep":"768:1vRHxSk+KAJw3Ch8w9Jo7nHH61/fracUD2MUp/2dNkFzKgUWvQ:RRH0pJJvJobOfecUyMxCzKgUWvQ","tlshash":"71739c528a9d3bad3ab74cbf6bdb052f7e1468ee284045cf8d2dc6d1917a090d70cca1","first_seen":"2026-02-13T10:22:49.131468Z","last_seen":"2026-02-14T10:07:43.76772Z","times_seen":2,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/ibc.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:13.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /ibc.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:13 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7fBG%2BVIDKhfPwou6848u%2BdrqYNqxlHf%2F5dvoDDJcozPG5DVAfcHxeVIkDsPsraoV0kZjmt1lqqge2OvsT07WH8IkN3R1hCLwJ1QcnmSBoVb%2B3A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6dd84d2144e2368cb3c21d59843e9b02\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1ddbd73ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19928,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fb766182b8feaa5dc0b5aa446a62c18f","sha1":"515294de31a614c7a4231c965c5a5d884a10f5f1","sha256":"25e71ae01fd369e3c00f5f76d8f1d163b7b48de61d73349b77cec595f818f23b","sha512":"cb4a79ef7f1bfbcaabb2872535933469ad34f429469b10b840d650e75b6b292fcf20d42d5fb95c4a559fc8e5300f23eb4a36da422cea319aba04d0c9680af652","ssdeep":"384:AuPph63tAv2Yidfjnxyz2HS4liCX4uUytGGj66xqOV77sozlpRNFB+:Ayy3tkBidfjo6HS4QWtquIKnFB+","tlshash":"cd92b7dd77b452f8b844d7fb9763106a342278fa7aa9d710c2886f4da4428cc5c2e9d3","first_seen":"2026-02-13T10:22:49.124046Z","last_seen":"2026-02-14T10:07:43.790472Z","times_seen":2,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":36,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/galxe.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:13.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /galxe.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:13 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3QE93GFJp2S2NiHnGujZomfY%2FtXAezgPXd1u4pm2E8sRxrmdDtcDwovslnlaaEHVdFqzsiKZPn4fg3oFKQJmgmNbspaUilS3%2BgplqsiDPePurQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"8792821e23874547c8f8041c3e5d12b3\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1ddbd77ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4255,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c4c5fda75359002ed6ee1e242f3540c7","sha1":"c474affee2dd1809f73718ebf9740dff13e448c1","sha256":"b14e2f5b1344a0ac3b4932e7cfb80a0a12df33792d7d70fa600ac9a23a3d5e5e","sha512":"4189a7b8876202b207e9793b4a5575744d72c1ed1c90eb8d47ced39a7e66eb851229f962c139bda2970cd578ad1c06ea73b95a63070119b4f7ce179d89e88971","ssdeep":"96:4ndiUhjVbk823OnmHntQtSbK9UXtIRyx9tMuvHnU/YhL1u:4diUnk8qWmHCmK693t/vHn5hJu","tlshash":"8d91b5dc6bf586e8fe06dbfab742a6357442a4bba9964e1cc3e44f14b50244cc844ce2","first_seen":"2026-02-13T10:22:49.116494Z","last_seen":"2026-02-14T10:07:43.761019Z","times_seen":2,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/foundation.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/","date":"2026-02-14T10:07:04.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /foundation.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:04 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CYNxvhKT2MV4KBRACuMRSWoA7EPkWHjnbBCgOQWMj2SoGXzj%2FP2bWJ0qW%2BZwDo%2BAL%2Ba7Rb3NcQqqwB8ZTA0C%2Fa%2FiXJGOaO4F96d64hhC0WSJRw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"55d55e29ea236c9565c63fe82cfb9491\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1a4a9c3ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99402,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f2bb3949a694a2d4892ddcb1f94159a1","sha1":"2ebfe329a2115ff505fa8104e39c78613b70dcbc","sha256":"8847d00ab18acff2e9231c6efdef86940a8907a781957af7d8649ce777785ee0","sha512":"51ced2c59a8cf92ef3777b060db84d0d4837764a21209c4298ccc97fa9c1fdefae4977a02ab91532d2b2692852a5d28f9c42090f1819e017e09973a4cc66ae79","ssdeep":"3072:MjPbz1G6R/YHyjoIeHh6F2bsvvj75q04e5kT:EdVNuuYYTv4eWT","tlshash":"f6a3024359a66c720858b474613b0e053cdd056fc9e6ebff8bfad395518812b03f62a3","first_seen":"2026-02-13T10:22:49.134587Z","last_seen":"2026-02-14T10:07:43.789687Z","times_seen":2,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/circle-gradient.webp","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:09.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /circle-gradient.webp HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 86900\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/webp\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"9f70a7df24552ccc410115508ee6d47f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ehh0ar9sCEexYkAhlFNywYYHFxaqZC%2FoHoL0o9XcsQ7KMl3TrkEakU8l2g7aRhsNyTsaf9cYZAyl5Qafssj1leYLux9tRE1xe3rhmupBMsl7jw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 10:07:09 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cdbc1c15ecbddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86900,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 730x730, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"261cec29d87fd870a52f0d4667d7422b","sha1":"cff3d45a1ed9fe91bf7a18ce4ae2e7c170a418da","sha256":"7a22b6f37c225391e872bf77e6a12659380247e1a4ff7e2275b0c90a3ae2efed","sha512":"f738ba091e4e0d5df27f4575914817a02ac2773aeba8eb112b9d6fc9505f3b4bf474aca2408fc9dc8d70e7974e5518971e2107c3d86ad650611cafcf2aaef59f","ssdeep":"1536:63xrhm/rj6CtbIbIdi1Q4bR7XF2RL6YzYGiI4J1HFbTgq:6h0/VtvyTxXF8LN/ZoTgq","tlshash":"a88312bba96e35e8b5065886baef5e45cf0ff1d37720e393a47249f90a411f2345104d","first_seen":"2026-02-13T10:22:49.157733Z","last_seen":"2026-02-14T10:07:43.762066Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/icp.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:09.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /icp.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:09 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=weRW3Tr6ltpd1ueTlsT50CC9zANpF9UfB9NoLSlP5mUC7JFyrr2W%2FTQlB8ZxgNJDFzsi4e2a7nf77K82ORdNzgKuKvGdgpTeALYs09OgWGEZkw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"ec3b59c86b02fa5b4a293ae8051ff061\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1c1beeeddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5807,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a057d6931ba0bfddc2cd0f04c120e8f4","sha1":"2ec6184d33577c89a12a1aee5180d3a800da8513","sha256":"a92b648a7d2d56e9b3eb3844e54398afbcbf29f04dfa397113e25901870f4e52","sha512":"0fe58a470d7c631f72477da46554a20659717d208c2778848e20d68a914614159886506c62c37caf9f90767d61912ced54dfee80f450b86128e28e07d829a005","ssdeep":"96:mw26/X1ao5P+VViv8PZgeranB98kHtux4HP4UDwgE96Cajj5rpWd1NDgJmxratUx:ml6/X1ao5Ucv8x1anB9dHUx4vbkICSj8","tlshash":"1ac1a5dd2bf5cba8e58462fdee22543d310408f66915c219c3e06eaab41645d9e0fac3","first_seen":"2026-02-13T10:22:49.15292Z","last_seen":"2026-02-14T10:07:43.788559Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/ultraplugin-2.4.4.min.js","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:13.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /ultraplugin-2.4.4.min.js HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 10:07:13 GMT\r\ncontent-encoding: br\r\ncontent-type: application/javascript\r\netag: W/\"6cddd3b57b388912ac243ca1e816e478\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ncf-cache-status: REVALIDATED\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AIDCaOWcu2ud0BBexK6Fqt2cTyIFm00IhCyHn4O03BZgEAOeysFgT3Kw206E7bwHZtTQq6eYzuCq4bY9VwAkxXgFL5D4iESTQeJPz3bb0NUyVA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9cdbc1dc9d34ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6908800,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f804d40cabcc4d6a232d02dfc3189037","sha1":"e78f71719c5cefa0219a4703c6c965745cdc5e68","sha256":"a9de3cb503115a4e01c8bc8859df283561bfbfa4dba455cbb31957895a4c0a5e","sha512":"8dbb4c2956965c4e121744349637809a13763670ad76acf3372494d3500cbfa635be402a36dc9441febc77f4d9cd98a010e367c2a47259bf9293523f0f1d341c","ssdeep":"24576:dVz0Rksywxe+KifQk+REruk6hqDC+ksmlg372JjX2Ktf:Lz5sy5+bfQrhNhJS0L2sf","tlshash":"ce252326e034da5c952e3eddb79238e03ad71997e5811b84f98df8a334a15bc076c4b3","first_seen":"2025-10-28T18:31:17.880854Z","last_seen":"2026-02-14T10:07:43.76996Z","times_seen":8,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":373,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/card1.png","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:13.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /card1.png HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 191079\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"0f5f65ba5c45291985e851ebe5a3d284\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dkO3l7K2LmEYtYE4duBpelFfO2MKRcgJaFQVgP9cxbiShGXuIXOwl9q9ZUm9NtBcs2OWu36Bde90fMcVuJOiFWyOPaoTOAR4QDjLVBiCn1s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 10:07:13 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cdbc1dcfd46ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":191079,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 472 x 315, 8-bit/color RGBA, non-interlaced","md5":"1165ba4bde0c2a72824c74a22675bb5e","sha1":"53fdc773f9e489d122fec6c07bd3483f485bbf0a","sha256":"d23a9cfde140dc25aa67ac1a40a845f3b6166be994a8f65de591a0c1de35a2ec","sha512":"2b071a7ac856108edf9dbabc78365750cee58d42da722122337341c47f11ffe2f634cba0728d2bb553208fd7796fe28e83976e6f040538c25fa5c8e3faac2cd2","ssdeep":"3072:23BhcprB8kBwO+9QKWXMUmgplaeQEQ4P5Wdv2OVxvTg0S15PZieVCeI5MVZdKpWB:UcdTBw39QlX7KEQK4Fx21Zi5JoZdKMv5","tlshash":"e7141256e141ed9190e8af130a8213db3dda726ac5f70fe609da0f2a31d11de524efe4","first_seen":"2026-02-13T10:22:49.13597Z","last_seen":"2026-02-14T10:07:43.786776Z","times_seen":2,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/jb.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:13.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /jb.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:13 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7ysKAaPdrWL9xsBZQnHM3%2Bctl7QsDzVX7uIXmL1NEb3J0Do3%2BN2sQOwBmbI%2B37L1ITqzP4AzIls8CtEc39JUYU1HmB3Q0vQDGf1TSqgW2ko%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"783bf23fec309d0e98df8b5706b5cf43\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1dd6d5eddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11485,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b244384d07feccdb2b66a759687694f4","sha1":"cf874cbd5666e401fab0481f87d2a1c2b143b6e1","sha256":"9adeb3bed4ad44fcba877b7249a5149196e08c8086edbe22833b51480dcd8dd3","sha512":"503fb22a2283a474e11beb216df8a1662ec69f8aec7e24c1a910db7b8755553a54f1d5106190f8f82fa22c197a41026aec1388ab93ab9c6244c438925c803487","ssdeep":"192:Vh6VEVL4+URzIaV96OwclxLC/3zTAYxbPhBJQEayWKiClVRZKXg/o:P6VEVoIAC/PAavaFpClLe+o","tlshash":"7732b070d609ed0d0e6822d7e12c2fec7ad315835bad06ffc8511b8e21168f6a4775a7","first_seen":"2026-02-13T10:22:49.151932Z","last_seen":"2026-02-14T10:07:43.787693Z","times_seen":2,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:18.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/crypto-js/4.2.0/crypto-js.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 10:07:18 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 19621\r\ncf-ray: 9cdbc1fefc441525-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65384d58-4ca5\"\r\nlast-modified: Tue, 24 Oct 2023 23:03:52 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 188408\r\nexpires: Thu, 04 Feb 2027 10:07:18 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=FRswaKhRvMivwa3Q7V5HAT2n7gkWAzPIbCPAn9cxfDlW34vEAklLYfAG0D95oV3Az5PXEarxNQ0HaG1Ni%2Bk36aa1zNZ6fPXxGFSakR2CeJG9lWNnMEiQcqVEkL42gcPFJlOgvbLL\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60819,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (60819), with no line terminators","md5":"d9c6de0df2bf028d93924aff92487904","sha1":"6596050516dd12af52d9b0e7b18ed837f1d81300","sha256":"769a555de553babc35a3338f344dd7aa16260c93cea2c7db290707c90484e7cc","sha512":"6be4940eec0dcd70efcf85eb21c5c7b827f4f3dfe2240a0de259ab5c9835f179ddb8a2ba6250c73516a5bf8c9dd4de3438a23cd2d162745faba9314a18fa1615","ssdeep":"1536:R8K6Znxmj9rlvCOhI64j7AtSPtNPU9ArHMLlk:RV6+jKOh4z","tlshash":"65535bc0629c5491a3b76480087f740b7073353b0a1d5aacf658faefacacad6907cd39","first_seen":"2023-11-02T21:20:28Z","last_seen":"2026-08-17T19:35:35.389682Z","times_seen":31931,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/secureproxy?e=ping_proxy","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://plggycell-llve.xyz/","date":"2026-02-14T10:07:20.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /secureproxy?e=ping_proxy HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sat, 14 Feb 2026 10:07:20 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nvary: accept-encoding\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JwpkcLH%2BdRNhml01QJJ6ixenU%2BpHvMtjLVXUMzW%2F9EZ5YAxDyQT%2BBe3AIxMEqzwld7gn7UKYTeEa%2BHutgu6uiYyfTV4b%2FKIeliaal6jen0JJwA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncf-ray: 9cdbc2061cc4ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Ant Design","description":"Ant Design is a UI library that can be used with data flow solutions and application frameworks in any React ecosystem.","website":"https://ant.design","common_platform_enumeration":"","icon":"Ant Design.svg","categories":["UI frameworks"]}],"data":{"size":47034,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (46994)","md5":"0a52547f4047819344c8995eb4126e52","sha1":"0f856c30c0c1fc8963fe1e25bfb0801e4f169bb6","sha256":"ce669993b262de7daa6295b0ac3fe22773fd0216dd8b04d8d665b060524721af","sha512":"92c030cfcbaeddec016fdef721a36802fa8bd6a7aa1295f68218098563ba942dc09d6c126859e3f79d8100a6331610c359f968f12c427bf88bc9818a429da29d","ssdeep":"768:4+xD4/LU/LZLQoS9LTrRpErorCrCrUGRQkDUJnRrRpErorCrCr9Rp:4s4/A/Mpxpqjpn","tlshash":"3723e9746341237bb2074bf4f422b667f02af2a8cb6bc58c76bdd1d057d6c48899a741","first_seen":"2026-02-13T10:22:49.138487Z","last_seen":"2026-02-14T10:07:43.777164Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/mocaverse.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/","date":"2026-02-14T10:07:04.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /mocaverse.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:04 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ReTMjBWBynvMg40Qx%2FTievmqkxoR0SpFoLv%2BUyWwb9poZm5yF105n1mJ3aWYM%2FIFYgTsTlMKt8DoF%2FwtXVK7CYXLDuvTSgy6%2FhOSnOg2Fj8oYg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"bc3bb6da8e4c328889c5944177537f0c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1a499b9ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":232675,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"16d1388e08f47e739adfc138e8239115","sha1":"9b5f4f99b73d6238eedfc6422abc746e7418a33d","sha256":"cb03d6520f09bfdc1877b402d6dcf41e85561ab1f879d66f8b06029d78e79a7a","sha512":"cdb3222d253a8873880e62b2866d21f6f975a23d7aa6fffcdb985952c1d7444fb5e85aaa62c7426aa19319fbcfafd367f588bac1459619889394f53581b9f8c2","ssdeep":"6144:N5BJO8wz5gDP/qJxomMOCYZC4BOsfH68VotJ2s:NHJQ9+momMLYZSsfH68itJ2s","tlshash":"0c3423247be9354c833f87793136cf8d21bc09a79a4cdbd5316b7611a9ca3d2d26170a","first_seen":"2026-02-13T10:22:49.143022Z","last_seen":"2026-02-14T10:07:43.774445Z","times_seen":2,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/bsk.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:09.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /bsk.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:09 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HyurimUIvpOIYh%2BkfPsqsNn%2BB%2FAw50qGKj5DzMQPLpNlE%2Bawx4mSAcm9XMxpfvygQdwPCrKW6q2Xvoz76psPTv9w6J8xKNuodu9gymRkaORRkQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"a4548f71f346dae7e9d84d3b1a97e424\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1c17ed5ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17263,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e8feaf0e1e07fd5e214ee396488f9312","sha1":"d8d28c496f28d06aad2380230d57fb8ca12e7790","sha256":"2d2ea2eff13db7757916fcb7c2c7c8bdb82aa22035eb1a63628ee902de10afd9","sha512":"5aaa99ebca128ab730804bd90c644db507f1afb94639b65eec5c51165b6da8187ac25f0769fabf58d54fc1714c513a4d314e47bc775f7ef154795e97bd4bf464","ssdeep":"384:qaSyVLGT5F33FQRklijO+Nq6BdYQwJXv8MiQr+lHCo:qAGTP3f7+Nq8dSVv1iQKJCo","tlshash":"f572d0b4b61c588f58245bbc267e9e0c3c24228310fb00dad11b775bdc6b8f729280de","first_seen":"2026-02-13T10:22:49.147075Z","last_seen":"2026-02-14T10:07:43.779752Z","times_seen":2,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/rwa.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:09.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /rwa.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:09 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BdkevJszMkBF5Bs%2F1zrnBsPVsdCe6pKHJ1GMcYeE8a%2BRDatso%2BMHWptM4ZKC7ElA%2FDWyJzh9b6Obf6JG2gKSdh2N%2BmcCcYaonoS0BnORDSbFUg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"ce9909f9c05f4c4a399c55dd6ae82a45\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1c1bef1ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2229,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"67888d752c45838b60527ac95cff7b32","sha1":"c2403b4dc4a7f236e849ecbf3e1e4ef6d8df8bc3","sha256":"38315624ed62a0d77b1291a0f2c54f90e1fd33814a4f9ab75b2eb1aa8d2e9d21","sha512":"759dd9a64ea18f4d46de963aa7c072f00e74109fbffa2559d4040222d973e4ec9d0a71a06819167eb7936902ed3a33bbc6bae184b085953c94483e2e9140071e","ssdeep":"","tlshash":"af4174fa7589f116f008e7fdca08f479142769e26746d060c3a76e0fb86049e694cdc7","first_seen":"2026-02-13T10:22:49.14487Z","last_seen":"2026-02-14T10:07:43.783456Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/foundation.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:13.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /foundation.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:13 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CYNxvhKT2MV4KBRACuMRSWoA7EPkWHjnbBCgOQWMj2SoGXzj%2FP2bWJ0qW%2BZwDo%2BAL%2Ba7Rb3NcQqqwB8ZTA0C%2Fa%2FiXJGOaO4F96d64hhC0WSJRw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"55d55e29ea236c9565c63fe82cfb9491\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1ddbd71ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99402,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f2bb3949a694a2d4892ddcb1f94159a1","sha1":"2ebfe329a2115ff505fa8104e39c78613b70dcbc","sha256":"8847d00ab18acff2e9231c6efdef86940a8907a781957af7d8649ce777785ee0","sha512":"51ced2c59a8cf92ef3777b060db84d0d4837764a21209c4298ccc97fa9c1fdefae4977a02ab91532d2b2692852a5d28f9c42090f1819e017e09973a4cc66ae79","ssdeep":"3072:MjPbz1G6R/YHyjoIeHh6F2bsvvj75q04e5kT:EdVNuuYYTv4eWT","tlshash":"f6a3024359a66c720858b474613b0e053cdd056fc9e6ebff8bfad395518812b03f62a3","first_seen":"2026-02-13T10:22:49.134587Z","last_seen":"2026-02-14T10:07:43.789687Z","times_seen":2,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":40,"dns":0,"connect":0,"send":0,"wait":75,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/crypto-js/4.2.0/crypto-js.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plggycell-llve.xyz/","date":"2026-02-14T10:07:18.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/crypto-js/4.2.0/crypto-js.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 10:07:18 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 19621\r\ncf-ray: 9cdbc1fe7ff48be6-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"65384d58-4ca5\"\r\nlast-modified: Tue, 24 Oct 2023 23:03:52 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 188408\r\nexpires: Thu, 04 Feb 2027 10:07:18 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=IdCvPP1%2F4lVCrXVUrOxo4ulFcqEbrwG8TYRIwEBPTeB0MYQVrP9tDEekyjyK7YRX33DAhWvRfzyAE63aBx1wUequ%2BTfe27ciaq%2B%2F5JcyS91LO1TiQtM92yqmk9OTFz3QG%2BaidTYH\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60819,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (60819), with no line terminators","md5":"d9c6de0df2bf028d93924aff92487904","sha1":"6596050516dd12af52d9b0e7b18ed837f1d81300","sha256":"769a555de553babc35a3338f344dd7aa16260c93cea2c7db290707c90484e7cc","sha512":"6be4940eec0dcd70efcf85eb21c5c7b827f4f3dfe2240a0de259ab5c9835f179ddb8a2ba6250c73516a5bf8c9dd4de3438a23cd2d162745faba9314a18fa1615","ssdeep":"1536:R8K6Znxmj9rlvCOhI64j7AtSPtNPU9ArHMLlk:RV6+jKOh4z","tlshash":"65535bc0629c5491a3b76480087f740b7073353b0a1d5aacf658faefacacad6907cd39","first_seen":"2023-11-02T21:20:28Z","last_seen":"2026-08-17T19:35:35.389682Z","times_seen":31931,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":23,"dns":0,"connect":1,"send":0,"wait":10,"receive":3,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/ethers/5.6.9/ethers.umd.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:19.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/ethers/5.6.9/ethers.umd.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 10:07:19 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 125841\r\ncf-ray: 9cdbc2038c811525-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"62ad87d5-1eb91\"\r\nlast-modified: Sat, 18 Jun 2022 08:07:49 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 177011\r\nexpires: Thu, 04 Feb 2027 10:07:19 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=4BNwk9B4%2FvMUg3X2OTPFTf4ex0lsEvzcOFc8whShWj38bR%2BXuRRNMR%2F1f6fiqqVISsfChytNzxQOHzXbjx4%2BhjVviG6J%2F1tbtTgr9Bf8qtD6j1MwO6dS0CIEv83D21oTwP7Kjzwg\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":735973,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"268d19762594655239a29d058a7e8b44","sha1":"f06da2f7a68114b8dda38a0d782d65ddacc9c0e8","sha256":"95c66625ee20f53d542e23dded002b021b24e9d28c3d193a076d45cba4dc8618","sha512":"55e6b3e48536891a5ad0106b26525e4607c9ece0075ad5496535ef81d1fbb377dfb0b50286594c0aa0b405bf9e791c4696b674ea260813f4772ac7220ab82fdc","ssdeep":"12288:TfLmYQI/yjP+H8Xb29/nNUgE6te1R5WJW:TfCPalnNfE6taD","tlshash":"29f42b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","first_seen":"2023-03-07T12:58:29Z","last_seen":"2026-08-16T02:34:15.441922Z","times_seen":8492,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/ibc.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/","date":"2026-02-14T10:07:04.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /ibc.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:04 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7fBG%2BVIDKhfPwou6848u%2BdrqYNqxlHf%2F5dvoDDJcozPG5DVAfcHxeVIkDsPsraoV0kZjmt1lqqge2OvsT07WH8IkN3R1hCLwJ1QcnmSBoVb%2B3A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6dd84d2144e2368cb3c21d59843e9b02\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1a4a9c6ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19928,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fb766182b8feaa5dc0b5aa446a62c18f","sha1":"515294de31a614c7a4231c965c5a5d884a10f5f1","sha256":"25e71ae01fd369e3c00f5f76d8f1d163b7b48de61d73349b77cec595f818f23b","sha512":"cb4a79ef7f1bfbcaabb2872535933469ad34f429469b10b840d650e75b6b292fcf20d42d5fb95c4a559fc8e5300f23eb4a36da422cea319aba04d0c9680af652","ssdeep":"384:AuPph63tAv2Yidfjnxyz2HS4liCX4uUytGGj66xqOV77sozlpRNFB+:Ayy3tkBidfjo6HS4QWtquIKnFB+","tlshash":"cd92b7dd77b452f8b844d7fb9763106a342278fa7aa9d710c2886f4da4428cc5c2e9d3","first_seen":"2026-02-13T10:22:49.124046Z","last_seen":"2026-02-14T10:07:43.790472Z","times_seen":2,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/hitenjiro.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/","date":"2026-02-14T10:07:04.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /hitenjiro.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:04 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=icsfFz85VBrpTUIAE7UrLqp%2BG%2BQNMxH%2BV7%2F%2Bj6qK2s2ASGXByg4IeNR76xghb76%2BwUpfvcTndjmEZ406Pa7gWgncm5fVZzMZojDaqrRGnucF3Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"7812a650c6256f514060457018caa208\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1a499b1ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19980,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"15bc2280c10db22934f2dad73dba3a63","sha1":"88cbc4d8643c185a7cd3c8d5b5aa0863b63f6b23","sha256":"179bb4d0178e264aa8fa6dabcdefa202220ef5a2950f4e78284e35cd9ee72ad6","sha512":"7cddb6a730bfe0917bce38f382d642bfae6c13c65fd716fa5f434397fdd7d133d65f01fd0a000072a7b7ce8ca416167c430cb8482ea2f84c814c8bcc90600b99","ssdeep":"384:Gl2EC40OWpBu7tBi+CHOkjmJonl4GC/nmphQYvQXvGNOlGVv4FKLv5k+sc0tP0:GUEC/luhB1QrjmJml2khzQfZQVPLhk+P","tlshash":"6f92d1b4691205bf1ecc8a29e3442d87f418a077c6b4f1af10de034b650994b3d15efe","first_seen":"2026-02-13T10:22:49.14039Z","last_seen":"2026-02-14T10:07:43.792121Z","times_seen":2,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/hitenjiro.svg","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:09.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /hitenjiro.svg HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\ncf-cache-status: REVALIDATED\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ndate: Sat, 14 Feb 2026 10:07:09 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=icsfFz85VBrpTUIAE7UrLqp%2BG%2BQNMxH%2BV7%2F%2Bj6qK2s2ASGXByg4IeNR76xghb76%2BwUpfvcTndjmEZ406Pa7gWgncm5fVZzMZojDaqrRGnucF3Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"7812a650c6256f514060457018caa208\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdbc1c16ed1ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19980,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"15bc2280c10db22934f2dad73dba3a63","sha1":"88cbc4d8643c185a7cd3c8d5b5aa0863b63f6b23","sha256":"179bb4d0178e264aa8fa6dabcdefa202220ef5a2950f4e78284e35cd9ee72ad6","sha512":"7cddb6a730bfe0917bce38f382d642bfae6c13c65fd716fa5f434397fdd7d133d65f01fd0a000072a7b7ce8ca416167c430cb8482ea2f84c814c8bcc90600b99","ssdeep":"384:Gl2EC40OWpBu7tBi+CHOkjmJonl4GC/nmphQYvQXvGNOlGVv4FKLv5k+sc0tP0:GUEC/luhB1QrjmJml2khzQfZQVPLhk+P","tlshash":"6f92d1b4691205bf1ecc8a29e3442d87f418a077c6b4f1af10de034b650994b3d15efe","first_seen":"2026-02-13T10:22:49.14039Z","last_seen":"2026-02-14T10:07:43.792121Z","times_seen":2,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plggycell-llve.xyz/card3.png","fqdn":"plggycell-llve.xyz","domain":"plggycell-llve.xyz","tld":"xyz"},"ip":{"addr":"104.21.85.113","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plggycell-llve.xyz/index_1.html","date":"2026-02-14T10:07:13.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plggycell-llve.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 11:31:19 GMT","end":"Thu, 26 Mar 2026 12:31:15 GMT"},"fingerprint":{"sha1":"9F:C7:70:0A:05:10:E9:48:2D:3B:6B:F5:B8:47:DD:27:C7:0F:DF:75","sha256":"62:22:4A:96:DC:86:E9:7A:DC:B0:B9:1D:47:D0:17:8D:06:AE:CE:F4:35:1D:42:60:33:F7:78:B5:E1:2D:B5:91"}}},"request":{"raw":"GET /card3.png HTTP/1.1\r\nHost: plggycell-llve.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/index_1.html\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 204482\r\ncf-cache-status: REVALIDATED\r\ncontent-type: image/png\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"079ce924be08842eecd37ba27121cd72\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JlnJemslstsfSiwaZG0LA9jiiiNkihka0kP6%2BQniRjHF7%2F18cnbX1liAMrVSq4Sf8Wp%2FJ0mDBcCFllzi2qCxdIiJwCCbsYJ9mMQ2tMgIVYZFPQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 14 Feb 2026 10:07:13 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncf-ray: 9cdbc1dd6d59ddf7-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":204482,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 472 x 315, 8-bit/color RGBA, non-interlaced","md5":"907e211f33c90c5ef5198d6c9c0fe940","sha1":"5078a4e4210c36d5201a528ea6fd3e3539067b0a","sha256":"fef01a89df6fbdfac6325874e3f328bfbdc9e0c38f843e1bb9d318cceba61540","sha512":"bac31f9bce6d45c2a32ae2789ff054cdff63d0008abe3fbe3ad1e358161b2ac632fceff97a3b8ab4a9ce5fbfa9c977d274eb12a8ee60a66e3427b4cb62c9d505","ssdeep":"6144:W6abUMjb/NFjTs2Pqzj7Dx/asjX8QRTFvZlEut:nabUQ/NFRPm7DFasjXDRFvTb","tlshash":"9a14225c40e82f26b2b5968e12f734ab973b6532c9e1136833d8bdc6d7e0c09dd81996","first_seen":"2026-02-13T10:22:49.143877Z","last_seen":"2026-02-14T10:07:43.771323Z","times_seen":2,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":88,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"plggycell-llve.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-14","alert":"Phishing Block","trigger":"plggycell-llve.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/ethers/5.6.9/ethers.umd.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plggycell-llve.xyz/","date":"2026-02-14T10:07:19.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/ethers/5.6.9/ethers.umd.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://plggycell-llve.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 10:07:19 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 125841\r\ncf-ray: 9cdbc2037c251525-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"62ad87d5-1eb91\"\r\nlast-modified: Sat, 18 Jun 2022 08:07:49 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 177011\r\nexpires: Thu, 04 Feb 2027 10:07:19 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=VPRrRocpPDNvb9ydKfhdylGoi3NM4A%2FXhKECpmLTICcfIcNNMKdgb8n9t8CKizxsU5RZXQBS%2F%2Fr3HjdTdE4EgIrI8YWJaG5kNdNQIJcyKZapCxkpRTx8s6%2Bnmz3oxJRVVVNe9doU\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":735973,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"268d19762594655239a29d058a7e8b44","sha1":"f06da2f7a68114b8dda38a0d782d65ddacc9c0e8","sha256":"95c66625ee20f53d542e23dded002b021b24e9d28c3d193a076d45cba4dc8618","sha512":"55e6b3e48536891a5ad0106b26525e4607c9ece0075ad5496535ef81d1fbb377dfb0b50286594c0aa0b405bf9e791c4696b674ea260813f4772ac7220ab82fdc","ssdeep":"12288:TfLmYQI/yjP+H8Xb29/nNUgE6te1R5WJW:TfCPalnNfE6taD","tlshash":"29f42b80b3b1b0b583c729a4143f6046f63af46a505840a8f659faf279f9d4c957bb3c","first_seen":"2023-03-07T12:58:29Z","last_seen":"2026-08-16T02:34:15.441922Z","times_seen":8492,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}