{"report_id":"3f392f58-2657-41fc-9c21-0154bf1bbb38","version":0,"status":"done","tags":[],"date":"2026-08-12T14:20:48Z","url":{"schema":"https","addr":"plgv2.com/ru","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":0,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"final":{"url":{"schema":"https","addr":"plgv2.com/","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"title":"PLG.BET (CSGOPolygon) - CS2 Gambling \u0026 Crypto Casino","dom":{"size":201937,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (64485)","md5":"af98e78c47bc68850cbe2ba0fa8b51cf","sha1":"24d82161eb4e5fea12f12bf2b9259c6407c4e9bb","sha256":"b39dba825d2273f76af12c6670635f9999ea592d3577228b72f12e8bafc583cc","sha512":"8e509689cd04ac3221fda3e8708256f9d11a4a293dc77bac41d4a3bfcfcb9218d47988cb4f368d42b19c96d5373a879b4f5fa531c86bff0463116ca785599f15","ssdeep":"3072:f0jBjhJrMrUdBLnQRIw18DpKDNEzmV3wX+:f0jBjrMrUdBLnQRIw18DpKDNEzmqO","tlshash":"7014e921d35a257772d3e3f8a292fbba30956107d9aa8835f7fc3560cb05cd6912d823","dom_hash":"domhash055317ddbf03446a049fb07eb5639132","first_seen":"2026-08-12T14:21:01.358751Z","last_seen":"2026-08-12T14:21:01.358751Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"plgv2.com/ru","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":0,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-16T14:20:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.reamaze.com","ip":{"addr":"172.66.151.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-12-18","domain_rank":166707,"first_seen":"2017-01-30T08:41:45Z","last_seen":"2026-08-06T22:25:01.654047Z","alert_count":0,"request_count":5,"received_data":1641202,"sent_data":2156,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-09T22:20:44.514027Z","alert_count":0,"request_count":9,"received_data":320979,"sent_data":5073,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-09T22:23:43.881052Z","alert_count":0,"request_count":2,"received_data":58903,"sent_data":1114,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-08-09T22:45:53.985835Z","alert_count":0,"request_count":2,"received_data":69343,"sent_data":975,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"push.reamaze.com","ip":{"addr":"172.66.151.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-12-18","domain_rank":209645,"first_seen":"2020-10-24T14:41:28Z","last_seen":"2026-08-08T01:56:36.416524Z","alert_count":0,"request_count":1,"received_data":3184,"sent_data":434,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"8e043724-3544-43cf-bc9f-2b30cec37816.snippet.anjouangaming.org","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2023-05-22","domain_rank":6649336,"first_seen":"2025-05-09T05:18:53.130889Z","last_seen":"2026-08-12T14:16:09.298679Z","alert_count":0,"request_count":2,"received_data":0,"sent_data":953,"comment":"","tags":null,"fingerprints":null},{"fqdn":"1bccfa6c-7880-43ee-a687-6866c000c244.snippet.anjouangaming.org","ip":{"addr":"108.157.229.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2023-05-22","domain_rank":7226066,"first_seen":"2025-05-09T05:18:53.118001Z","last_seen":"2026-08-12T14:16:10.424724Z","alert_count":0,"request_count":1,"received_data":3612,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-08-09T22:33:32.164957Z","alert_count":0,"request_count":1,"received_data":467198,"sent_data":443,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"plgv2.com","ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"2024-08-14","domain_rank":1817029,"first_seen":"2024-12-07T13:58:11.550941Z","last_seen":"2026-08-12T14:16:09.214433Z","alert_count":59,"request_count":60,"received_data":11557154,"sent_data":36990,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"avatars.steamstatic.com","ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-11-07","domain_rank":84588,"first_seen":"2022-02-17T19:50:57Z","last_seen":"2026-08-07T13:31:34.081114Z","alert_count":0,"request_count":16,"received_data":158325,"sent_data":8816,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"ws.reamaze.com","ip":{"addr":"172.66.151.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-12-18","domain_rank":261631,"first_seen":"2018-04-19T00:03:04Z","last_seen":"2026-08-08T01:56:36.915387Z","alert_count":0,"request_count":1,"received_data":259,"sent_data":603,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"csgopolygon.reamaze.io","ip":{"addr":"34.215.188.89","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2014-11-13","domain_rank":0,"first_seen":"2022-08-30T18:55:31Z","last_seen":"2026-08-12T14:16:09.07626Z","alert_count":0,"request_count":1,"received_data":1295,"sent_data":918,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"plgv2.com/main.71989c3097627fab.js","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1a0fdea41c3e1eb235a5386b7da2654","sha1":"b6a0d17acc95f6e99cb68da4a9a59a334d4befee","sha256":"0635d03e3048f6d7a6d7b990df9776070aef346f139627968c68e53f2328a79f","sha512":"ae9967a9790ea0d34e8f6d0659bd41e2bf8e75395143dd18e6cc92e8574acdffb4cf8fc7a305a2092e0639bf09e6fc477274db72dee815966648c324db4fefaa","ssdeep":"49152:QTs9VBNmWnI4hlSw9a6AOEe9/F2BntECpTRNkQ3aMYWnUxFulSivNw3oyqafpkkl:F+676dSky","tlshash":"0ef56a947285b4aa139351d2802f550ab37e14bcb90ec660b5bcdcee39e544da23bf3d","size":3551271,"data":"","first_seen":"2026-08-12T14:16:14.047112Z","last_seen":"2026-08-12T14:21:01.502056Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/9.d5f99c20c032d594.js","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"06da265c354a138ad02877249ed74857","sha1":"32ae2229c8eda460b60479eb985d912e35c9fdd9","sha256":"6e530ad4541721429a4dedb91d7348cfbd7556d43a8fd25a3f808c69e042db22","sha512":"e6917caf398613b0cf3e222d0029ee151eaf286d48bdb847f142672fc200581b71d656cd6386d1bf93752f1a616cf583ae54dab0e28b4d0a633ade3563114461","ssdeep":"768:0cy86GCXV8qSZD9mktY0zoSJ5Lb5bonus:1Cl2xmktY0Uc550nX","tlshash":"d5830dd6352ca4b107963aab3df2423053aa340990c7f39039dcccbcf76e955a9457ba","size":82058,"data":"","first_seen":"2026-08-12T14:16:13.900241Z","last_seen":"2026-08-12T14:21:01.461895Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1bccfa6c-7880-43ee-a687-6866c000c244.snippet.anjouangaming.org/anj-seal.js","fqdn":"1bccfa6c-7880-43ee-a687-6866c000c244.snippet.anjouangaming.org","domain":"anjouangaming.org","tld":"org"},"ip":{"addr":"108.157.229.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"86e446e1ddddf6e53b6e371ba276e55b","sha1":"67afa9fc09342b04c8f663855ca9b402e9419443","sha256":"59de63fd13c734539781b4114474a1d2ef9ef865d3fdfc1efd3aa2ad7554ffcd","sha512":"74a861cb4166e82ac14527ef3c020305978ae09694dcf44eb64ad873cdb40c664aadba0fada13a4ad8b96a152aac33cc3c3b4049349a61f4e482721f6f0ad466","ssdeep":"","tlshash":"c15142793ec0c4cb776aadab6a7f30d8d717d49a5f43080a5433ac68fd64524ec865b0","size":3053,"data":"","first_seen":"2026-08-12T14:16:13.895272Z","last_seen":"2026-08-12T14:21:01.486525Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-DMMT9B3B8Y","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6eca057aef745c121b776b6edefe2911","sha1":"99135e9e06a0094004a6fdc48096c503656cbf6a","sha256":"4261be2b1a68eb8079436c7ff967be2960af458a79b9d1d417193f841a087fc0","sha512":"b2765642a1917ef8195c088ad2ecc43a556f3818b66d32f2e28d1cd0148a59af87398faca027b73c69576af50304ae1ea3cacfff5b7aed9ef648765bdeaa0cdc","ssdeep":"6144:3JRjzqjUgQu8mLaW3IuNcad5JdEQJ3iDqojpjU6OetM:3JVAUgp8I3Jo9U6Ox","tlshash":"42a419cdb3d674269396f078903f018ba57b29a2f44cc899f189c8d42e7469a4237f7d","size":466594,"data":"","first_seen":"2026-08-12T14:21:01.490351Z","last_seen":"2026-08-12T14:21:01.490351Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.reamaze.com/assets/reamaze-loader.js","fqdn":"cdn.reamaze.com","domain":"reamaze.com","tld":"com"},"ip":{"addr":"172.66.151.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cfb80811b9c506feb0a9c80af3d0a1e0","sha1":"de00d8d7b90cbb88e6830d3e73cbad7a1f0442dd","sha256":"7320b658f0d41897702b5b1f1885c7738db7dc99af602fe60f1eed3a4daf1423","sha512":"5fb64f65380ef089c56970545ab064af44e95f83574c14bbc1f0ed8ad4adf4caef7c98e4db5213ff00397a533eec88924f2060e7e4dd06e4d65d3bee19922743","ssdeep":"","tlshash":"b501fe243d152534a345616531bfe7887e313137fa0694c2a0bfccb8b938d921417e8d","size":706,"data":"","first_seen":"2025-04-01T20:35:41.688728Z","last_seen":"2026-08-12T14:21:01.370907Z","times_seen":1799,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.reamaze.com/assets/reamaze.js","fqdn":"cdn.reamaze.com","domain":"reamaze.com","tld":"com"},"ip":{"addr":"172.66.151.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c8b296bfb8701939c19156628c39995","sha1":"ccf5e5cd881fbad48d4f8d0f92dda38e30f8ed61","sha256":"0ae65e5243eec78c1a861a98184c6a68e96a393fac53924d2a4034e658d9ec1f","sha512":"d28792b1b768f4b0dfa6c009d95200b54b31e7710579209a0fea431b7af4c1dd3045c14485aeefd0f6dded541641772e2f0925b642cd8aff0758fc4ab97d8a50","ssdeep":"6144:yfWd1EsJf8KXvvR7yAuP0outXHauphBXi+ZcWW3Yj3kQ8wXFS3qS5BGM5vtCV2Zo:o+SK8lcnxF+B75I+o","tlshash":"69053a98f6e0702943e7117651bf2505b376381da4184028b66dd8eabff894d623bfbc","size":808122,"data":"","first_seen":"2026-08-07T19:29:10.287216Z","last_seen":"2026-08-12T14:21:01.374788Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/runtime.df623079a8aadcc9.js","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9d921c2263a2a05c2adfdd8f6ada3bc","sha1":"b62dc3e341dc4363fe5e2b016f7ca520728642b0","sha256":"ed25a355267df1429e36fb5d6db895a10b9115187204f60e4f449739414ad0da","sha512":"fbf51bf49a57f56e6d138e4bbfda0b45c59b8c521fabfd695697320a42acdc3323d86b7e5f3a3efaa7a0525503596235bc80d0564af1a743ea6ad571a3a61eb5","ssdeep":"96:QQSKtP9qviRIaBr3coWCndnEZkkePWjSpirerHSpirOJlrCE:cOFWiRdr3DWfkTWjSpirYSpirHE","tlshash":"c0e1f9ae225479b536d965d2983ce0d6b824603f2a0ea8709b4fdc35f878fc18516fa1","size":7033,"data":"","first_seen":"2026-08-12T14:16:14.034561Z","last_seen":"2026-08-12T14:21:01.494631Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/styles.7f9df5942c658dc8.js","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"2fe9a770256f916f3130c1bef1aefe94","sha1":"2832087ca1a9b5adeab2221ccfdce08593297d7d","sha256":"0592ca67a7862bf565e7ed55e7f36bffc74190c0598e57e7eaa554721c3e5e92","sha512":"29bf8605a4e955731b641c0d63768e135e3d4957a9e859333515e1ee6718484d83460cb06fe2fd3dcd1e76c3a1378c2a5142ec8e5765a50a3c32231d4d7dc6b4","ssdeep":"","tlshash":"9eb092192491beb83d6f18c044a18dea09a414b3793980e2bde25c51a05ed2c1564c8c","size":112,"data":"","first_seen":"2025-08-28T22:23:07.322551Z","last_seen":"2026-08-12T14:21:01.475997Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/ru","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2525d1b8aad0c0c0fc91ae418d239e4","sha1":"cf0ca2d3a9c9a25ae4207ba79f9c65e683b6e0aa","sha256":"c037defa42bbe8ab2d64b989206e95fda30ea1245a27924148adb62e015e65b4","sha512":"7089ae229afa15569fc8fdefd8fdf5fcc283e757fa477153de5ce924315705805cec1da822f79b8164ccc87892e7da753fd6c594a19689be861ec00e28fe2c52","ssdeep":"","tlshash":"b22129f40c33b4259943d04ea16d3e1b5e7a4063ec52f4287f1d4b24af5f4ada5a1ae8","size":1359,"data":"","first_seen":"2024-11-27T09:46:18.345423Z","last_seen":"2026-08-12T14:21:01.504195Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/79386df8-a762-4cb9-8ead-cb86aee57b66","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"","is_inline":false,"md5":"4e90483cad4d66184ef04bed21d10f46","sha1":"5f23dc81960e418d62e5bcb9e97ec2497c8e5ef6","sha256":"6c9ef7fcb97261ed339b3c88dc13e07f422515e576d7cc9ed07ef609ad8c82d5","sha512":"8f37bdc12caa297780c3cf8a5c90a6c18af7ff411c5c662fc42a34049de5308cf85e8bb2dd177dd3d459aa4231a12ad1fcbf91c611f6adcfc6d171007f1081eb","ssdeep":"","tlshash":"09f02b5c34ff10620163b07e37cba10b6b74104712aeca307c3cc2145fc816896d1f98","size":501,"data":"","first_seen":"2026-06-27T07:16:58.716178Z","last_seen":"2026-08-12T14:21:01.505777Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/ru","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"b447014a7dc4643e0b9fb20a8f537b65","sha1":"9d4b0ca7a294a40184c067ace0565276cf65cdcf","sha256":"e74e97a8f3a5303676d6752990602254103f36e7e516b53f33371822ce070216","sha512":"a2312e091db6aa1f4c386018608632f52261695c36b5bd93198c207b1842dd94fd49bd5e7940e878f02284d1b3f2d20a9883719587648c78bc193a7e33bc7703","ssdeep":"","tlshash":"38c08c8c2a5b1c7040ab3b514b3f6200f005a10360a08d32380fb3448f20d279744918","size":194,"data":"","first_seen":"2026-06-27T07:16:58.721516Z","last_seen":"2026-08-12T14:21:01.507784Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2525d1b8aad0c0c0fc91ae418d239e4","sha1":"cf0ca2d3a9c9a25ae4207ba79f9c65e683b6e0aa","sha256":"c037defa42bbe8ab2d64b989206e95fda30ea1245a27924148adb62e015e65b4","sha512":"7089ae229afa15569fc8fdefd8fdf5fcc283e757fa477153de5ce924315705805cec1da822f79b8164ccc87892e7da753fd6c594a19689be861ec00e28fe2c52","ssdeep":"","tlshash":"b22129f40c33b4259943d04ea16d3e1b5e7a4063ec52f4287f1d4b24af5f4ada5a1ae8","size":1359,"data":"","first_seen":"2024-11-27T09:46:18.345423Z","last_seen":"2026-08-12T14:21:01.504195Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"push.reamaze.com/assets/reamaze-push.js","fqdn":"push.reamaze.com","domain":"reamaze.com","tld":"com"},"ip":{"addr":"172.66.151.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"918f11130407c5536a5acb9e2d34311f","sha1":"e170858675d784632d6db08bd1bca5fa9b39336b","sha256":"0c95e298479c4afdd24cdddc88093b48752d4be626a38631e1c623a14989d39d","sha512":"495493274f55e2ae071fa8558e8ffba709d113d77eb56f98d5f96b3d4325de2aa52b01463a9088f4960f8c0cfb525a56cfaa6e1e85107feac14d79594c223e83","ssdeep":"","tlshash":"6b51108ffe99b16605e3b5728cbfa354023b66124c87105453e06ac16ee3a4eb31792e","size":2835,"data":"","first_seen":"2025-04-01T20:35:41.711988Z","last_seen":"2026-08-12T14:21:01.446322Z","times_seen":1515,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/pusher/7.0.1/pusher.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1be14bcd111694d8e5ac59db0560aa4","sha1":"135246fffdb51a130c046f7d7f8c371ed6872b8f","sha256":"355557a7addf5ff91b246281cec6ad20f35b2ba7c44dd327926f337d6f0394e0","sha512":"c636bc7eb676353d3e6f568c9ae2dcde77c78e197dd284e253697c479e56c5132843ea93b91f6990e32787f23d5fb1dcd9edbbcf46a628d380266e976d87b6fc","ssdeep":"768:jWds216t1KRv89yz+YDN+hHW8hIEyZc+NwBuxt64CTMFPWfAfMxv3fUyaKdUTf76:Sdsg6CaLy2+cUybdIfVwApDVstxOOfz","tlshash":"2053a7c8f991b06143a7b171453f150ea33e686cb40ac0bcbb64d9e5ac7528d923bf79","size":65941,"data":"","first_seen":"2023-03-07T12:01:32Z","last_seen":"2026-08-12T14:21:01.442378Z","times_seen":2333,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"An error occurred! For more details, see the full error text at https://go.apollo.dev/c/err#%7B%22version%22%3A%223.11.4%22%2C%22message%22%3A54%2C%22args%22%3A%5B%5D%7D","filename":"https://plgv2.com/main.71989c3097627fab.js","line_number":2047,"column_number":855808},{"level":"log","text":"Download the Apollo DevTools for a better development experience: https://addons.mozilla.org/en-US/firefox/addon/apollo-developer-tools/","filename":"https://plgv2.com/main.71989c3097627fab.js","line_number":2047,"column_number":855808}]},"http":[{"url":{"schema":"https","addr":"plgv2.com/assets/svg/language/br.svg","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.183Z","timestamp":1786544409183,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /assets/svg/language/br.svg HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/main.0fffc87820ff4b62.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 13 Jul 2026 18:43:11 GMT\r\nx-content-type-options: nosniff\r\nexpires: Fri, 11 Sep 2026 14:20:09 GMT\r\ncache-control: public, max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 2562451\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\netag: W/\"6a5531bf-e8c\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2a01e7d58680b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3724,"size_decoded":1763,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8c9e8eed79e9bbc442006408ce1c1d11","sha1":"711f02817a99d3eab4acf9e4ba53551b83226458","sha256":"34b659e99c962c285b22ec16dccdfe90c644d8f1f20b3d6ce00d82534c14731d","sha512":"221877f37fa22bc4cff4b691894c58b2ba697705c89ff2f6c636dc174f4a9cb8a12275a29fa76923e8b8b88e3e356bbbf9d92469de65a1a051095089e4e46100","ssdeep":"","tlshash":"9571eaebd39c72d4d48aaf54da093133b26324fe3b2a95850940de4937ae16b5cdcec4","first_seen":"2026-05-10T23:10:02.63791Z","last_seen":"2026-08-12T14:21:01.363131Z","times_seen":4,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/assets/svg/games/basket.svg","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.229Z","timestamp":1786544409229,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /assets/svg/games/basket.svg HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/main.0fffc87820ff4b62.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 13 Jul 2026 18:43:11 GMT\r\nx-content-type-options: nosniff\r\nexpires: Fri, 11 Sep 2026 14:20:09 GMT\r\ncache-control: public, max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 2562451\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\netag: W/\"6a5531bf-2aba\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2a01e7da8a70b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10938,"size_decoded":5391,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"98e12856db57302e03313d15f8c388ab","sha1":"8eec5935061307fa89a46bc172ec0679ff17b5b2","sha256":"460bf7361745cfc64ca41ff5e17f1aed0794bb7f92ec90705afd02a367f9a748","sha512":"b1b4554fde0d1dc9a36e66c4ab51f03e4e5de2db5ee5236c5e8b6a02b1e7aa84571c8edbaea8e4cbc42fbb51776b86d533bc3fea686e71debbbeb21bb0e116d4","ssdeep":"192:oUfuwG9hUSE2EfmPozcFxyA9MJUb31X472C6RSn1UXmK7N:o+uwG/USEQEixyA9YUE2C6gUXn7N","tlshash":"4a32d8dcb36853f8f902e2fec92200e96b2f60fb5a91cb74c3996e05785657c8d488d5","first_seen":"2024-11-27T09:46:18.323026Z","last_seen":"2026-08-12T14:21:01.365144Z","times_seen":8,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/assets/images/about/promo.png","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.326Z","timestamp":1786544409326,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /assets/images/about/promo.png HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 85136\r\nlast-modified: Tue, 04 Aug 2026 15:14:08 GMT\r\netag: \"6a7201c0-14c90\"\r\nexpires: Fri, 11 Sep 2026 14:20:09 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 655554\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: a2a01e7e492f0b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85136,"size_decoded":85737,"mime_type":"image/png","magic":"PNG image data, 635 x 292, 8-bit/color RGBA, non-interlaced","md5":"d3e90e2d45fac7e86fdd9c0331a3fced","sha1":"c604cba09015b609c90461fd429f84c31f9de2e1","sha256":"7b48fbf478ad33d42ea94a89059b6540717037f3b9776f56aaee3a4d6020af8f","sha512":"736e38725316d7d3670b9f2b91e96412cd3712ad9f3257677b63f9ccdd6f4a18cb536c151409343727e8217294e7783fb19c2ab8517d6207a7fd62d6fbb2766b","ssdeep":"1536:X/N+U4XpHUkapAcwmffantJ0er3fg47YQI2GqArAwVaQObaTjfEZE2Xi4:VbcykEAGffaLLx75ArAwVaQCHQ4","tlshash":"8c83020b9c51445baa5adca8b94bc40a77f69345d48acc0747dc7409fb38c3b62a89ff","first_seen":"2025-08-28T22:23:07.25288Z","last_seen":"2026-08-12T14:21:01.368916Z","times_seen":6,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.reamaze.com/assets/reamaze-loader.js","fqdn":"cdn.reamaze.com","domain":"reamaze.com","tld":"com"},"ip":{"addr":"172.66.151.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.296Z","timestamp":1786544409296,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.reamaze.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Thu, 17 Jul 2025 20:54:16 GMT","end":"Tue, 18 Aug 2026 20:54:16 GMT"},"fingerprint":{"sha1":"95:C6:DA:9F:AF:CA:EF:87:7E:36:1A:38:18:5D:94:C6:B2:F0:9E:30","sha256":"86:29:30:4F:A2:4A:3D:4D:DD:E8:F8:F3:90:7D:BB:C6:D9:38:3F:36:D3:F8:BA:B7:AE:70:44:B2:2F:FA:53:FD"}}},"request":{"raw":"GET /assets/reamaze-loader.js HTTP/1.1\r\nHost: cdn.reamaze.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 418\r\nserver: cloudflare\r\nvary: Accept-encoding\r\nlast-modified: Tue, 11 Aug 2026 21:37:50 GMT\r\netag: \"1a2-658cc484f6780\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nage: 5367\r\ncf-cache-status: HIT\r\ncf-ray: a2a01e7e39045ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":706,"size_decoded":767,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (706), with no line terminators","md5":"cfb80811b9c506feb0a9c80af3d0a1e0","sha1":"de00d8d7b90cbb88e6830d3e73cbad7a1f0442dd","sha256":"7320b658f0d41897702b5b1f1885c7738db7dc99af602fe60f1eed3a4daf1423","sha512":"5fb64f65380ef089c56970545ab064af44e95f83574c14bbc1f0ed8ad4adf4caef7c98e4db5213ff00397a533eec88924f2060e7e4dd06e4d65d3bee19922743","ssdeep":"","tlshash":"b501fe243d152534a345616531bfe7887e313137fa0694c2a0bfccb8b938d921417e8d","first_seen":"2025-04-01T20:35:41.688728Z","last_seen":"2026-08-12T14:21:01.370907Z","times_seen":1799,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":12,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.276Z","timestamp":1786544409276,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://plgv2.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 07 Aug 2026 18:07:09 GMT\r\nexpires: Sat, 07 Aug 2027 18:07:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 418380\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-12T21:33:01.711813Z","times_seen":548813,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":44,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.reamaze.com/assets/reamaze.js","fqdn":"cdn.reamaze.com","domain":"reamaze.com","tld":"com"},"ip":{"addr":"172.66.151.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.662Z","timestamp":1786544409662,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.reamaze.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Thu, 17 Jul 2025 20:54:16 GMT","end":"Tue, 18 Aug 2026 20:54:16 GMT"},"fingerprint":{"sha1":"95:C6:DA:9F:AF:CA:EF:87:7E:36:1A:38:18:5D:94:C6:B2:F0:9E:30","sha256":"86:29:30:4F:A2:4A:3D:4D:DD:E8:F8:F3:90:7D:BB:C6:D9:38:3F:36:D3:F8:BA:B7:AE:70:44:B2:2F:FA:53:FD"}}},"request":{"raw":"GET /assets/reamaze.js HTTP/1.1\r\nHost: cdn.reamaze.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 211147\r\nserver: cloudflare\r\nvary: Accept-encoding\r\nlast-modified: Tue, 11 Aug 2026 21:37:51 GMT\r\netag: \"338cb-658cc485ea9c0\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nage: 1377\r\ncf-cache-status: HIT\r\ncf-ray: a2a01e8059075ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":808122,"size_decoded":211501,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32729)","md5":"7c8b296bfb8701939c19156628c39995","sha1":"ccf5e5cd881fbad48d4f8d0f92dda38e30f8ed61","sha256":"0ae65e5243eec78c1a861a98184c6a68e96a393fac53924d2a4034e658d9ec1f","sha512":"d28792b1b768f4b0dfa6c009d95200b54b31e7710579209a0fea431b7af4c1dd3045c14485aeefd0f6dded541641772e2f0925b642cd8aff0758fc4ab97d8a50","ssdeep":"6144:yfWd1EsJf8KXvvR7yAuP0outXHauphBXi+ZcWW3Yj3kQ8wXFS3qS5BGM5vtCV2Zo:o+SK8lcnxF+B75I+o","tlshash":"69053a98f6e0702943e7117651bf2505b376381da4184028b66dd8eabff894d623bfbc","first_seen":"2026-08-07T19:29:10.287216Z","last_seen":"2026-08-12T14:21:01.374788Z","times_seen":18,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/assets/svg/avatar/brilliant-border.svg","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.877Z","timestamp":1786544409877,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /assets/svg/avatar/brilliant-border.svg HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/main.0fffc87820ff4b62.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 06 Aug 2026 14:05:40 GMT\r\nx-content-type-options: nosniff\r\nexpires: Fri, 11 Sep 2026 14:20:09 GMT\r\ncache-control: public, max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 220331\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\netag: W/\"6a7494b4-249\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2a01e81bc0a0b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":585,"size_decoded":920,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3be56540dbcfa7c1652da7c3d660adea","sha1":"e257128f72879a79d808e0a20110997c3e0814d5","sha256":"6211688fb2e579c070433c2ff50b5a6bf081b9ac486985f8ab6048c6a8c40214","sha512":"2d094d9872f01c70191392403efad17183d109e237d50b586546f5c7c2d4ba1e3ad7ab2ab43800b1c2c2e706831adf713cc291319aa98d1e54413b0f334cae8b","ssdeep":"","tlshash":"7cf0282ea3a8d93bc25dc298e4406455511d818369d5c290e6e0ff2e59294823c2b6ed","first_seen":"2025-09-10T02:33:42.767052Z","last_seen":"2026-08-12T14:21:01.376521Z","times_seen":6,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"avatars.steamstatic.com/2883031cac2138513317f81ab93948613f1cae09_full.jpg","fqdn":"avatars.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:32.081Z","timestamp":1786544432081,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avatars.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 13:33:18 GMT","end":"Mon, 21 Sep 2026 13:33:17 GMT"},"fingerprint":{"sha1":"7E:A8:7E:7A:3C:7E:B6:D6:B8:FD:DE:25:7C:26:02:14:6A:C0:E4:E4","sha256":"D1:CF:B0:B9:E1:DA:54:D8:17:C7:F7:77:FA:5A:37:E4:63:8E:A6:DE:42:57:85:7B:36:BA:72:7A:4F:3F:07:A6"}}},"request":{"raw":"GET /2883031cac2138513317f81ab93948613f1cae09_full.jpg HTTP/1.1\r\nHost: avatars.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncontent-md5: 9MuRGDpXbVl0fL5P+28adA==\r\nlast-modified: Mon, 23 Mar 2026 19:10:45 GMT\r\netag: \"0x8DE890FE2CDEFB9\"\r\nx-ms-access-tier: Hot\r\nx-ms-access-tier-inferred: true\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 158800\r\ndate: Wed, 12 Aug 2026 14:20:32 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270036-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0\r\nx-timer: S1786544432.082151,VS0,VE1\r\ncontent-length: 5389\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5389,"size_decoded":5973,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 184x184, components 3","md5":"f4cb91183a576d59747cbe4ffb6f1a74","sha1":"792bd46067472ee564511fe5f106c5ed797ca885","sha256":"df7e2b09e210eea5ed90bdb51a01aa21ad28d46cc8d6c103608a36c1ada48a8f","sha512":"0a04bbf3f95f9aa6c9418561527227f49db475c779d99ca10986c5d91cc9c915d503b7eb86bb8e58a63a7cd4ba213f7045c976d11450bca7e82f6bfd314dfed6","ssdeep":"96:RwdoCWBFAzUQ6bbbP9huK5PilxKxOt45U5baNErnw3RlQ97gdQ/YIKCl4KONhWeX:RVlzAoQuP3lqfKxo4520Es497gCzKSs5","tlshash":"5cb16d45c7596fd8f5b5ab3901b00f93f1cd5ec29ad089c46acac4b17016272c18a7fd","first_seen":"2026-08-12T14:21:01.377908Z","last_seen":"2026-08-12T14:21:01.377908Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Montserrat:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:08.339Z","timestamp":1786544408339,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:43 GMT","end":"Mon, 12 Oct 2026 18:07:42 GMT"},"fingerprint":{"sha1":"3C:2E:4A:58:D0:DB:8D:00:50:7D:0E:E6:87:DE:CA:95:B3:BA:1B:89","sha256":"C2:4F:05:DF:4B:24:E4:A9:E4:2A:30:66:F4:78:E7:75:AC:AE:71:43:E7:DA:3E:24:4B:A3:AA:9A:39:4E:E2:E1"}}},"request":{"raw":"GET /css2?family=Montserrat:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 12 Aug 2026 14:20:08 GMT\r\ndate: Wed, 12 Aug 2026 14:20:08 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34812,"size_decoded":1776,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"76e3e3043c43750b4048643e10e5a17b","sha1":"2dae7be8964bb1302e040a78d80621749d6053d8","sha256":"8657d26f0c60d5b2f909f2745b6a2d8df7efad9b3de73c0d33171c6214df8c05","sha512":"16dd77ebf3efd8897bd62ff43852e13251ea57f1661acd3a9650858986215f7a817ee902f5403b937a602154ee8203b85dd682c06629932fd18de0c44c2148ee","ssdeep":"384:A3Cw37F3Y3I3wHwcFFB5YwNFu+GNw+Fr/PWw/FkEUrwAFRd9cwxFqqKRwyF3rz6l:0Zds8FdCWQp","tlshash":"46f2af911057e500ea472cc523cf7e26de4e666674a4c5797ffd2ca8adeac221324b2c","first_seen":"2025-09-05T02:49:53.621529Z","last_seen":"2026-08-12T20:45:38.342792Z","times_seen":13954,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":2,"connect":17,"send":0,"wait":35,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avatars.steamstatic.com/eef75511ba1f16b66e9ac45346e7c0f790a6551a_full.jpg","fqdn":"avatars.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:27.020Z","timestamp":1786544427020,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avatars.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 13:33:18 GMT","end":"Mon, 21 Sep 2026 13:33:17 GMT"},"fingerprint":{"sha1":"7E:A8:7E:7A:3C:7E:B6:D6:B8:FD:DE:25:7C:26:02:14:6A:C0:E4:E4","sha256":"D1:CF:B0:B9:E1:DA:54:D8:17:C7:F7:77:FA:5A:37:E4:63:8E:A6:DE:42:57:85:7B:36:BA:72:7A:4F:3F:07:A6"}}},"request":{"raw":"GET /eef75511ba1f16b66e9ac45346e7c0f790a6551a_full.jpg HTTP/1.1\r\nHost: avatars.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncontent-md5: nyIN2xB5TirgyYh9JtPpDg==\r\nlast-modified: Tue, 22 Mar 2022 04:36:43 GMT\r\netag: \"0x8DA0BBD90D4C4CE\"\r\nx-ms-access-tier: Cold\r\nx-ms-access-tier-change-time: Sat, 13 Sep 2025 10:58:43 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Wed, 12 Aug 2026 14:20:27 GMT\r\nvia: 1.1 varnish\r\nage: 1176570\r\nx-served-by: cache-bma-essb1270036-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 1\r\nx-timer: S1786544427.021736,VS0,VE1\r\ncontent-length: 6222\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6222,"size_decoded":6836,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80\", baseline, precision 8, 184x184, components 3","md5":"9f220ddb10794e2ae0c9887d26d3e90e","sha1":"1028fef96522ff046e5e32faf0fe4774576ae402","sha256":"3a26106fdada663aca40a3338a1b95d5fec2646fed7c0f7dadb12769307318da","sha512":"7ce740eb351eba33f09a5aae09e8c8066169a9f4ccc331880af58c936f052e0165fe2cdfe06460ec81c8871f46e7b6b28584c4d646449aac4787b5fabc9d9632","ssdeep":"96:IEzFZVd00PN11M1qz+w5Ur/5bK0L39HAob4EYC7g+CYkEZS0sJRmJcPfV:I400l/M185UpK0LtHpNUol40I1Pd","tlshash":"4dd18e6dbb46cb187256eb7f38b718f7da5ca24da0a401ce0652969fd004ee090cad0b","first_seen":"2026-08-12T14:21:01.381987Z","last_seen":"2026-08-12T14:21:01.381987Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/assets/svg/avatar/vip-border.svg","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.881Z","timestamp":1786544409881,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /assets/svg/avatar/vip-border.svg HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/main.0fffc87820ff4b62.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Aug 2026 15:14:08 GMT\r\nx-content-type-options: nosniff\r\nexpires: Fri, 11 Sep 2026 14:20:09 GMT\r\ncache-control: public, max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 574038\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\netag: W/\"6a7201c0-24d\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2a01e81bc0e0b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":589,"size_decoded":923,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d4082827be7e459b7858eb15077e2cb9","sha1":"649dc86e007033584aeb778bd1f05fe281a90ea4","sha256":"82938af56019c98520fe04313c0825c2385e91001c8dfca6aa0f7278fca07abc","sha512":"8582c25541ac1265c3fe1b45e07b34edb0f7fff4df4f5a9c4fdf826d3a0e1502d066fd79d3fcd0ee424a956dbcf65ed1f196d99fa8959f7e8707111cbb58f59c","ssdeep":"","tlshash":"fcf04c2fa3a8cc3bc35dc29ce4406855615d814369d5c250d6e0ff2e59394c23c2ebed","first_seen":"2025-08-28T22:23:07.310713Z","last_seen":"2026-08-12T14:21:01.384876Z","times_seen":7,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/graphql","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.654Z","timestamp":1786544409654,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"POST /graphql HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/\r\ncontent-type: application/json\r\nauthorization: undefined\r\nlocale: undefined\r\ntimestamp: 1786544409312\r\nContent-Length: 559\r\nOrigin: https://plgv2.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":559,"data":"[{\"operationName\":\"ChatRoomByLocale\",\"variables\":{},\"extensions\":{\"persistedQuery\":{\"version\":1,\"sha256Hash\":\"0fcb5688f34472ed88eed7142dbccaff95d78c5bec00fda466529e549b934322\"}}},{\"operationName\":\"LivefeedStake\",\"variables\":{\"args\":{\"take\":15}},\"extensions\":{\"persistedQuery\":{\"version\":1,\"sha256Hash\":\"7c238c98ee224b21f48f05299ac2e716679a69ed7aee15ea49f7be8baf68f915\"}}},{\"operationName\":\"Livefeed\",\"variables\":{\"args\":{\"take\":6}},\"extensions\":{\"persistedQuery\":{\"version\":1,\"sha256Hash\":\"8e60fa16fc59d5d99970bf104c3ddb690bc25079ab303dc6d53f52895509ed34\"}}}]"}},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\nreferrer-policy: same-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 1; mode=block\r\nx-ratelimit-limit: 20\r\nx-ratelimit-remaining: 19\r\nx-ratelimit-reset: 3\r\ncache-control: no-store\r\netag: W/\"686a-96ndG+8bq7iBTa6f90JW3oAqgKM\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nexpect-ct: max-age=86400, enforce\r\nserver: cloudflare\r\ncf-ray: a2a01e805ae90b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26730,"size_decoded":4268,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2c75c2d98bff490df5078a737c9fafee","sha1":"f7a9dd1bef1babb8814dae9ff74256de802a80a3","sha256":"0ed0c39facaefa909f1a85c840da61b2f5768ed85480ea78a2de6268de2b1445","sha512":"aae81236f6f410685ecd37ed5de558b3283e85a64ebf67cc4dcfa1d7d97e56b1f0cb850c472f574e6960358b357f70557a18fdf1e26d70c58b57b0f6bf8d9101","ssdeep":"768:3uruUeuyZ9JTisPFFhfwuWuDudRDuEZusfovv8vkYv3vGvlQkYX4W4fBx2UPeXSy:3uruUeuyZ9JTisPFFhfwuWuDudRDuEZT","tlshash":"fbc2bf6a0d889c9e8b9c3783a581b63fd1ad32131187fed4c8e9df24759d2e6311127e","first_seen":"2026-08-12T14:21:01.386002Z","last_seen":"2026-08-12T14:21:01.386002Z","times_seen":1,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"avatars.steamstatic.com/d6ee9815263c07d0f25d4059a0f72f0a7a7e5f9d_full.jpg","fqdn":"avatars.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.995Z","timestamp":1786544409995,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avatars.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 13:33:18 GMT","end":"Mon, 21 Sep 2026 13:33:17 GMT"},"fingerprint":{"sha1":"7E:A8:7E:7A:3C:7E:B6:D6:B8:FD:DE:25:7C:26:02:14:6A:C0:E4:E4","sha256":"D1:CF:B0:B9:E1:DA:54:D8:17:C7:F7:77:FA:5A:37:E4:63:8E:A6:DE:42:57:85:7B:36:BA:72:7A:4F:3F:07:A6"}}},"request":{"raw":"GET /d6ee9815263c07d0f25d4059a0f72f0a7a7e5f9d_full.jpg HTTP/1.1\r\nHost: avatars.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncontent-md5: t01KPMYny02sA6GiWBsWdQ==\r\nlast-modified: Wed, 10 Dec 2025 07:54:27 GMT\r\netag: \"0x8DE37C157FC4A29\"\r\nx-ms-access-tier: Cold\r\nx-ms-access-tier-change-time: Tue, 09 Jun 2026 03:31:56 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\nvia: 1.1 varnish\r\nage: 539600\r\nx-served-by: cache-bma-essb1270036-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 1\r\nx-timer: S1786544410.995586,VS0,VE1\r\ncontent-length: 6237\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6237,"size_decoded":6850,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 184x184, components 3","md5":"b74d4a3cc627cb4dac03a1a2581b1675","sha1":"90462a03f64afbfed0834a3d01b90aaad23bdc04","sha256":"53ba7e81165aa33ebe40eabe9778082da0ecca1e23fdf8ba3f169e50a1c8170a","sha512":"b9d9db6be1c803d0f76c35b74a2c29a2cf3c078610e5667d5d79f9d3b52b0fb656c5c3209974135b3d72c2878d59192b8b284b74daea73e6fb3624fe79c00db1","ssdeep":"192:os2rYiWiNaLUtLMmiqNw+wed+nhhB5cykEq5:oxrnN4cS+wed+nhbuR/","tlshash":"3cd18d32691f9ed5f27b4e2c425baf06c6c0ba6961614bbb38f1301c99a54fe8f44c16","first_seen":"2026-08-12T14:16:13.97545Z","last_seen":"2026-08-12T14:21:01.388596Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/main.0fffc87820ff4b62.css","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:08.236Z","timestamp":1786544408236,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /main.0fffc87820ff4b62.css HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 06 Aug 2026 14:05:40 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7494b4-6247d\"\r\nexpires: Thu, 12 Aug 2027 14:20:08 GMT\r\ncache-control: public, max-age=31536000\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Accept-Language,Authorization,Accept,Origin,DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range\r\naccess-control-allow-methods: GET,POST,OPTIONS,PUT,DELETE,PATCH\r\nx-robots-tag: noindex, nofollow, nosnippet, noarchive\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 519190\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: a2a01e777b170b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":402557,"size_decoded":107526,"mime_type":"text/css","magic":"ASCII text, with very long lines (13848)","md5":"13e11a56bed452de1f9a03ebbca6b1f9","sha1":"e903622b9e008013651ed1a0fbcb2c5b1b5ce170","sha256":"cb8e40db9c61182e5aaf54d2f597d5fc85f01b628402791e039147062b77757d","sha512":"75713a1ba87b8dd0b90fc0f44e00c79c485831abf3b780f3b0876db6dc015a7e9047d20d76934b0cdd79bcca5693480c5985d71c581da7ddbb901ec4e1340614","ssdeep":"3072:SeUUNQC7HILvPQgw/+lzR/Sz4DOsz75nJ2Yi775H:SeUUA/Sz4DOAEYi7Z","tlshash":"a984d8215595346df07bd22aa1e0aa5d723cc407fb270bfeeb56365c818929b0637fc8","first_seen":"2026-08-12T14:16:13.958827Z","last_seen":"2026-08-12T14:21:01.390746Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/assets/images/games/all-slots.png","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.218Z","timestamp":1786544409218,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /assets/images/games/all-slots.png HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/main.0fffc87820ff4b62.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 52042\r\nlast-modified: Thu, 06 Aug 2026 14:05:40 GMT\r\netag: \"6a7494b4-cb4a\"\r\nexpires: Fri, 11 Sep 2026 14:20:09 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 154346\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: a2a01e7d988c0b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52042,"size_decoded":52642,"mime_type":"image/png","magic":"PNG image data, 674 x 400, 8-bit colormap, non-interlaced","md5":"4ed01b7c3d19bdf8bd876d7eb7131278","sha1":"fb3ac6935f9c15be2c640cd36e9b105d11a02023","sha256":"ff8f35945ce35589c3f292865ced47591ee591dd9793e48d2dbe16db84d0b7bf","sha512":"8e7e2468f0b69f1ebeadc927ce7479932883b6dd5ddfe3a5fa54399c013e404eb957d268b6726315410223788c4f2714cc42ca8516fa569ff9de7991d7f05a3a","ssdeep":"1536:sDsmHLifDkr62gXW+ExFBRImo1pvmkDwcw5p:cSDk7+QArpvk","tlshash":"6e33023da3c035dbef890e736fc39d940d20fb34a1956adc7adcacc9601869d6097686","first_seen":"2025-08-28T22:23:07.229102Z","last_seen":"2026-08-12T14:21:01.393691Z","times_seen":6,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/assets/svg/games/soccer.svg","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.225Z","timestamp":1786544409225,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /assets/svg/games/soccer.svg HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/main.0fffc87820ff4b62.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 06 Aug 2026 14:05:40 GMT\r\nx-content-type-options: nosniff\r\nexpires: Fri, 11 Sep 2026 14:20:09 GMT\r\ncache-control: public, max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 376422\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\netag: W/\"6a7494b4-2128\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2a01e7da89d0b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8488,"size_decoded":4062,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"407afb1fbb006667d8a11bbe517493b2","sha1":"a9c3678d3df935c850e824e71005b112cfd4dadd","sha256":"9c839395e2e770ea0000626de52d0de93f9b8b85dca66e205e974822b80d3726","sha512":"b6681b6ce4f6b8bebc3b3d25c068339640eb81950a0d28569c6fcad9565a0c2d0b9ec4f4cdd1fe79813daa121264923297006b180b900207ff7ed40f58c817ed","ssdeep":"192:H4Ms3t2VmtpoCx7FykSi0ntf9gAYYxo4D2NGuu8upPQf7p:+d2VkpoCxRykd0tGAjxBSRnuE","tlshash":"080230eceab951e1e043e6eaca3104ae771f50fd75914f61c66cbf0a3a1212c5e24c97","first_seen":"2024-11-27T09:46:18.275709Z","last_seen":"2026-08-12T14:21:01.394867Z","times_seen":8,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/assets/svg/games/hickey.svg","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.228Z","timestamp":1786544409228,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /assets/svg/games/hickey.svg HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/main.0fffc87820ff4b62.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 13 Jul 2026 18:43:11 GMT\r\nx-content-type-options: nosniff\r\nexpires: Fri, 11 Sep 2026 14:20:09 GMT\r\ncache-control: public, max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 2562450\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\netag: W/\"6a5531bf-1dd6\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2a01e7da8a50b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7638,"size_decoded":3400,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a950fdf4e1c651b42a8c905b3615fdcf","sha1":"fb9764e6bbf336452761f7dd185b1bf4bf9da3d8","sha256":"40b0c74cb8c21cdbfa6649009288f9de1af0bb0d3c8e22c3e73754c9d9a9540c","sha512":"7ad97dba38f9cdc900112ef0b7d2eac01bf72bc456b96567e9a8ac099cf996d6fa7072b472d954f26d8db98a41dc0b4974b39f9b1bed0e965d3b8263bed23fa0","ssdeep":"96:1Xylah9XLYAvU+QGS7h0KZsnIsrc0H09+giavQG+bvSh++zoFuc3mzG0hWOp0m4t:IoYAMVGS09B0Mg3QG8qh7oF1mvBfQ","tlshash":"d3f164d8eabc43f5d111e2d9de25406f362f10dbabc04a71c6acef1b281609a9e4dc94","first_seen":"2024-11-27T09:46:18.286323Z","last_seen":"2026-08-12T14:21:01.395889Z","times_seen":8,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.278Z","timestamp":1786544409278,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://plgv2.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 07 Aug 2026 18:07:09 GMT\r\nexpires: Sat, 07 Aug 2027 18:07:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 418380\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-12T21:33:01.711813Z","times_seen":548813,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":35,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.282Z","timestamp":1786544409282,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://plgv2.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 07 Aug 2026 18:07:09 GMT\r\nexpires: Sat, 07 Aug 2027 18:07:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 418380\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-12T21:33:01.711813Z","times_seen":548813,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":22,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://plgv2.com/graphql","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.162Z","timestamp":1786544409162,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /graphql HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://plgv2.com\r\nSec-WebSocket-Protocol: graphql-transport-ws\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: eOxi4eZFUzjB9xmzdwtLtg==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Wed, 12 Aug 2026 14:20:09 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: dxGikfY948RDmMaShBF6sKDJUV0=\r\nSec-WebSocket-Protocol: graphql-transport-ws\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nServer: cloudflare\r\nCF-RAY: a2a01e7d482eb518-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":512,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T21:54:00.44177Z","times_seen":17861250,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":0,"dns":0,"connect":1,"send":0,"wait":106,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/assets/images/games/crash.png","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.215Z","timestamp":1786544409215,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /assets/images/games/crash.png HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/main.0fffc87820ff4b62.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 39211\r\nlast-modified: Tue, 04 Aug 2026 15:14:08 GMT\r\netag: \"6a7201c0-992b\"\r\nexpires: Fri, 11 Sep 2026 14:20:09 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 574038\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: a2a01e7d98880b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39211,"size_decoded":39811,"mime_type":"image/png","magic":"PNG image data, 674 x 400, 8-bit colormap, non-interlaced","md5":"efd8477b52189c57232688bf79b5de34","sha1":"53527fcd97e5dab1bc04b9781095e59c235ba78b","sha256":"fcec203d591ec360c7b8741a7fcb2fd15d86e9fe0ad1e3d2466c1b869238f410","sha512":"28c138901d49af6c95d4bef65d851815cf912100669fda01619e52c43c8a313e2bc0fb07dcdf60c68c1b95153ede9c7d08073e8fbc254b9365be70b124251301","ssdeep":"768:K29uZOccHC7AyFTUh6c+IaVfvXqCiVz7AraCQ8gsA0Z4i:KFcHSJFTUhlHa5vwHOapjD0Z4i","tlshash":"dc03f15b9b5b58c90c62d832507e480817ef45a7ccad61c8492c6858e4bfb3b782bb73","first_seen":"2025-08-28T22:23:07.264073Z","last_seen":"2026-08-12T14:21:01.397876Z","times_seen":6,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/assets/images/games/coinflip.png","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.217Z","timestamp":1786544409217,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /assets/images/games/coinflip.png HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/main.0fffc87820ff4b62.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 52880\r\nlast-modified: Thu, 06 Aug 2026 14:05:40 GMT\r\netag: \"6a7494b4-ce90\"\r\nexpires: Fri, 11 Sep 2026 14:20:09 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 452866\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: a2a01e7d988a0b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":52880,"size_decoded":53480,"mime_type":"image/png","magic":"PNG image data, 674 x 400, 8-bit colormap, non-interlaced","md5":"cae3028a75ef934822f7df7c6a4160ae","sha1":"df4c2cbcf5614bf7826837f8a410da0b757a2c8f","sha256":"fa4f473c9e319a17bf427d1510f032806d4f96554b109c7c718900ce05febb3d","sha512":"e2c9f07415b78c593da26369adc42247b68373881e3806e3928b930a08f32927c3372f0acec175b890bc1916eec67fc42a5b572a3542575437db5447706ff986","ssdeep":"768:15oQ7N0pYYCbETpJZzXU0tM3JLZjYnrsgVE8moISooUzJ1OKcuYCL6vEKK6I0D/a:/PyCLeXzXPajwm0wVx9L6MKXl2T","tlshash":"e933f289824ca0d6c92979f0365aa87358941da6dfec1ba95dc0bf36740a3ab1330d53","first_seen":"2025-08-28T22:23:07.260729Z","last_seen":"2026-08-12T14:21:01.398833Z","times_seen":6,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/assets/svg/games/tennis.svg","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.230Z","timestamp":1786544409230,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /assets/svg/games/tennis.svg HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/main.0fffc87820ff4b62.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 20 Jul 2026 03:29:45 GMT\r\nx-content-type-options: nosniff\r\nexpires: Fri, 11 Sep 2026 14:20:09 GMT\r\ncache-control: public, max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 1328092\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\netag: W/\"6a5d9629-17ea\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2a01e7da8a90b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6122,"size_decoded":3385,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c1970051e559efa66ed702d1b94c4601","sha1":"58a34036745b36a8ca92bd450bb51330735c0ac6","sha256":"b19a2a5e9e1747422193b57a1b00f22ae9f262e9a9602eea69d8a4d288bdb3e5","sha512":"05bf2d453ddb0306678fdb0fcc95e7bf60e3e4cc0a2efe79841436f24e3b38337cf9b5ae25633c0d8b2dfa2cf61e1b7e63330e2c98aa0b8148d150145aa9a25f","ssdeep":"96:BsDQ0a4ni/YKd/sN2SC0q2mTFQlnEKr0HqsBK4lDx8GTQk7s9:v8i/YKd/rSC0qBFQIq6l6wQ5","tlshash":"d8c1ba9c7b7893e8e901d3eed6303156391f20e57a924f74c7586e0ea87246d8e158d1","first_seen":"2025-08-28T22:23:07.266866Z","last_seen":"2026-08-12T14:21:01.399693Z","times_seen":7,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"avatars.steamstatic.com/082b719b3a875dff64f23361a50e3349d363b196_full.jpg","fqdn":"avatars.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.856Z","timestamp":1786544409856,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avatars.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 13:33:18 GMT","end":"Mon, 21 Sep 2026 13:33:17 GMT"},"fingerprint":{"sha1":"7E:A8:7E:7A:3C:7E:B6:D6:B8:FD:DE:25:7C:26:02:14:6A:C0:E4:E4","sha256":"D1:CF:B0:B9:E1:DA:54:D8:17:C7:F7:77:FA:5A:37:E4:63:8E:A6:DE:42:57:85:7B:36:BA:72:7A:4F:3F:07:A6"}}},"request":{"raw":"GET /082b719b3a875dff64f23361a50e3349d363b196_full.jpg HTTP/1.1\r\nHost: avatars.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AKhXX7LUXKLFwBbsdjE0oNM6_BQGZhgamox5TlmkJ0bVjbqNr9AZrTzADR0Rs_heSIOuic0\r\nlast-modified: Sun, 22 Jun 2025 11:40:20 GMT\r\netag: \"670d9a5511d3f8a291833f40ec7eeacd\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\nvia: 1.1 varnish\r\nage: 787686\r\nx-served-by: cache-bma-essb1270036-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 463\r\nx-timer: S1786544410.897038,VS0,VE0\r\ncontent-length: 12278\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12278,"size_decoded":12880,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 184x184, components 3","md5":"670d9a5511d3f8a291833f40ec7eeacd","sha1":"fcc54b6b562b30b10b658856f059d17426467e7a","sha256":"fc57fd8435c76827445c80ed93d1c338b1afde7bf1e0d5ebe179d3305d664fe7","sha512":"6312709bd66b00c4ce1174be64b0ffdefbbf7765f683ffbecc07cea9a41d4286d4ba921d204b284686454150439fd7ae64ad4c7e153bbabf25c6109536d67a42","ssdeep":"192:27i/AS/kjMsOpQ9+K4jfEiWC2po8WPtub2wJgCnGeMrqNS2CrgwpTdpi/UCflbcA:+i/AMkoFQQz9WCn8WF9wJfM/lhpTdpil","tlshash":"ea42bf7600a0a6eab65b645e5caa7f7f40c41b2532c372e081d83c446a3c34f4e862a6","first_seen":"2026-02-04T19:11:56.442883Z","last_seen":"2026-08-12T14:21:01.401584Z","times_seen":3,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":9,"receive":1,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avatars.steamstatic.com/28fa52fa459b098e7c0ccb9cab772c6bebd328bd_full.jpg","fqdn":"avatars.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.861Z","timestamp":1786544409861,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avatars.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 13:33:18 GMT","end":"Mon, 21 Sep 2026 13:33:17 GMT"},"fingerprint":{"sha1":"7E:A8:7E:7A:3C:7E:B6:D6:B8:FD:DE:25:7C:26:02:14:6A:C0:E4:E4","sha256":"D1:CF:B0:B9:E1:DA:54:D8:17:C7:F7:77:FA:5A:37:E4:63:8E:A6:DE:42:57:85:7B:36:BA:72:7A:4F:3F:07:A6"}}},"request":{"raw":"GET /28fa52fa459b098e7c0ccb9cab772c6bebd328bd_full.jpg HTTP/1.1\r\nHost: avatars.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncontent-md5: a6ErfYWMkU2UgkFf6C0qXw==\r\nlast-modified: Sun, 09 Aug 2026 14:25:18 GMT\r\netag: \"0x8DEF62209936915\"\r\nx-ms-access-tier: Hot\r\nx-ms-access-tier-inferred: true\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 258861\r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270036-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 0\r\nx-timer: S1786544410.900394,VS0,VE2\r\ncontent-length: 14437\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14437,"size_decoded":15021,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 184x184, components 3","md5":"6ba12b7d858c914d9482415fe82d2a5f","sha1":"7cfb1afd5a61df5818f56ab90e95182b7a48dd4d","sha256":"84adadab865a42c8e8d2d7ab1fc3d6735ed6b93fb57dada1466dc0101c45fb28","sha512":"a5dc9ab13caccf69e9cc9445f4746770200acfed57af47a916970a2d424f2d887ea3b76c5e06d1027aa6d79e9b185984243d079dc33cc1ae8ac9845d4d808630","ssdeep":"384:rk2pSUapZ7vl4R13pYeKfNng5gDijcVDckYO:rj3aziRppYVFg5TwV3","tlshash":"4d52c0567a168ed475b9df901e30dee182fd7a12002b311e1fcebbc388a0e586e9540a","first_seen":"2026-08-12T14:16:13.942487Z","last_seen":"2026-08-12T14:21:01.40356Z","times_seen":2,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":10,"send":0,"wait":19,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://ws.reamaze.com/app/?EIO=3\u0026transport=websocket","fqdn":"ws.reamaze.com","domain":"reamaze.com","tld":"com"},"ip":{"addr":"172.66.151.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:10.321Z","timestamp":1786544410321,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.reamaze.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Thu, 17 Jul 2025 20:54:16 GMT","end":"Tue, 18 Aug 2026 20:54:16 GMT"},"fingerprint":{"sha1":"95:C6:DA:9F:AF:CA:EF:87:7E:36:1A:38:18:5D:94:C6:B2:F0:9E:30","sha256":"86:29:30:4F:A2:4A:3D:4D:DD:E8:F8:F3:90:7D:BB:C6:D9:38:3F:36:D3:F8:BA:B7:AE:70:44:B2:2F:FA:53:FD"}}},"request":{"raw":"GET /app/?EIO=3\u0026transport=websocket HTTP/1.1\r\nHost: ws.reamaze.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://plgv2.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: d7EBSLuYoorXD2GSytQTIQ==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Wed, 12 Aug 2026 14:20:10 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: 3j8V0lBzjLcvvgOH7+YEtHDXRpM=\r\nuWebSockets: 20\r\ncf-cache-status: DYNAMIC\r\nServer: cloudflare\r\nCF-RAY: a2a01e84bc630b4d-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":259,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T21:54:00.44177Z","times_seen":17861250,"resource_available":true,"data":null}},"time_used":406,"timings":{"blocked":0,"dns":22,"connect":18,"send":0,"wait":358,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/assets/images/games/new-all-bets.png","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.219Z","timestamp":1786544409219,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /assets/images/games/new-all-bets.png HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/main.0fffc87820ff4b62.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 197462\r\nlast-modified: Tue, 04 Aug 2026 15:14:08 GMT\r\netag: \"6a7201c0-30356\"\r\nexpires: Fri, 11 Sep 2026 14:20:09 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 677417\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: a2a01e7d98900b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":197462,"size_decoded":198064,"mime_type":"image/png","magic":"PNG image data, 616 x 400, 8-bit/color RGBA, non-interlaced","md5":"af79c5af50f545a756ac3db3a33b0e88","sha1":"51ab3c276c34e0acb659262af6198af267b42ffb","sha256":"2ece309a354f583de0d836c9e8e8fdcb437cf12f50bbb3eb1abed8f994165c9b","sha512":"d96a5afba82fa154047037052733df5437ca2c2dbd14411c9d7de53941d07a8413a043e278d0195e5a2db1caabe22190d0fd5837d799e64ab167401a156b17d8","ssdeep":"3072:MzOrzZ0e32I1eiDdII2TGr3WYfRlIJA3/X4dDgT1jtxHFzOLKGttHcPvs0TiiS:MGzZFeiRII7quiA/XI4jxOGGtWPv7uiS","tlshash":"651423afb103c8d04b5cd4c7c34ae89570aadc74169f58e9939a634e17237f942434f6","first_seen":"2025-08-28T22:23:07.271793Z","last_seen":"2026-08-12T14:21:01.405285Z","times_seen":6,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/assets/images/about/dep_money.png","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.330Z","timestamp":1786544409330,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /assets/images/about/dep_money.png HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 132310\r\nlast-modified: Mon, 13 Jul 2026 18:43:10 GMT\r\netag: \"6a5531be-204d6\"\r\nexpires: Fri, 11 Sep 2026 14:20:09 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 2562421\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: a2a01e7e49380b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":132310,"size_decoded":132913,"mime_type":"image/png","magic":"PNG image data, 1300 x 248, 8-bit/color RGBA, non-interlaced","md5":"d0ca0d9dd62486203bfc870cddaf19f8","sha1":"047e4a9c419c125ce4338fdd06aafc645b3433c1","sha256":"73d617ec62c6ceae3c49a908d025b6fdb060efa0c60ad4f8585cc41ef5fae5b6","sha512":"33c7378b6e895906466acb23570679088dbacf30083f82695b25b72a9cb5e9e57650df5ca8605b6a754c00fe3e204a630ea551e9e5cd958ec4ebfcd858dd82cd","ssdeep":"3072:bq0H8fJCdXJerTVzWwOg8UtQVclvaZE67KBx7bXGMO/u:Wo8BGCAxV6x6+5rGrG","tlshash":"3bd31276ce6b153af748174f125858b63697ace643c07280e6abb0b75933302b9305fe","first_seen":"2025-08-28T22:23:07.340356Z","last_seen":"2026-08-12T14:21:01.406811Z","times_seen":6,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/favicon.ico","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.549Z","timestamp":1786544409549,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Mon, 13 Jul 2026 18:43:10 GMT\r\nx-content-type-options: nosniff\r\nexpires: Fri, 11 Sep 2026 14:20:09 GMT\r\ncache-control: public, max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 2562482\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\netag: W/\"6a5531be-2f7e\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2a01e7faa3b0b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12158,"size_decoded":3199,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 54x54, 32 bits/pixel","md5":"c7a9a129ece9216071df570ed6feaf2a","sha1":"0ddf76e9790e9c70a87b37330e2f9dfcb5f230a8","sha256":"6f671a4a83490869e87dc3a87ee41c2f43fe3ad8dffbce7280393ce851474c70","sha512":"d2cdf3ca7b6be3d807e1ef67c7d6d6752d95b6922195305f291cc7729f399330c2e02d4fadac31c6f6b355a887c521c7c850d41c080205151c5dead1edf3167c","ssdeep":"96:mUaMbBbziCgjvpxINDSTNymhetANz4ABRVqZxileumyqlTPxzBpYcC5:mUfBzRygCy+eu/bkxiyyqVP3iz5","tlshash":"b942d672f5617e83c61801b8a15f9ae295a17d7f15803d3424c875d8183eab0aafa21f","first_seen":"2024-11-27T09:46:18.219093Z","last_seen":"2026-08-12T14:21:01.408021Z","times_seen":10,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/modern-normalize/1.1.0/modern-normalize.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:08.227Z","timestamp":1786544408227,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/modern-normalize/1.1.0/modern-normalize.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://plgv2.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 12 Aug 2026 14:20:08 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 591\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Fri, 11 Jun 2021 09:30:53 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tsjJyY7rQY1kWz%2FM%2B4nXSGYdcbx6S5ZpBq80%2FeZ9BppjBDdWiSSRoqnsS2Kxd8QA5xPr4Zcxu9T5T%2B7v1cwykTw7GH%2Fg6RrxKcKHgZj1YhUwtWPUFXWjooVgus6zFb7Cowxhqoho\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: a2a01e777dc7b4eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1402,"size_decoded":1584,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1402), with no line terminators","md5":"27778638e54c95918c7696ef88661ddf","sha1":"8952eeeefa592870da2c1dc352c34fc6c5bbcafd","sha256":"4af061be8a46b0a8a8e8c5a67d57facfda8eab9812d6428a9eacf01ee59836da","sha512":"c293d8500763055484e0a2671f5551d477997e9975b9bf184ff34ac783ee4393665f6b4ab86bba53f251a79cbe63c5c6dad57ec0a4293475545f4dcc7cc167f5","ssdeep":"","tlshash":"1921426b07542b14db634ce733c6759031101262c8919a72d040fe98cbe797703ae78b","first_seen":"2023-06-08T23:38:57Z","last_seen":"2026-08-12T14:21:01.409324Z","times_seen":150,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":3,"connect":10,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/assets/svg/games/lol.svg","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.224Z","timestamp":1786544409224,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /assets/svg/games/lol.svg HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/main.0fffc87820ff4b62.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 13 Jul 2026 18:43:11 GMT\r\nx-content-type-options: nosniff\r\nexpires: Fri, 11 Sep 2026 14:20:09 GMT\r\ncache-control: public, max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 2562451\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\netag: W/\"6a5531bf-4033\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2a01e7da89c0b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16435,"size_decoded":8171,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5b3472991c37d3e7765faf4cfa30fc83","sha1":"4c12e1b8bb958534c0aa70a5490455f5f15e9c3f","sha256":"fd6ee4b940c64fb04bcc6959c54453b50ab6d90bc0227732dccbf2173df43065","sha512":"d8f5108e232ba26f147583f5d0127b9c5fa5cec7ccc30bcef529cb6b8cfd11f17bd8969027cee788431e20f16bf11915a43c351c427354d4c74f5e2d9317b963","ssdeep":"384:fRW4zJoORe3hL2y0BSNIuaEl+t1ZwbZr55Nyt:xzI3rGSEEy1OF5g","tlshash":"a272d7dd3bb553f4e502f6fadb2200a97a0f24faaa42c770c3695f05a41606cee558c2","first_seen":"2024-11-27T09:46:18.332271Z","last_seen":"2026-08-12T14:21:01.411212Z","times_seen":8,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/assets/images/about/cashback.png","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.327Z","timestamp":1786544409327,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /assets/images/about/cashback.png HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 109399\r\nlast-modified: Thu, 06 Aug 2026 14:05:40 GMT\r\netag: \"6a7494b4-1ab57\"\r\nexpires: Fri, 11 Sep 2026 14:20:09 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 58583\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: a2a01e7e49330b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":109399,"size_decoded":110000,"mime_type":"image/png","magic":"PNG image data, 400 x 498, 8-bit/color RGBA, non-interlaced","md5":"09478a51a1bcefb85b0b1821f7659e36","sha1":"c911b0c652ea03b8132a299b9aff1bf95474d541","sha256":"e9b2e296382b67ac0b6be27a29140ace4776446e4a69b24e06c8a5a2e37b8683","sha512":"4e026588e0fb0e6e77d4924c3af0526ee1b97c567a5a03cdb42435ff80ec73820cd84e13312b1fb4408ec42e997016ddd0976c72a39b670a00c85307247902e4","ssdeep":"3072:AOq44R4DLxVXaeU1nM4jhGAQXWP0nwH+o3aScE3qTQ4m/cx0HP:+RexVXFU1VQmD+yaScE3k/yaW","tlshash":"f8b312b3bcfdef930af7a419feae4bccc866a5d658494160b91a381904df5327c0904c","first_seen":"2025-08-28T22:23:07.181379Z","last_seen":"2026-08-12T14:21:01.412182Z","times_seen":6,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/slots.9fe65ba19544334af213.svg","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.884Z","timestamp":1786544409884,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /slots.9fe65ba19544334af213.svg HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/main.0fffc87820ff4b62.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 06 Aug 2026 14:05:40 GMT\r\nx-content-type-options: nosniff\r\nexpires: Fri, 11 Sep 2026 14:20:09 GMT\r\ncache-control: public, max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 408776\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\netag: W/\"6a7494b4-1143\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2a01e81cc210b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4419,"size_decoded":2364,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3e4619d97743d1244ae72f72e5581a02","sha1":"7de95cca64b7ee1f82eb2dd9fae7c9d51654baba","sha256":"ef9527395a416f2dc784bc34507be9440f92727aa807e442591708266700f2b2","sha512":"1431dfbabce69f74b88824466396ff1fb028dae81b87d16cb3b221e8c1b64da7652177549821dafe74ede0fa824c6a97c6b7776b686c24c01e2bd62e71e01531","ssdeep":"96:xIlQ77fjd+Dcy6GjpRBTZ7m8luSaHf5Da5PXt6us5:xp77fjdFhGjpVKSaHfRaths5","tlshash":"489163fb63d0d1e0c9c6e395e432945575ae387abb94875903caff1169a00a4c68dcd4","first_seen":"2025-08-28T22:23:07.289958Z","last_seen":"2026-08-12T14:21:01.414095Z","times_seen":8,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"avatars.steamstatic.com/1e5846be26db856e44a534f7d557a1bf5a078176_full.jpg","fqdn":"avatars.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:11.799Z","timestamp":1786544411799,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avatars.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 13:33:18 GMT","end":"Mon, 21 Sep 2026 13:33:17 GMT"},"fingerprint":{"sha1":"7E:A8:7E:7A:3C:7E:B6:D6:B8:FD:DE:25:7C:26:02:14:6A:C0:E4:E4","sha256":"D1:CF:B0:B9:E1:DA:54:D8:17:C7:F7:77:FA:5A:37:E4:63:8E:A6:DE:42:57:85:7B:36:BA:72:7A:4F:3F:07:A6"}}},"request":{"raw":"GET /1e5846be26db856e44a534f7d557a1bf5a078176_full.jpg HTTP/1.1\r\nHost: avatars.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncontent-md5: +0mYJj5vbXeC9MG+pbHvjA==\r\nlast-modified: Mon, 24 Mar 2025 16:44:26 GMT\r\netag: \"0x8DD6AF323A8CAB2\"\r\nx-ms-access-tier: Cold\r\nx-ms-access-tier-change-time: Sun, 21 Sep 2025 03:06:44 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Wed, 12 Aug 2026 14:20:11 GMT\r\nvia: 1.1 varnish\r\nage: 501278\r\nx-served-by: cache-bma-essb1270036-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 1\r\nx-timer: S1786544412.799363,VS0,VE1\r\ncontent-length: 13141\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13141,"size_decoded":13755,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 184x184, components 3","md5":"fb4998263e6f6d7782f4c1bea5b1ef8c","sha1":"ce85e1d2a0a99cfb9e41b739b5cd612b7e67d6e1","sha256":"e8b4cee1c2899de8da6f36a04974eb1bed5153908118e9470686198bed9de9be","sha512":"b932579e5090767164278f76b12d979c15fd0349f8f0f02af351a68d1ce9790b0c4bdc6a98128c7a15096bd313d8f166cb38b1618189ed3f338602c8a3a544c2","ssdeep":"192:CSrN0r7irVZmVHsv9DZ6PrdletQIcXfNw5c75kYRgMznD9zCAAo/bjTfQ:HN0rmIHsVaetsfu5O5kkzD92ATbjTfQ","tlshash":"dd42bf7504e7eae576dc70f7b248cee295dcec36c686286bd4ee445ce0292c065b0cb6","first_seen":"2026-08-12T14:21:01.415478Z","last_seen":"2026-08-12T14:21:01.415478Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/assets/svg/games/csgo.svg","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.220Z","timestamp":1786544409220,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /assets/svg/games/csgo.svg HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/main.0fffc87820ff4b62.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 13 Jul 2026 18:43:11 GMT\r\nx-content-type-options: nosniff\r\nexpires: Fri, 11 Sep 2026 14:20:09 GMT\r\ncache-control: public, max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 2562450\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\netag: W/\"6a5531bf-1ee2\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2a01e7d98940b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7906,"size_decoded":4424,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"95a1d41e1aff65af3aaf3c1ea6c4375a","sha1":"602454b9a468ebb9bc6ff2725d35a16855be75ef","sha256":"747dd4731afd2547af2ce554353935b0ca6101f8f35191de4dfaeb4cc634e37a","sha512":"145c121794ed7f78fe048b5b4237e13ed13101571bfd53ceac3bfc02cfae8b509e11c745b9ffe1d066b2d7fd004def7886b75e41762257c7c6b28b4803b61190","ssdeep":"192:zeFS/EjGP/7OS+IGetZIbIi4wdQbN7wh6djiochv:qJjGbz++t4uA8iochv","tlshash":"63f1f9986bb6a3fcf441f0f2ca1a85f57f0e38e5b2848978c3626e40d5570bc89958c3","first_seen":"2024-11-27T09:46:18.271456Z","last_seen":"2026-08-12T14:21:01.417625Z","times_seen":8,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/trustpilot.25b3b59ac0b50ebd08d3.svg","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.253Z","timestamp":1786544409253,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /trustpilot.25b3b59ac0b50ebd08d3.svg HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/main.0fffc87820ff4b62.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Aug 2026 15:14:08 GMT\r\nx-content-type-options: nosniff\r\nexpires: Fri, 11 Sep 2026 14:20:09 GMT\r\ncache-control: public, max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 656279\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\netag: W/\"6a7201c0-138\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2a01e7dc8cf0b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":312,"size_decoded":815,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1b011f99e33d988d3ca964f4b75d5e53","sha1":"7f1e221456dad176010087e40569c9ae2bc87b2e","sha256":"73157f0797a1c775517479fe06e9ac85012f046254a28a39984b3ed86383885d","sha512":"d985ec2f85af17b3cbe86ceed76a3db4003a54397480966cb7ba872d87e15b99a7a43d0daff072a40f4994ba509b293af800142185907fe8ee416f872bc348c4","ssdeep":"","tlshash":"e7e07d03d0821c0c9d5c8270dbbc00b8517f00e95ba112a4daf0037122f8e979c737be","first_seen":"2025-08-28T22:23:07.218398Z","last_seen":"2026-08-12T14:21:01.418624Z","times_seen":8,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/assets/images/slots/best-xmas.png","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.478Z","timestamp":1786544409478,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /assets/images/slots/best-xmas.png HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 28101\r\nlast-modified: Thu, 06 Aug 2026 14:05:40 GMT\r\netag: \"6a7494b4-6dc5\"\r\nexpires: Fri, 11 Sep 2026 14:20:09 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 381090\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: a2a01e7f3a000b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28101,"size_decoded":28701,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"eb7ddd438211178c1a4d51c173fe98e8","sha1":"0622e01836caf8e134abb958d8e7b0aadec42e07","sha256":"8a8263fd17145f33ece37e9c180a7afb0fa57e33b379aed420d58f7600fb8559","sha512":"300ada77423a9cbe786695d33cbefbf59213c3dbe2f35d6239c2f0d391056a69b2c0d8f138398270cf7673c05e073fed0550a81b155e559e1161a6b78926df8d","ssdeep":"384:HNUOm07ztFSuB5UyaahR1p8KNxeDplyjetp2ViY/z+mQAlOp9E+ZgjDX1:HNn5FSaUwyi4lZtYRKZAIp6/jDX1","tlshash":"70c2f1d5c1003aa6a423ddaa42c24077aa773644d83f7e8fdb3db774403e455eba18e9","first_seen":"2025-12-29T21:36:02.548388Z","last_seen":"2026-08-12T14:21:01.419428Z","times_seen":4,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"avatars.steamstatic.com/f6d78a54c8ae36fbb7c6965c1822a1377ea28081_full.jpg","fqdn":"avatars.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.867Z","timestamp":1786544409867,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avatars.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 13:33:18 GMT","end":"Mon, 21 Sep 2026 13:33:17 GMT"},"fingerprint":{"sha1":"7E:A8:7E:7A:3C:7E:B6:D6:B8:FD:DE:25:7C:26:02:14:6A:C0:E4:E4","sha256":"D1:CF:B0:B9:E1:DA:54:D8:17:C7:F7:77:FA:5A:37:E4:63:8E:A6:DE:42:57:85:7B:36:BA:72:7A:4F:3F:07:A6"}}},"request":{"raw":"GET /f6d78a54c8ae36fbb7c6965c1822a1377ea28081_full.jpg HTTP/1.1\r\nHost: avatars.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AKhXX7LnC9TacTFGrUynkItdvowblhrbuEN2G3aGi6LjXp2Ekmp-U7sJ-uZ2_HkvCqhkPTU\r\nlast-modified: Sat, 13 Jul 2024 01:42:10 GMT\r\netag: \"2cc51ba1af1a55ff5826658346e96619\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\nvia: 1.1 varnish\r\nage: 1164044\r\nx-served-by: cache-bma-essb1270036-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 1\r\nx-timer: S1786544410.899674,VS0,VE2\r\ncontent-length: 7035\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7035,"size_decoded":7635,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x184, components 3","md5":"2cc51ba1af1a55ff5826658346e96619","sha1":"e25791e3839428c62e0bc9447a5ec6d58008a5cc","sha256":"a56cdba406dbe2de71a7934aca609a0bcd0fb846d48f6f47511d99eb8034e2cb","sha512":"e5496a5937519413bd3e16329cfa73e1766912d9ee0e0bfe418773d9d6c0b9192eca168b8f78bb981e06e106a2a1dc1236e6f2a0c3a76bbb6569f4caa2948701","ssdeep":"192:1CZ23atsJl8VtgVMyf+w8mEpkzUvrdRBcck:IZ23aJVtguYH4Oerhq","tlshash":"14e1ae29708505c4fed1d9fba8018fae57e6d02067f06903a5c073a6ac94f7bb803f44","first_seen":"2026-08-12T14:21:01.422021Z","last_seen":"2026-08-12T14:21:01.422021Z","times_seen":1,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":13,"receive":6,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avatars.steamstatic.com/822f5980c8a5e5c874b83c6d74cf8c4e48caa0ef_full.jpg","fqdn":"avatars.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.862Z","timestamp":1786544409862,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avatars.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 13:33:18 GMT","end":"Mon, 21 Sep 2026 13:33:17 GMT"},"fingerprint":{"sha1":"7E:A8:7E:7A:3C:7E:B6:D6:B8:FD:DE:25:7C:26:02:14:6A:C0:E4:E4","sha256":"D1:CF:B0:B9:E1:DA:54:D8:17:C7:F7:77:FA:5A:37:E4:63:8E:A6:DE:42:57:85:7B:36:BA:72:7A:4F:3F:07:A6"}}},"request":{"raw":"GET /822f5980c8a5e5c874b83c6d74cf8c4e48caa0ef_full.jpg HTTP/1.1\r\nHost: avatars.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncontent-md5: B32XVLocEDmdLNXApJ0ocA==\r\nlast-modified: Thu, 08 Jan 2026 12:52:28 GMT\r\netag: \"0x8DE4EB4C78D8C88\"\r\nx-ms-access-tier: Cold\r\nx-ms-access-tier-change-time: Wed, 08 Jul 2026 01:08:53 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 550093\r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270036-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0\r\nx-timer: S1786544410.899442,VS0,VE3\r\ncontent-length: 9310\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9310,"size_decoded":9923,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 184x184, components 3","md5":"077d9754ba1c10399d2cd5c0a49d2870","sha1":"0cb066559d6f4ec31b3f83d78f99df051bafafa1","sha256":"abc946499d380b17b4ba1b01f95a5612c490650bb48bbcd7db0855b2649ff213","sha512":"e5654a89fdead1e93aa973762a668ccccd513d656bd1356f7530b3e878bda78ed37401ea8b7abcd7881417a23707a6df91b8e1b1f9c0b20cdcbe6938ef0a7873","ssdeep":"192:kcrLKnRApViKY6oVphRyHuqCfSiX8nazFVpSY3CPo/CSU2PjOE:k7OpcKsjfyHTCfB8nWFVpnKoPt","tlshash":"ea12bf82067194d1fa3eed3204607f01dbedeb9e57ab46a120e46a163c75938f360e0f","first_seen":"2026-08-12T14:16:13.932203Z","last_seen":"2026-08-12T14:21:01.424423Z","times_seen":2,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":10,"send":0,"wait":18,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/assets/svg/language/en.svg","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.181Z","timestamp":1786544409181,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /assets/svg/language/en.svg HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/main.0fffc87820ff4b62.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 13 Jul 2026 18:43:11 GMT\r\nx-content-type-options: nosniff\r\nexpires: Fri, 11 Sep 2026 14:20:09 GMT\r\ncache-control: public, max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 2562450\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\netag: W/\"6a5531bf-4be5\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2a01e7d58660b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19429,"size_decoded":5941,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9751c9f7ef516169dac1c8b3e25c2fe3","sha1":"2018d6b990c6bd16595a9fffe793234b3d0403a2","sha256":"cfa08b2ce1dc2b0ef884b991c63b098e4abd14764f882004cc76fcdcb11fd951","sha512":"c1fea898ef6547e30299b3e47dc64df7893089a504ac7179ba122d244da68c14aa246f01cd5a21145911427992dcc9f0b4f354417644a25ff37d2a757fff443a","ssdeep":"384:pPsIzt9jj+20vxe8zsDCG6UCXEzrpPhSTZ5xjYXeTIRyfoeEzu7SX2:p0o/jf0Mp5PAT3xjYToSu7SG","tlshash":"fa9295f82398d0c5a60b8bb1dd2b2d7565bf3cfd6fc682950195ed94d8a82cacc09dd0","first_seen":"2024-11-27T09:46:18.301658Z","last_seen":"2026-08-12T14:21:01.426581Z","times_seen":9,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/assets/images/slots/3-royal-dracos.png","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.479Z","timestamp":1786544409479,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /assets/images/slots/3-royal-dracos.png HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 33635\r\nlast-modified: Mon, 20 Jul 2026 03:29:45 GMT\r\netag: \"6a5d9629-8363\"\r\nexpires: Fri, 11 Sep 2026 14:20:09 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 1327579\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: a2a01e7f3a010b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33635,"size_decoded":34236,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 287x193, components 3","md5":"9af1417818ad84e6301e6790203ced0a","sha1":"35fbcee6c079158b01f514a2fe053e6fc763aa5a","sha256":"00cca6125bba8ff83b9b69dc560f5df1a0edb4e361fb58b0f02907fe981fe765","sha512":"376e536c31f49ea634584fb799424828fb2d93194b405f7f4dc9920f3de34fef8c9063fa3c0bcbbd44c97c5ef94dd132939d77aacb75e699c357a5827ee26252","ssdeep":"768:rCAePXqERhYLh0idKQ4WIeT41m3riMpMDXurDIphgR:j8X/RhYlf36mOg2OIphg","tlshash":"05e2f11b07553067f9dc6b7ac770f3d7c72e4692a2c688fac593a3920d0a064ea727d0","first_seen":"2026-08-12T14:21:01.427583Z","last_seen":"2026-08-12T14:21:01.427583Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"avatars.steamstatic.com/c272f1549f960e4e95d4a154727804acb7596f31_full.jpg","fqdn":"avatars.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.870Z","timestamp":1786544409870,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avatars.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 13:33:18 GMT","end":"Mon, 21 Sep 2026 13:33:17 GMT"},"fingerprint":{"sha1":"7E:A8:7E:7A:3C:7E:B6:D6:B8:FD:DE:25:7C:26:02:14:6A:C0:E4:E4","sha256":"D1:CF:B0:B9:E1:DA:54:D8:17:C7:F7:77:FA:5A:37:E4:63:8E:A6:DE:42:57:85:7B:36:BA:72:7A:4F:3F:07:A6"}}},"request":{"raw":"GET /c272f1549f960e4e95d4a154727804acb7596f31_full.jpg HTTP/1.1\r\nHost: avatars.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncontent-md5: BfY9EmZ7WN41GGi2TGWZSA==\r\nlast-modified: Mon, 05 Jan 2026 19:20:35 GMT\r\netag: \"0x8DE4C8F80DEFADB\"\r\nx-ms-access-tier: Cold\r\nx-ms-access-tier-change-time: Sun, 05 Jul 2026 01:07:54 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\nvia: 1.1 varnish\r\nage: 1075535\r\nx-served-by: cache-bma-essb1270036-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 1\r\nx-timer: S1786544410.897944,VS0,VE3\r\ncontent-length: 11751\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11751,"size_decoded":12366,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 184x184, components 3","md5":"05f63d12667b58de351868b64c659948","sha1":"4f6f12f8390048a8f28ee4cea159227089bb1a38","sha256":"31d93db812b6441b65382bb6b1a96e7dad69b26422b99bcb26b85469fb859b23","sha512":"636e38c381b74562d242d4d1605b1453bddc69b1bfd661384627157c16079b57575e6b5dc18bae9eb1afa1256ad7f2d8b816480b72a25e3f15e1f4f163345258","ssdeep":"192:tBuFJKw9Jy8BBxXm3IsIs1uTBstACNjwGpkpJg1Fb/VhIVDV1fBwrmBk8:tBsBDTZs1uVANupJUp/Vh+HZQak8","tlshash":"d032bfd7d24146d2fe0bba71d5f6bde862e61101820b93b9fce426cc4d930d8a38d325","first_seen":"2026-08-12T14:16:13.973718Z","last_seen":"2026-08-12T14:21:01.430543Z","times_seen":2,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459W1hyyTn89ddpROi.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.905Z","timestamp":1786544409905,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459W1hyyTn89ddpROi.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://plgv2.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23776\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 12 Aug 2026 13:21:59 GMT\r\nexpires: Thu, 12 Aug 2027 13:21:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 3490\r\nlast-modified: Thu, 04 Sep 2025 17:11:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":23776,"size_decoded":24587,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23776, version 1.0","md5":"61611e47a80abeae7bab6335b074c70b","sha1":"6902954d25cbd00a037f12421a0d25580a0a81f7","sha256":"6e310df94df0c3e75cd1c6ecd08e22cc559eb0667d54013afdc469671ef4614a","sha512":"8207ee33de460e5f705a53a54ed45f4ad921141672b995584b2718a9bee837ae3331647f0f8fa9b62b812e6b54f9397e1da11160f9b3bf51ae39fc1ec32bb07b","ssdeep":"384:uEEi3OYr7g0sF91UG3qkcKtr40D/w18XHu3Nr/UL2s+HSeSN/Z26s6A296:fEieY/gfj1UVKSow1TVs+HY/Z/a","tlshash":"d4b2e142401cf0b1e7c76f7daacf24c095d613bacf3f95981145db7855ad5932c9c88a","first_seen":"2025-09-05T05:16:31.285834Z","last_seen":"2026-08-12T20:07:54.190489Z","times_seen":9393,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/pause-icon.44f7c41d83dd0fcd0dc9.svg","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.196Z","timestamp":1786544409196,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /pause-icon.44f7c41d83dd0fcd0dc9.svg HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/main.0fffc87820ff4b62.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 13 Jul 2026 18:43:10 GMT\r\nx-content-type-options: nosniff\r\nexpires: Fri, 11 Sep 2026 14:20:09 GMT\r\ncache-control: public, max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 2562347\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\netag: W/\"6a5531be-d3\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2a01e7d78770b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":211,"size_decoded":728,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3c00c11013b46add935016952dd79083","sha1":"3ea9b67d76a728ee8e7827b8e061cb1baa3fb90a","sha256":"098dbde7b7d051d9163ef4c71afccd3e9f4bb642a0343efa43470c2853862063","sha512":"f98ef7a08e7b5bc0258772661b685f3043718d4f930b6c83e3f5823632624f2aff4453a8e4f6ec2a5d3899067c708eff6078637433f37053ec532cf8f6dca73d","ssdeep":"","tlshash":"61d02236b04ce408cb04970a0928245a33ced1c3a64c3004fe80393eb06c9e3bce827d","first_seen":"2025-08-28T22:23:07.250813Z","last_seen":"2026-08-12T14:21:01.433596Z","times_seen":8,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/assets/og-image.png","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:08.245Z","timestamp":1786544408245,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /assets/og-image.png HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 4395834\r\nlast-modified: Thu, 16 Jul 2026 03:54:31 GMT\r\netag: \"6a5855f7-43133a\"\r\nexpires: Fri, 11 Sep 2026 14:20:08 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 2370241\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: a2a01e778b230b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4395834,"size_decoded":4396439,"mime_type":"image/png","magic":"PNG image data, 2752 x 1536, 8-bit/color RGB, non-interlaced","md5":"4c27d09114c2cd3dc502848601659c38","sha1":"ae0095f5b3e6524c3d95066567431fd3c09003c7","sha256":"ea66c75ab4b8f187f018048a2b36c457421ce9f85568ced497e70d95ad2b1951","sha512":"4d42abdc9657f400c5afc01d75e58ebfd43d5647c2cade67af49246858e56f242e4d2e6d8f77ba27fa124af6647ad28297953f8bd5dd327277c3f752303d48fc","ssdeep":"24576:Etuyl4gmrfI+S9agFJnPZEh3GGJedUhMiGRTD:EtuZzI1agFJnhEJG5U2isTD","tlshash":"c925333f604f89bad3e7988865ce6cfb46a43053500ed24546cfd28e86f2606fb16f65","first_seen":"2026-08-12T14:16:13.903865Z","last_seen":"2026-08-12T14:21:01.434672Z","times_seen":2,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":196,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"avatars.steamstatic.com/f6e67bfefe81d9160001323c44b1489afe874853_full.jpg","fqdn":"avatars.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.869Z","timestamp":1786544409869,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avatars.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 13:33:18 GMT","end":"Mon, 21 Sep 2026 13:33:17 GMT"},"fingerprint":{"sha1":"7E:A8:7E:7A:3C:7E:B6:D6:B8:FD:DE:25:7C:26:02:14:6A:C0:E4:E4","sha256":"D1:CF:B0:B9:E1:DA:54:D8:17:C7:F7:77:FA:5A:37:E4:63:8E:A6:DE:42:57:85:7B:36:BA:72:7A:4F:3F:07:A6"}}},"request":{"raw":"GET /f6e67bfefe81d9160001323c44b1489afe874853_full.jpg HTTP/1.1\r\nHost: avatars.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AKhXX7Jl1bxC6lZ-_cKS335fqRB-a9PY7Y1klvo85inzC_Dg4LOV_BO6tP-_mygOEmU9huvN\r\nlast-modified: Sun, 01 Feb 2026 21:42:29 GMT\r\netag: \"581dbfe79a9f8b70be46f7cd80157e03\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\nvia: 1.1 varnish\r\nage: 441708\r\nx-served-by: cache-bma-essb1270036-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 1\r\nx-timer: S1786544410.897658,VS0,VE1\r\ncontent-length: 11858\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11858,"size_decoded":12459,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 184x184, components 3","md5":"581dbfe79a9f8b70be46f7cd80157e03","sha1":"3cda8cf823bdd4353254f7e3934cb3f5efee033c","sha256":"f5ff618b857019cd9a897712415611a15b11c4ccac5d175782fd62d5a4753759","sha512":"c85d7ce4739f7f08874c5f30c0a73cb043fd1298e25ee5a12d4202e09e3a5b6e55837fe9c91deeae97a735df7951c3e11959d88c2e1fedabb08df3c792f49720","ssdeep":"192:kfQ1ZKg+y99qXE10e8CyIRSaQyIpSM+BzRWgXMONqcNCiwtabY9WMWV:kfQ1MAqXU0e7RpRIpahB5q+wtabYAV","tlshash":"9532be879a7bfaeab62a29b618d4260527e41c1d03f7d23701f815437eb77a1520a30a","first_seen":"2026-08-12T14:21:01.437295Z","last_seen":"2026-08-12T14:21:01.437295Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/assets/svg/avatar/brilliant.svg","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.879Z","timestamp":1786544409879,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /assets/svg/avatar/brilliant.svg HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/main.0fffc87820ff4b62.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 13 Jul 2026 18:43:11 GMT\r\nx-content-type-options: nosniff\r\nexpires: Fri, 11 Sep 2026 14:20:09 GMT\r\ncache-control: public, max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 2562449\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\netag: W/\"6a5531bf-92c\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2a01e81bc0b0b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2348,"size_decoded":1646,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3bc1da434289aaecb9130f9e14c96cd8","sha1":"090924d5f9fe83ded7005452b271c659b0274540","sha256":"03a4e38986685c7b789dc37abcd5dddf8fad60616dc6a88ca2344fbec8b32802","sha512":"adaf6af508d20b1288ced1c1923402e7147e4ad16a07d6824a28e27f933b8245a0e69de9ede338a702db076472a54316ddb18de4add44ff37f983a02588422eb","ssdeep":"","tlshash":"3c4143f3b698f0c0d80aef60ef32a954681b3db85ec1715a8242d91073a4572ce0dc25","first_seen":"2025-09-10T02:33:42.760918Z","last_seen":"2026-08-12T14:21:01.440217Z","times_seen":4,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/assets/svg/currency/bet-usd.svg","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.891Z","timestamp":1786544409891,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /assets/svg/currency/bet-usd.svg HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/main.0fffc87820ff4b62.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 13 Jul 2026 18:43:11 GMT\r\nx-content-type-options: nosniff\r\nexpires: Fri, 11 Sep 2026 14:20:09 GMT\r\ncache-control: public, max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 2562450\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\netag: W/\"6a5531bf-654\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2a01e81dc280b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1620,"size_decoded":1336,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e18587fe7cc2f929a67127923c909490","sha1":"5aa77240f063daff6353b8e00a852d99b5b66b90","sha256":"b12f62a5f0e19b90bbb1f1b083c15f0cba7e96dfca7a7b32ab13d92015bc6a37","sha512":"4ca51b83fdf271b010234e44ed25793532e270a55e4e74f362b5e0c965c69b37e62581f2733bcc7b3e8ddb09ee0ec63ab214b2f2be265dca3929053f1c1fa778","ssdeep":"","tlshash":"af31c0b1758c43a5994acf61ee2b0889b4bc2c7a6bc987ddc370e61064a11b3ddc8d94","first_seen":"2025-08-28T22:23:07.341804Z","last_seen":"2026-08-12T14:21:01.441428Z","times_seen":7,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/pusher/7.0.1/pusher.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:10.249Z","timestamp":1786544410249,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/pusher/7.0.1/pusher.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://plgv2.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 12 Aug 2026 14:20:10 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 15616\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Tue, 03 Nov 2020 05:12:21 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xa1bjFhz4l9tvOuyy033FM2zeUC%2BJVrfRI2hosUP5ToHyBu3BC5zVAGtENIz%2BeeJ1xp0OAyL%2FUjKL6LRkghpfIPIdjZPoWqnWVdL0aicXN%2F73cr9Q50UyPzvP7EV6AYEaDSGWho2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a2a01e840e9856bd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65941,"size_decoded":16623,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65405)","md5":"e1be14bcd111694d8e5ac59db0560aa4","sha1":"135246fffdb51a130c046f7d7f8c371ed6872b8f","sha256":"355557a7addf5ff91b246281cec6ad20f35b2ba7c44dd327926f337d6f0394e0","sha512":"c636bc7eb676353d3e6f568c9ae2dcde77c78e197dd284e253697c479e56c5132843ea93b91f6990e32787f23d5fb1dcd9edbbcf46a628d380266e976d87b6fc","ssdeep":"768:jWds216t1KRv89yz+YDN+hHW8hIEyZc+NwBuxt64CTMFPWfAfMxv3fUyaKdUTf76:Sdsg6CaLy2+cUybdIfVwApDVstxOOfz","tlshash":"2053a7c8f991b06143a7b171453f150ea33e686cb40ac0bcbb64d9e5ac7528d923bf79","first_seen":"2023-03-07T12:01:32Z","last_seen":"2026-08-12T14:21:01.442378Z","times_seen":2333,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/assets/svg/games/dota2.svg","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.223Z","timestamp":1786544409223,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /assets/svg/games/dota2.svg HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/main.0fffc87820ff4b62.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 16 Jul 2026 21:46:33 GMT\r\nx-content-type-options: nosniff\r\nexpires: Fri, 11 Sep 2026 14:20:09 GMT\r\ncache-control: public, max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 2195569\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\netag: W/\"6a595139-19b6\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2a01e7d98970b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6582,"size_decoded":3458,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a1c69feb5f1595a375ff5c09d3ef8977","sha1":"58fdbfa7fa131f2cefbf228d29c558b96ba9cfe3","sha256":"edd6b8118692e841bcf70b803b415a8beac1d3a43e3996ec39d7978206f93d1e","sha512":"f89cac5a765030f161308ddb9b72cc11b4acb7736ab88a5e82984371b4d2f156e9d01be2c11519729361fc94e7b02204160504fe125eb2e95ac60a0b9abaf35e","ssdeep":"192:4uqtRnpFKacFtZ12WQdxy/8WQEOy81+UrmTi:JUFK5h12i9OiY","tlshash":"a3d184ecaa6411f4e082d596df20069ab60fb0f969904738c65daf093d9b57dcf088c7","first_seen":"2025-08-28T22:23:07.28191Z","last_seen":"2026-08-12T14:21:01.444503Z","times_seen":7,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.280Z","timestamp":1786544409280,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://plgv2.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 07 Aug 2026 18:07:09 GMT\r\nexpires: Sat, 07 Aug 2027 18:07:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 418380\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-12T21:33:01.711813Z","times_seen":548813,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":30,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/assets/images/about/dep_crypto.png","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.329Z","timestamp":1786544409329,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /assets/images/about/dep_crypto.png HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 202983\r\nlast-modified: Thu, 06 Aug 2026 14:05:40 GMT\r\netag: \"6a7494b4-318e7\"\r\nexpires: Fri, 11 Sep 2026 14:20:09 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 463215\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: a2a01e7e49370b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":202983,"size_decoded":203585,"mime_type":"image/png","magic":"PNG image data, 1300 x 376, 8-bit/color RGBA, non-interlaced","md5":"21eb2362838c04e7092a545a78be550a","sha1":"74176d02e2ba2eb8c2b32ea6d8f52f07cb4445d2","sha256":"d1d0604ce9fc3d59934bde22bf1e295469fa99646484a7a999c7eedf5b7dd797","sha512":"1e9232dee97e305543d32f6296bce9d46c4b783211ac0a2d0eba431844c1b0aa4d272edd91bccb7acf291062f193f31549626532debbebbc7ccccc3a8390b2fd","ssdeep":"6144:+w8iKKNrPSjCKxEiciDAgNCzkTaSGVVgQB:miKKNrPQnEiciEnAT3GTgm","tlshash":"08141305dc629d3b1dec006125e2232a1ef3085b563e87de61a78e1ef5affe327a0055","first_seen":"2025-08-28T22:23:07.312497Z","last_seen":"2026-08-12T14:21:01.445512Z","times_seen":6,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"push.reamaze.com/assets/reamaze-push.js","fqdn":"push.reamaze.com","domain":"reamaze.com","tld":"com"},"ip":{"addr":"172.66.151.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:10.216Z","timestamp":1786544410216,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.reamaze.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Thu, 17 Jul 2025 20:54:16 GMT","end":"Tue, 18 Aug 2026 20:54:16 GMT"},"fingerprint":{"sha1":"95:C6:DA:9F:AF:CA:EF:87:7E:36:1A:38:18:5D:94:C6:B2:F0:9E:30","sha256":"86:29:30:4F:A2:4A:3D:4D:DD:E8:F8:F3:90:7D:BB:C6:D9:38:3F:36:D3:F8:BA:B7:AE:70:44:B2:2F:FA:53:FD"}}},"request":{"raw":"GET /assets/reamaze-push.js HTTP/1.1\r\nHost: push.reamaze.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:10 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1122\r\nserver: cloudflare\r\nvary: Accept-encoding\r\nlast-modified: Tue, 11 Aug 2026 21:37:51 GMT\r\netag: \"462-658cc485ea9c0\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nage: 989\r\ncf-cache-status: HIT\r\ncf-ray: a2a01e83df715ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2835,"size_decoded":1471,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2835), with no line terminators","md5":"918f11130407c5536a5acb9e2d34311f","sha1":"e170858675d784632d6db08bd1bca5fa9b39336b","sha256":"0c95e298479c4afdd24cdddc88093b48752d4be626a38631e1c623a14989d39d","sha512":"495493274f55e2ae071fa8558e8ffba709d113d77eb56f98d5f96b3d4325de2aa52b01463a9088f4960f8c0cfb525a56cfaa6e1e85107feac14d79594c223e83","ssdeep":"","tlshash":"6b51108ffe99b16605e3b5728cbfa354023b66124c87105453e06ac16ee3a4eb31792e","first_seen":"2025-04-01T20:35:41.711988Z","last_seen":"2026-08-12T14:21:01.446322Z","times_seen":1515,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":4,"connect":3,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459W1hyyTn89ddpROi.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.903Z","timestamp":1786544409903,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459W1hyyTn89ddpROi.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://plgv2.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23776\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 12 Aug 2026 13:21:59 GMT\r\nexpires: Thu, 12 Aug 2027 13:21:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 3490\r\nlast-modified: Thu, 04 Sep 2025 17:11:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":23776,"size_decoded":24587,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23776, version 1.0","md5":"61611e47a80abeae7bab6335b074c70b","sha1":"6902954d25cbd00a037f12421a0d25580a0a81f7","sha256":"6e310df94df0c3e75cd1c6ecd08e22cc559eb0667d54013afdc469671ef4614a","sha512":"8207ee33de460e5f705a53a54ed45f4ad921141672b995584b2718a9bee837ae3331647f0f8fa9b62b812e6b54f9397e1da11160f9b3bf51ae39fc1ec32bb07b","ssdeep":"384:uEEi3OYr7g0sF91UG3qkcKtr40D/w18XHu3Nr/UL2s+HSeSN/Z26s6A296:fEieY/gfj1UVKSow1TVs+HY/Z/a","tlshash":"d4b2e142401cf0b1e7c76f7daacf24c095d613bacf3f95981145db7855ad5932c9c88a","first_seen":"2025-09-05T05:16:31.285834Z","last_seen":"2026-08-12T20:07:54.190489Z","times_seen":9393,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avatars.steamstatic.com/a8091fa7e1c73cf1289ef49f74e105e0c0f5562f_full.jpg","fqdn":"avatars.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:13.201Z","timestamp":1786544413201,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avatars.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 13:33:18 GMT","end":"Mon, 21 Sep 2026 13:33:17 GMT"},"fingerprint":{"sha1":"7E:A8:7E:7A:3C:7E:B6:D6:B8:FD:DE:25:7C:26:02:14:6A:C0:E4:E4","sha256":"D1:CF:B0:B9:E1:DA:54:D8:17:C7:F7:77:FA:5A:37:E4:63:8E:A6:DE:42:57:85:7B:36:BA:72:7A:4F:3F:07:A6"}}},"request":{"raw":"GET /a8091fa7e1c73cf1289ef49f74e105e0c0f5562f_full.jpg HTTP/1.1\r\nHost: avatars.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncontent-md5: AWL7EFYRhu5mSa+sodcdaA==\r\nlast-modified: Fri, 18 Mar 2022 10:40:53 GMT\r\netag: \"0x8DA08CBC6DA67C5\"\r\nx-ms-access-tier: Cold\r\nx-ms-access-tier-change-time: Sun, 14 Sep 2025 06:32:58 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Wed, 12 Aug 2026 14:20:13 GMT\r\nvia: 1.1 varnish\r\nage: 1397429\r\nx-served-by: cache-bma-essb1270036-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 11792\r\nx-timer: S1786544413.201899,VS0,VE0\r\ncontent-length: 13926\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13926,"size_decoded":14545,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x184, components 3","md5":"0162fb10561186ee6649afaca1d71d68","sha1":"8aa749551cf9e85eeac0cac85331625ed5f36c84","sha256":"f3fdc4a3eb317bf2b0b6ee0f0e97ca361a3d2b0eee057ad809d88b620472967d","sha512":"5bff2e240d138351d740a41f95328bc19a5931b88673796811f699f899edc45cfdc79d11bbd8837e828b922e902271860f9d698743242853825e73e7ad055b9b","ssdeep":"384:hWDt1jZO/CELzi0xSdQayEKUyodVpS0/gEuaOxxASeqO5:hWvjA/Cq4uac2VzuaMeZ5","tlshash":"1b52ce9b894a03ebb9f1200bd0655f591bd01f80ed8385f1a4e53a246891efdc7883f7","first_seen":"2023-05-08T23:41:50Z","last_seen":"2026-08-12T14:21:01.447263Z","times_seen":30,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/footer-crypto-svg.32623fbf72cf858b47be.svg","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.251Z","timestamp":1786544409251,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /footer-crypto-svg.32623fbf72cf858b47be.svg HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/main.0fffc87820ff4b62.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 06 Aug 2026 14:05:40 GMT\r\nx-content-type-options: nosniff\r\nexpires: Fri, 11 Sep 2026 14:20:09 GMT\r\ncache-control: public, max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 392592\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\netag: W/\"6a7494b4-a33\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2a01e7dc8ce0b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2611,"size_decoded":1734,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cba9de0a3c864087045a3330214f5a76","sha1":"7a45d8eedec2d7658833bd6c85c69968893bb108","sha256":"287634fe796e1957bd50016be6c8f55bb2caa961c4f8dd2504623319013e6da8","sha512":"c7ff18f8b842365f1148d557c35ade85efdac154b64157b620510d7755cc0e9943ccad8f31bcc9e0a7c43b3e41379d07d1ae552bdc024ca0aea1ba5e3cdfde72","ssdeep":"","tlshash":"1551f0f6738833e8a402c782d72914a566eb29f61616e4d05b457f43fad106d8ddc8cb","first_seen":"2025-08-28T22:23:07.239075Z","last_seen":"2026-08-12T14:21:01.448975Z","times_seen":8,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/assets/images/about/bonuses.jpg","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.325Z","timestamp":1786544409325,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /assets/images/about/bonuses.jpg HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 104093\r\nlast-modified: Tue, 04 Aug 2026 15:14:08 GMT\r\netag: \"6a7201c0-1969d\"\r\nexpires: Fri, 11 Sep 2026 14:20:09 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 574039\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: a2a01e7e492b0b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":104093,"size_decoded":104696,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 646x292, components 3","md5":"91ebba60c8e894077ab64d52d5a2584c","sha1":"0221aebc02b93ddf1644b505f83f0131e65f5092","sha256":"50728f77b4b7a28570a43b93d7cdd894a0bc9f11e2da334e9c1e6e1a0183b824","sha512":"f018bfef197a4d01cca8bb1e63cbbc11f447d66804c524f74e4fb8c14e71a2c567597dbf23f4515002914674c40f6f2555a2ee1d112df17667f5192d8aa39aaf","ssdeep":"3072:mpkF80waztb/2itUw023CvjvTiLrD3I3L:mgq0tBT0DjqY3L","tlshash":"81a3025ccbbbbeb6920f243db1dd6c5fd88f5450b4c81359a452bc80fea86c10ea618d","first_seen":"2025-08-28T22:23:07.220908Z","last_seen":"2026-08-12T14:21:01.449782Z","times_seen":6,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/ru","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-12T14:20:04.630Z","timestamp":1786544404630,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /ru HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:07 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 06 Aug 2026 14:05:40 GMT\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncache-control: no-cache, no-store, must-revalidate\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\nx-xss-protection: 1; mode=block\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2a01e74a8c70b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2299,"size_decoded":1642,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"47e54b7159f6f7c506a2ce0d180b5f63","sha1":"deae628432821db7015f588ce1ad6e8ba6de8cd5","sha256":"fe1b8ae35787c0eda632cc3a5c7b7dfa3469b2e1d7b7eb2df743fc10c28a0e71","sha512":"78bf311a67a4bba2843e7156508e247ae015b5d009275ebf25d863f011dd21b5e6046b4283c843d5695cc598875b69fb80ab1ba91411d76fe1bfc970cb229200","ssdeep":"","tlshash":"684195436cfccc42035449a67efbb20cc805924bca60dc1975ae96aa5fc1fc9c9a3dd0","first_seen":"2026-08-12T14:16:13.919681Z","last_seen":"2026-08-12T14:21:01.456733Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3255,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":98,"receive":0,"ssl":3152},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/new_logo_footer.50e93fe6e45a2efb90a1.svg","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.246Z","timestamp":1786544409246,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /new_logo_footer.50e93fe6e45a2efb90a1.svg HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/main.0fffc87820ff4b62.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 13 Jul 2026 18:43:10 GMT\r\nx-content-type-options: nosniff\r\nexpires: Fri, 11 Sep 2026 14:20:09 GMT\r\ncache-control: public, max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 2562409\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\netag: W/\"6a5531be-c11\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2a01e7dc8b70b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3089,"size_decoded":1867,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3f1a06e1ffc801c8a97b4d9cad7a9d04","sha1":"2fca7e2c7d457cee54cff4677f82ab9e5e7285aa","sha256":"d466102e56f147ddb7466482390c4c5479d4edde5a525154d0486b6bc56a576c","sha512":"03c6fcb5284e822fc7664f7ebfc409b9fa9eba34cc64539830207a89ba3157281d09203879158197afb5493104d250ccaa40331ef835d05a851d9466e50b02a5","ssdeep":"","tlshash":"6451bf95bba556e9f40017f4432647303fabeaad1b02c3a592649b32fa25c4dc4e4cc7","first_seen":"2025-08-28T22:23:07.337762Z","last_seen":"2026-08-12T14:21:01.45966Z","times_seen":8,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"csgopolygon.reamaze.io/data/socked/auth?app=csgopolygon\u0026channel=live\u0026socket_id=%2Fcsgopolygon%23k-xxxoFIQ0t6PNG1M9A8\u0026sparams=sso%255Bid%255D%3D%26sso%255Banon_id%255D%3D%26sso%255Bfirst_seen%255D%3D2026-08-12T14%253A20%253A10.141Z%26sso%255Bname%255D%3D%26sso%255Bavatar%255D%3D%26sso%255Bemail%255D%3D%26sso%255Bauthkey%255D%3D%26sso%255Bauthpath%255D%3D%26sso%255Bparent_url%255D%3Dhttps%253A%252F%252Fplgv2.com%252F%26sso%255Btz_offset%255D%3D0%26sso%255Btz_name%255D%3DUTC\u0026meta=%7B%22url%22%3A%22https%3A%2F%2Fplgv2.com%2F%22%7D","fqdn":"csgopolygon.reamaze.io","domain":"reamaze.io","tld":"io"},"ip":{"addr":"34.215.188.89","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:10.839Z","timestamp":1786544410839,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.reamaze.io","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 18 Jul 2025 00:03:42 GMT","end":"Wed, 19 Aug 2026 00:03:42 GMT"},"fingerprint":{"sha1":"94:5B:5C:58:40:36:05:E1:06:5C:89:6A:CC:7C:9A:46:5F:7A:CC:D1","sha256":"16:08:50:50:C1:E0:F8:5E:02:1E:52:3B:EE:C8:4C:98:7D:90:04:9F:6F:95:3A:5B:43:C3:FB:3E:71:7B:86:3A"}}},"request":{"raw":"GET /data/socked/auth?app=csgopolygon\u0026channel=live\u0026socket_id=%2Fcsgopolygon%23k-xxxoFIQ0t6PNG1M9A8\u0026sparams=sso%255Bid%255D%3D%26sso%255Banon_id%255D%3D%26sso%255Bfirst_seen%255D%3D2026-08-12T14%253A20%253A10.141Z%26sso%255Bname%255D%3D%26sso%255Bavatar%255D%3D%26sso%255Bemail%255D%3D%26sso%255Bauthkey%255D%3D%26sso%255Bauthpath%255D%3D%26sso%255Bparent_url%255D%3Dhttps%253A%252F%252Fplgv2.com%252F%26sso%255Btz_offset%255D%3D0%26sso%255Btz_name%255D%3DUTC\u0026meta=%7B%22url%22%3A%22https%3A%2F%2Fplgv2.com%2F%22%7D HTTP/1.1\r\nHost: csgopolygon.reamaze.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://plgv2.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:11 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: Apache\r\ncache-control: max-age=0, private, must-revalidate\r\naccess-control-allow-origin: *\r\nvary: Accept,Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\naccess-control-max-age: 1728000\r\nx-request-id: 29be3cd2-3a7e-4b3a-b8b1-ea5976c267d6\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT\r\nx-runtime: 0.016688\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; img-src https: data: cid:; connect-src https: wss:; worker-src 'self' blob: ; child-src 'self' https: blob: ;\r\netag: W/\"ecc9f4d42d0597f3c70a8dcc7c04e6d3\"\r\nstatus: 200 OK\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":465,"size_decoded":1164,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3d128242c998dd5c6c8265bd0dd67d31","sha1":"31f5198a85c7c00f8e6553fb2857604898c821ab","sha256":"d625499ce3240946bbabae3ac122bf13538eb837ce1e4b09135df7f44c766e7c","sha512":"b9d5d321068c3b76c6852b20279b2b954c78608d726cbfd1633f6831a88e9982b52bfbac8d876052b1d3e819230461c7a96f4f53335dd705d07b7f8b2abb9ce3","ssdeep":"","tlshash":"c0f0d4f11957c08a17f4c187501d3e8ed29936675a05dc8dc2d4dd97566b158be0505c","first_seen":"2026-08-12T14:21:01.460578Z","last_seen":"2026-08-12T14:21:01.460578Z","times_seen":1,"resource_available":false,"data":null}},"time_used":565,"timings":{"blocked":0,"dns":34,"connect":169,"send":0,"wait":189,"receive":0,"ssl":173},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8e043724-3544-43cf-bc9f-2b30cec37816.snippet.anjouangaming.org/anj-seal.js","fqdn":"8e043724-3544-43cf-bc9f-2b30cec37816.snippet.anjouangaming.org","domain":"anjouangaming.org","tld":"org"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:08.231Z","timestamp":1786544408231,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /anj-seal.js HTTP/1.1\r\nHost: 8e043724-3544-43cf-bc9f-2b30cec37816.snippet.anjouangaming.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T21:54:00.44177Z","times_seen":17861250,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/9.d5f99c20c032d594.js","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:08.732Z","timestamp":1786544408732,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /9.d5f99c20c032d594.js HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 04 Aug 2026 15:14:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a7201c0-1408a\"\r\nexpires: Thu, 12 Aug 2027 14:20:08 GMT\r\ncache-control: public, max-age=31536000\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Accept-Language,Authorization,Accept,Origin,DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range\r\naccess-control-allow-methods: GET,POST,OPTIONS,PUT,DELETE,PATCH\r\nx-robots-tag: noindex, nofollow, nosnippet, noarchive\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 652980\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: a2a01e7a8dcb0b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":82058,"size_decoded":20115,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"06da265c354a138ad02877249ed74857","sha1":"32ae2229c8eda460b60479eb985d912e35c9fdd9","sha256":"6e530ad4541721429a4dedb91d7348cfbd7556d43a8fd25a3f808c69e042db22","sha512":"e6917caf398613b0cf3e222d0029ee151eaf286d48bdb847f142672fc200581b71d656cd6386d1bf93752f1a616cf583ae54dab0e28b4d0a633ade3563114461","ssdeep":"768:0cy86GCXV8qSZD9mktY0zoSJ5Lb5bonus:1Cl2xmktY0Uc550nX","tlshash":"d5830dd6352ca4b107963aab3df2423053aa340990c7f39039dcccbcf76e955a9457ba","first_seen":"2026-08-12T14:16:13.900241Z","last_seen":"2026-08-12T14:21:01.461895Z","times_seen":2,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/assets/images/about/slots.png","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.328Z","timestamp":1786544409328,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /assets/images/about/slots.png HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 1067664\r\nlast-modified: Thu, 06 Aug 2026 14:05:40 GMT\r\netag: \"6a7494b4-104a90\"\r\nexpires: Fri, 11 Sep 2026 14:20:09 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 380721\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: a2a01e7e49350b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1067664,"size_decoded":1068268,"mime_type":"image/png","magic":"PNG image data, 1375 x 576, 8-bit/color RGBA, non-interlaced","md5":"173fd38cc89c217677a1be7c83464c29","sha1":"7d431d2f656796a67759a0196d2b9974e4961585","sha256":"fd44ef757ee5bef96219cb603beee9af95ea400293da4580d9b1c95a8836e914","sha512":"af181de1bd4d27f3edf2dc04ed4a6df67b4a7dda763c42d999c45edc250ab383cc0a3ae56f91606915662308b9f92ea40bfb3c5255ef4eb6e9d59232a4138e6a","ssdeep":"24576:3no9KeACdGA3eCRb7mgG/3DXvSUH/M+jZP5AKdVF:49Z/sA3eCR3mgGvDaUHU05fdVF","tlshash":"ba25337652463f8f896540f7ea2b1f05e847e2bbe7054e1f85f4b0828490653f2b6e4e","first_seen":"2025-08-28T22:23:07.32901Z","last_seen":"2026-08-12T14:21:01.463374Z","times_seen":6,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/assets/svg/currency/usd.svg","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.883Z","timestamp":1786544409883,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /assets/svg/currency/usd.svg HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/main.0fffc87820ff4b62.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Aug 2026 15:14:08 GMT\r\nx-content-type-options: nosniff\r\nexpires: Fri, 11 Sep 2026 14:20:09 GMT\r\ncache-control: public, max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 574039\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\netag: W/\"6a7201c0-645\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2a01e81cc1f0b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1605,"size_decoded":1327,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9ae7ecdf4e5491821e05538514372a02","sha1":"2085e8a9a5baaa9856ccbcca02373d87819404b2","sha256":"d97d89a6692ed42277a35550eeb4a0f54b3b722ca4252388c43be2ffaedf20c7","sha512":"f4a5ec7e92a5e92434b1e61ab3aadfe9e3d4e2b321eba55b90a9b63e5c78b3e949b1a8ea116526ec2b5bf16ca44f86ffdecb6e8d18beeda6c6a68e4fe2316356","ssdeep":"","tlshash":"1f3120f76b46e480d003f37c8c5089e2a62f243bdff5a76cc160c5b0aa740cac55e969","first_seen":"2025-08-28T22:23:07.296099Z","last_seen":"2026-08-12T14:21:01.464108Z","times_seen":8,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/assets/images/games/roulette.png","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.209Z","timestamp":1786544409209,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /assets/images/games/roulette.png HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/main.0fffc87820ff4b62.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 58170\r\nlast-modified: Mon, 13 Jul 2026 18:43:10 GMT\r\netag: \"6a5531be-e33a\"\r\nexpires: Fri, 11 Sep 2026 14:20:09 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 2562451\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: a2a01e7d88840b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58170,"size_decoded":58771,"mime_type":"image/png","magic":"PNG image data, 674 x 400, 8-bit colormap, non-interlaced","md5":"b963ec5b75ee27151f18eae52554ddb6","sha1":"0d2145527c6dc02f9adbf5edabd3bd02fb873b33","sha256":"1179a6b4c37b2955de228ac7a40816b8504b9b2448c2f567524b199fed4addf3","sha512":"2ad5062a3b262c932a60f5067dbcc4eb820d5f4ed3d59d99eb0bca59fa3111fdc8cac50d7533db371ccd05836d6e92b515fda08c1eec7a78b866cd5595b6d990","ssdeep":"768:YpUkXE9dRYAvsmaL1O/JvK4ZFrOj54+PD8C5YW3tT1UIYGT1gTIYwNH8LSgG2me+:sU99dRY6y8KKQ8CSW3tT1KEcLGuMP","tlshash":"c2430220bfb8a4facb9a2271fc654d782cc70b0968b95b380ce555e76230f5c74ca56d","first_seen":"2025-08-28T22:23:07.257728Z","last_seen":"2026-08-12T14:21:01.464804Z","times_seen":6,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/assets/images/join/lock.png","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.243Z","timestamp":1786544409243,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /assets/images/join/lock.png HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/main.0fffc87820ff4b62.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 234165\r\nlast-modified: Mon, 13 Jul 2026 18:43:10 GMT\r\netag: \"6a5531be-392b5\"\r\nexpires: Fri, 11 Sep 2026 14:20:09 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 2562223\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: a2a01e7db8b40b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":234165,"size_decoded":234768,"mime_type":"image/png","magic":"PNG image data, 438 x 455, 8-bit/color RGBA, non-interlaced","md5":"873e4dd7371e4e22da2502fe36914b8f","sha1":"472ed3d8f04718955874f8d6f44b9ae3de01a8c7","sha256":"0eed70c448c3fc9233bed8392c25023e0d7cc99f41c22f6d2d248cb35fcaedc1","sha512":"c5407fa0a52f89d7ec9e9e420085e848c19f955bd6dfea36f5e7c1295b67f48aed39c84f99c7b9a17946321f0527b881ab33f2f321231face2af763ad308bed0","ssdeep":"6144:2IHvel3kdSAb9m3pSOK35zERc7lNyK8mQsBL88bY:2IH2bAbE3pSOkERc7P8jkHY","tlshash":"c534239c231f1d2b2638b30a88743c4cc6e721cf767f56cba5d2162d899792e1d2b51d","first_seen":"2025-08-28T22:23:07.287655Z","last_seen":"2026-08-12T14:21:01.465447Z","times_seen":6,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/assets/images/about/en-bets.jpg","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.331Z","timestamp":1786544409331,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /assets/images/about/en-bets.jpg HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 34142\r\nlast-modified: Thu, 06 Aug 2026 14:05:40 GMT\r\netag: \"6a7494b4-855e\"\r\nexpires: Fri, 11 Sep 2026 14:20:09 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 384952\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: a2a01e7e493b0b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34142,"size_decoded":34743,"mime_type":"image/jpeg","magic":"JPEG image data, comment: \"Software: gnome-screenshot\", progressive, precision 8, 1146x400, components 3","md5":"db1ba8a9ec413cc3a46899ba4bde7c7b","sha1":"6ec8ef2ff3d0699ebd9be3af816c5d35d3bfa2f7","sha256":"3b653ce5d383e0ae5e3a1c435f2d2a41a4736d6dc18f32b2822febad5962b592","sha512":"7dff2a84c0dc33c9659742db48607836b2c02c81459abcd33a8a17ab7d5ebaad69ed9875fb3bf6a195d31a661bb203c7a05e4dc625f2e97ecf9e3a9b789b4a99","ssdeep":"768:y3ZERJ7SS3xouYHOfuw8SIvGNrn5awc34+i18TyWcL4fM36:yJEHSS3R0/w8S5r53co+i182We4fM36","tlshash":"41e2d091920f1dcae34c51b9cb031d0cd1328cb13b97a1bb75a39e95e8c5f5aece8542","first_seen":"2025-08-28T22:23:07.19693Z","last_seen":"2026-08-12T14:21:01.466229Z","times_seen":6,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/assets/images/slots/dark-spiral.png","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.476Z","timestamp":1786544409476,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /assets/images/slots/dark-spiral.png HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 19564\r\nlast-modified: Thu, 06 Aug 2026 14:05:40 GMT\r\netag: \"6a7494b4-4c6c\"\r\nexpires: Fri, 11 Sep 2026 14:20:09 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 365791\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: a2a01e7f39ff0b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19564,"size_decoded":20164,"mime_type":"image/png","magic":"PNG image data, 287 x 193, 8-bit colormap, non-interlaced","md5":"8ba09fb37bf3caa2d8fc93b07c127f8d","sha1":"478747f3cef07cef4ad10f0c1d217f869f906f49","sha256":"66aad6ded9ce8105be63d7fc4f17851ec3d524255b6f2f6e8199ebf861fe26d5","sha512":"af21fcdf939ddb9c7b9997b1cd15c25bb1112b0b96a4eead32faea6226b08e011737110334aedc864462da3e0675290b8101da147a4cdc605e3026fbde7c6dad","ssdeep":"384:rflBc7p4mQsmuCIhpaXxdNnRwDJPHOcUBkJEBYR0b60ZxSwf:zoWZVChmxdNRwDIZkWBY+68nf","tlshash":"e792d0c7f303727165732420b72d309dfe998df0a862c89b01455a9df4eb08a84eaf9d","first_seen":"2026-08-12T14:21:01.467116Z","last_seen":"2026-08-12T14:21:01.467116Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"avatars.steamstatic.com/c1e5508f451c599a1e61564f5631a43dfca66746_full.jpg","fqdn":"avatars.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.858Z","timestamp":1786544409858,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avatars.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 13:33:18 GMT","end":"Mon, 21 Sep 2026 13:33:17 GMT"},"fingerprint":{"sha1":"7E:A8:7E:7A:3C:7E:B6:D6:B8:FD:DE:25:7C:26:02:14:6A:C0:E4:E4","sha256":"D1:CF:B0:B9:E1:DA:54:D8:17:C7:F7:77:FA:5A:37:E4:63:8E:A6:DE:42:57:85:7B:36:BA:72:7A:4F:3F:07:A6"}}},"request":{"raw":"GET /c1e5508f451c599a1e61564f5631a43dfca66746_full.jpg HTTP/1.1\r\nHost: avatars.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\nx-amz-id-2: u6uUTJ4HrVbX73KMF4X4Jn70eZELZ7jlLMfSfSLNwm2jzkSWcnasjRjJuNNgnfykZLWmJISvE5g=\r\nx-amz-request-id: 1KJEDDWHMF20CCY5\r\nlast-modified: Thu, 30 Jul 2026 21:07:20 GMT\r\netag: \"4eba5a4338c310d0bd541aaee8343d87\"\r\nx-amz-server-side-encryption: AES256\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 188698\r\ndate: Wed, 12 Aug 2026 14:20:10 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270036-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0\r\nx-timer: S1786544410.107981,VS0,VE1\r\ncontent-length: 9074\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9074,"size_decoded":9742,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 184x184, components 3","md5":"4eba5a4338c310d0bd541aaee8343d87","sha1":"30bc2dcfa9064dff9aa4659b3ac7b2f3dba92f6b","sha256":"ab7f9a130a95e21374e6245331552af09cd8734afff8b40ac77ff6fe23ad7951","sha512":"5dad7ea1836b833fadc9553d056e27ba3324c548584b8c7a87191f1fdc00a60ccba19eb875fddd873a0442d7d287980cf0c7a4426466f2da6511bd39a1a3f1f4","ssdeep":"192:Dx+dcoiY12MzSR4Ft4l+n822xjPnFHMjcB1JmEGTCaN1A5wf:F+6HeORctPn52xjPnFMjc0D45C","tlshash":"27127c8d1f527ec1fc000fb16898ef1cd8eb6004bee5065e9ddaf69144be5668fa84c6","first_seen":"2026-08-12T14:16:13.907484Z","last_seen":"2026-08-12T14:21:01.469188Z","times_seen":2,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":2,"connect":8,"send":0,"wait":11,"receive":0,"ssl":238},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/assets/svg/language/ru.svg","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.186Z","timestamp":1786544409186,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /assets/svg/language/ru.svg HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/main.0fffc87820ff4b62.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 13 Jul 2026 18:43:11 GMT\r\nx-content-type-options: nosniff\r\nexpires: Fri, 11 Sep 2026 14:20:09 GMT\r\ncache-control: public, max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 2562450\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\netag: W/\"6a5531bf-1d1\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2a01e7d686b0b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":465,"size_decoded":861,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"49875a4728a75e5f0d30945ed94e1d63","sha1":"6e21a48f3e9280621ca5e4fcab6a740220f3855e","sha256":"e5cd34b3bb6bd119efb697db180f6656c00d54d5c786a710bd270cab2282a010","sha512":"26e9f9a5812403b1296740836a8ddb7f5d49cf993e233728739899283512c6dad4ebd80c3a9bf1c658f0e716116e2f286a99c8297bc8703df7c974b0647c8c6d","ssdeep":"","tlshash":"a7f05ca9d38860958a2a476c9a2d7a3e007330f15c5005d954522512bd194e73f48aa8","first_seen":"2024-11-27T09:46:18.266221Z","last_seen":"2026-08-12T14:21:01.470477Z","times_seen":9,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/assets/svg/avatar/vip.svg","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.882Z","timestamp":1786544409882,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /assets/svg/avatar/vip.svg HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/main.0fffc87820ff4b62.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 13 Jul 2026 18:43:11 GMT\r\nx-content-type-options: nosniff\r\nexpires: Fri, 11 Sep 2026 14:20:09 GMT\r\ncache-control: public, max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 2562449\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\netag: W/\"6a5531bf-324\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2a01e81bc0f0b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":804,"size_decoded":1018,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2545fc4a66ebdcae81f8de4d6698e970","sha1":"1fef13b9b824239edbce8c65441ed6693e27d9bd","sha256":"96c89de47a15fc264b5fd3cf3035d3fe5e96a1638670d9946b40ad832d4acb5d","sha512":"2242e8d31e8190456b770805110f686c02a1895979c5289dbef87cf453cb73707147e08025714cb4b868b992eb2c40aeec40c75a76b02d3561743ba70616a5b3","ssdeep":"","tlshash":"2801f1f926346270814ac74061a0a85cf7e9287ad2c857f8e8c16dd7a1b12c5ecc5464","first_seen":"2025-08-28T22:23:07.29434Z","last_seen":"2026-08-12T14:21:01.471215Z","times_seen":6,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/link-icon.8ce90329e262fafabf0f.svg","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.890Z","timestamp":1786544409890,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /link-icon.8ce90329e262fafabf0f.svg HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/main.0fffc87820ff4b62.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sat, 01 Aug 2026 19:10:46 GMT\r\nx-content-type-options: nosniff\r\nexpires: Fri, 11 Sep 2026 14:20:09 GMT\r\ncache-control: public, max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 730276\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\netag: W/\"6a6e44b6-332\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2a01e81dc270b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":818,"size_decoded":1021,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"96a18b41e48264d27a188cb4639c2143","sha1":"86643bca2e5c4e767c46b2f659c27004e9258f07","sha256":"2793a77525b3e6f54cdcaf8dc98de3ea1b15412b4c9cc97385530ff296ad0814","sha512":"8a93e868ad20d82b1ad7de94b66aa860a258b81efaf16224c56eff64baa88a1a5791808eee3e84e3e8127273ca5a4a5f2b6fd13aa6d915dffe0927037fda2c34","ssdeep":"","tlshash":"cb01f13672fdfcd51609877faf3b705d407734f0abb65594c0615620889920ba61fcc0","first_seen":"2025-08-28T22:23:07.335161Z","last_seen":"2026-08-12T14:21:01.471872Z","times_seen":7,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.275Z","timestamp":1786544409275,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://plgv2.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 07 Aug 2026 18:07:09 GMT\r\nexpires: Sat, 07 Aug 2027 18:07:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 418380\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-12T21:33:01.711813Z","times_seen":548813,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":47,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/assets/images/about/offers.png","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.332Z","timestamp":1786544409332,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /assets/images/about/offers.png HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 257119\r\nlast-modified: Mon, 13 Jul 2026 18:43:10 GMT\r\netag: \"6a5531be-3ec5f\"\r\nexpires: Fri, 11 Sep 2026 14:20:09 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 2562421\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: a2a01e7e493e0b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":257119,"size_decoded":257722,"mime_type":"image/png","magic":"PNG image data, 1300 x 778, 8-bit/color RGBA, non-interlaced","md5":"73cbe5e58882231a78d1a68272d90b73","sha1":"8bfbcaff9d3449926bac3794a2c262c19f7f2166","sha256":"f3dce7cbfce5a72ba2be7156d68bbb50258de8b79dc70f85f43f71e86e672fb6","sha512":"bf3d4b9ad55970033a7559a410aaa40d4aa52df2c364c62ee69cae6c02c23f7c8267d0486680efe976b81ba3f6feec9dcc860402035b32179e9a329ffe6e5147","ssdeep":"6144:yWI1HziItS50z4jEF0iO3iLjtuHSFBJ2eqVAu+LEdl5M0JL:yWI1Hz/6gS3iL4U2eKAo5M0JL","tlshash":"2c441208e4fbc9719eea6e7f6d92984d27343b1b162f0a3ec7016d869e02e7d815414f","first_seen":"2025-08-28T22:23:07.299883Z","last_seen":"2026-08-12T14:21:01.472513Z","times_seen":6,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/roulette.64f552fb408d9b7ec1b3.svg","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.886Z","timestamp":1786544409886,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /roulette.64f552fb408d9b7ec1b3.svg HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/main.0fffc87820ff4b62.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 06 Aug 2026 14:05:40 GMT\r\nx-content-type-options: nosniff\r\nexpires: Fri, 11 Sep 2026 14:20:09 GMT\r\ncache-control: public, max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 45407\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\netag: W/\"6a7494b4-328\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2a01e81cc220b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":808,"size_decoded":976,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"26c45ac0d716c1a559027c152a7b7e02","sha1":"b3a601e8478441c75e96794170452e90e5089d36","sha256":"086a12871060856bea9acc6944fb37b0bc410699b646322647c3c742ad7d717d","sha512":"77739dc1a3f8b593e068805d8cf21b4bb663f4a1f39fd4b7622b8d78c9307759d4bb97c8620592a1078f270a4c64d34ba40f62a2a89352396ca82ee3b160cd61","ssdeep":"","tlshash":"79018ef7c2c8e2c0100387b3caf521a5c53f7478234e49a95930fba89329d668c0ccd1","first_seen":"2025-08-28T22:23:07.204524Z","last_seen":"2026-08-12T14:21:01.473139Z","times_seen":8,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"avatars.steamstatic.com/71786ed617cb68ea17c0756d6f931210630791bf_full.jpg","fqdn":"avatars.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.865Z","timestamp":1786544409865,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avatars.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 13:33:18 GMT","end":"Mon, 21 Sep 2026 13:33:17 GMT"},"fingerprint":{"sha1":"7E:A8:7E:7A:3C:7E:B6:D6:B8:FD:DE:25:7C:26:02:14:6A:C0:E4:E4","sha256":"D1:CF:B0:B9:E1:DA:54:D8:17:C7:F7:77:FA:5A:37:E4:63:8E:A6:DE:42:57:85:7B:36:BA:72:7A:4F:3F:07:A6"}}},"request":{"raw":"GET /71786ed617cb68ea17c0756d6f931210630791bf_full.jpg HTTP/1.1\r\nHost: avatars.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncontent-md5: re8KCXcBZMP2171KgdEb2Q==\r\nlast-modified: Sat, 06 Dec 2025 14:41:11 GMT\r\netag: \"0x8DE34D57FD41213\"\r\nx-ms-access-tier: Cold\r\nx-ms-access-tier-change-time: Fri, 05 Jun 2026 00:31:34 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1094210\r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270036-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0\r\nx-timer: S1786544410.900227,VS0,VE2\r\ncontent-length: 684\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":684,"size_decoded":1297,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 184x184, components 3","md5":"adef0a09770164c3f6d7bd4a81d11bd9","sha1":"3607202fbf7ec9785608ed054b5f098426334290","sha256":"6aa10f142fedb8f6f81ba3c2018962254895dc8baa7d097057f51949095baaac","sha512":"32d3686257fabaeaa4a7d42d24bd48f8c8607148faa7d3d67b8ad2e376dab4bac92f15ecccaab8f802dc1099f47f836571704c912117b21e445398da897de475","ssdeep":"","tlshash":"4801129637925be0f97e5ab28520de6457e49f11a1920f9f11c93d40ac967c42510525","first_seen":"2026-08-12T14:16:13.881277Z","last_seen":"2026-08-12T14:21:01.473731Z","times_seen":2,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":18,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.reamaze.com/data/brands/csgopolygon/ping","fqdn":"cdn.reamaze.com","domain":"reamaze.com","tld":"com"},"ip":{"addr":"172.66.151.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:10.176Z","timestamp":1786544410176,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.reamaze.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Thu, 17 Jul 2025 20:54:16 GMT","end":"Tue, 18 Aug 2026 20:54:16 GMT"},"fingerprint":{"sha1":"95:C6:DA:9F:AF:CA:EF:87:7E:36:1A:38:18:5D:94:C6:B2:F0:9E:30","sha256":"86:29:30:4F:A2:4A:3D:4D:DD:E8:F8:F3:90:7D:BB:C6:D9:38:3F:36:D3:F8:BA:B7:AE:70:44:B2:2F:FA:53:FD"}}},"request":{"raw":"GET /data/brands/csgopolygon/ping HTTP/1.1\r\nHost: cdn.reamaze.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://plgv2.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\ncache-control: max-age=300, public, must-revalidate\r\nvary: Accept,Accept-Encoding\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\naccess-control-max-age: 1728000\r\nx-request-id: 0e9b1ea8-3ff3-4474-84b0-db5a68f134ee\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT\r\nx-runtime: 0.057840\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; img-src https: data: cid:; connect-src https: wss:; worker-src 'self' blob: ; child-src 'self' https: blob: ;\r\netag: W/\"9b6156832bd40009c3906a52796f7d3c\"\r\nstatus: 200 OK\r\nage: 285\r\ncf-cache-status: HIT\r\ncf-ray: a2a01e839e645ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21243,"size_decoded":7149,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5db2e4e02ec3562bab0d535794596821","sha1":"5a250872e936d2715d0b42d9264ae27177d49fc1","sha256":"1d8508813778ea6fc57b619dd7719f4b3cc2deada2258a97c44117763f0ca5d7","sha512":"b54ee6bf1a188415d03918b16756189d339f68645ad7fcd078ed42d6514b78630afb015e6b02fd768f6355d5211016259acb9985d61c7e33b395f0c7be63181a","ssdeep":"384:p8eFe0kPA0fUKiu8Un8o67c2VDAvw00lJ0Xb6lw26T1UKiKqSDfLpfx:viRfUwfv90lJ0Xb6lt6TuKiKqeDpfx","tlshash":"1d92e81ed61c165949425eb7b1d7be8e726cd0f336e110d2f7948c2f0128aac369bac7","first_seen":"2026-08-12T14:16:13.998288Z","last_seen":"2026-08-12T14:21:01.474907Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/styles.7f9df5942c658dc8.js","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:08.240Z","timestamp":1786544408240,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /styles.7f9df5942c658dc8.js HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 01 Jul 2026 14:13:56 GMT\r\nx-content-type-options: nosniff\r\nexpires: Thu, 12 Aug 2027 14:20:08 GMT\r\ncache-control: public, max-age=31536000\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Accept-Language,Authorization,Accept,Origin,DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range\r\naccess-control-allow-methods: GET,POST,OPTIONS,PUT,DELETE,PATCH\r\nx-robots-tag: noindex, nofollow, nosnippet, noarchive\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 2954937\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\netag: W/\"6a4520a4-70\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2a01e777b1a0b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112,"size_decoded":1064,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with no line terminators","md5":"2fe9a770256f916f3130c1bef1aefe94","sha1":"2832087ca1a9b5adeab2221ccfdce08593297d7d","sha256":"0592ca67a7862bf565e7ed55e7f36bffc74190c0598e57e7eaa554721c3e5e92","sha512":"29bf8605a4e955731b641c0d63768e135e3d4957a9e859333515e1ee6718484d83460cb06fe2fd3dcd1e76c3a1378c2a5142ec8e5765a50a3c32231d4d7dc6b4","ssdeep":"","tlshash":"9eb092192491beb83d6f18c044a18dea09a414b3793980e2bde25c51a05ed2c1564c8c","first_seen":"2025-08-28T22:23:07.322551Z","last_seen":"2026-08-12T14:21:01.475997Z","times_seen":8,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"8e043724-3544-43cf-bc9f-2b30cec37816.snippet.anjouangaming.org/anj-seal.js","fqdn":"8e043724-3544-43cf-bc9f-2b30cec37816.snippet.anjouangaming.org","domain":"anjouangaming.org","tld":"org"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:08.433Z","timestamp":1786544408433,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /anj-seal.js HTTP/1.1\r\nHost: 8e043724-3544-43cf-bc9f-2b30cec37816.snippet.anjouangaming.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T21:54:00.44177Z","times_seen":17861250,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/arrow.9a51a1b46a269cf3898e.svg","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.188Z","timestamp":1786544409188,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /arrow.9a51a1b46a269cf3898e.svg HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/main.0fffc87820ff4b62.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 06 Aug 2026 14:05:40 GMT\r\nx-content-type-options: nosniff\r\nexpires: Fri, 11 Sep 2026 14:20:09 GMT\r\ncache-control: public, max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 408610\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\netag: W/\"6a7494b4-419\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2a01e7d686e0b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1049,"size_decoded":1122,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4e2914d74cd016aeb1dc9d15b049242b","sha1":"0dde750ad7edea6490588e44da5693299987ce61","sha256":"029685aeae3614d8b7bd1c7d782ec758f04ed1ba8e3bea93b260ce8db5d563d6","sha512":"6bed6cc52998cbc7854be5b289ff8450449ce7e877775252cea573149f130b6c52054fe5d51d39348b6061fd655406a8323d82f7aadff7bf37062e0726d25c18","ssdeep":"","tlshash":"0d1102f5d39d40e0eb0c9e1dcc3d011e90256af39f8b849c5194949ce1239baca19e0c","first_seen":"2025-08-28T22:23:07.332305Z","last_seen":"2026-08-12T14:21:01.476636Z","times_seen":8,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/mastercard.cda8f3ebbfc52acd36dd.svg","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.249Z","timestamp":1786544409249,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /mastercard.cda8f3ebbfc52acd36dd.svg HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/main.0fffc87820ff4b62.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 13 Jul 2026 18:43:10 GMT\r\nx-content-type-options: nosniff\r\nexpires: Fri, 11 Sep 2026 14:20:09 GMT\r\ncache-control: public, max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 2562451\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\netag: W/\"6a5531be-33b\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2a01e7dc8bf0b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":827,"size_decoded":1017,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b7b525cc7d84174d643c3b1c2df5bc8a","sha1":"0ead97450c6ed30d99508608dac32eb9fe831931","sha256":"3fddc7b07c8edf6ba282d9c9e6d3170ecb2b147303da0620ffadabb7656fec4c","sha512":"0b2815df401adfbc753e4dc2a06749015285e48ffc75bd9f392725446e4b099b8da7ebfaefc5f8859e2ce801286c8434f6dedb34ae74f9b1c8fc1bf4a4710844","ssdeep":"","tlshash":"070182f4b2d05611e51b5fe6b21d6875291330f63e414ea09ec2b91c751d24feca45e4","first_seen":"2025-08-28T22:23:07.339007Z","last_seen":"2026-08-12T14:21:01.477333Z","times_seen":8,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/new_logo.d7c0128ccdc12604d9cd.svg","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.176Z","timestamp":1786544409176,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /new_logo.d7c0128ccdc12604d9cd.svg HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/main.0fffc87820ff4b62.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 13 Jul 2026 18:43:10 GMT\r\nx-content-type-options: nosniff\r\nexpires: Fri, 11 Sep 2026 14:20:09 GMT\r\ncache-control: public, max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 2562451\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\netag: W/\"6a5531be-194f\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2a01e7d585e0b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6479,"size_decoded":2504,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5c386c9e7c07d090faf0dbf750b25211","sha1":"f34493ed7787df5e00444bf4ab30a420250adbe2","sha256":"c9c51d06c6266002d3e486b5c600fd6a1fd620c957440a76551ce07604a0881a","sha512":"0f551940e358ccd46bf6a67abe709562ca9e122bf1a3c41aa5cb5ecc67a745f83ffd43e22031caa2e12a87f00c3f6b2036beacd5cf5699380828c1bb25b4abff","ssdeep":"96:HmBte/lX6akJurXViUaujmBhcRq2NWEbFki8epvCTYV2cwvixMbudIR:HEtudkJurFFmTcR/EEBkfehoYVq","tlshash":"0ed1202ee1ab9c21f786d7e8cd53b434259509e779028158c2e4ff1ebc209ca5d9d8d3","first_seen":"2024-11-27T09:46:18.253413Z","last_seen":"2026-08-12T14:21:01.477988Z","times_seen":9,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.reamaze.com/assets/reamaze-loader.js","fqdn":"cdn.reamaze.com","domain":"reamaze.com","tld":"com"},"ip":{"addr":"172.66.151.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.473Z","timestamp":1786544409473,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.reamaze.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Thu, 17 Jul 2025 20:54:16 GMT","end":"Tue, 18 Aug 2026 20:54:16 GMT"},"fingerprint":{"sha1":"95:C6:DA:9F:AF:CA:EF:87:7E:36:1A:38:18:5D:94:C6:B2:F0:9E:30","sha256":"86:29:30:4F:A2:4A:3D:4D:DD:E8:F8:F3:90:7D:BB:C6:D9:38:3F:36:D3:F8:BA:B7:AE:70:44:B2:2F:FA:53:FD"}}},"request":{"raw":"GET /assets/reamaze-loader.js HTTP/1.1\r\nHost: cdn.reamaze.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 418\r\nserver: cloudflare\r\nvary: Accept-encoding\r\nlast-modified: Tue, 11 Aug 2026 21:37:50 GMT\r\netag: \"1a2-658cc484f6780\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nage: 5367\r\ncf-cache-status: HIT\r\ncf-ray: a2a01e7f3caf5ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":706,"size_decoded":767,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (706), with no line terminators","md5":"cfb80811b9c506feb0a9c80af3d0a1e0","sha1":"de00d8d7b90cbb88e6830d3e73cbad7a1f0442dd","sha256":"7320b658f0d41897702b5b1f1885c7738db7dc99af602fe60f1eed3a4daf1423","sha512":"5fb64f65380ef089c56970545ab064af44e95f83574c14bbc1f0ed8ad4adf4caef7c98e4db5213ff00397a533eec88924f2060e7e4dd06e4d65d3bee19922743","ssdeep":"","tlshash":"b501fe243d152534a345616531bfe7887e313137fa0694c2a0bfccb8b938d921417e8d","first_seen":"2025-04-01T20:35:41.688728Z","last_seen":"2026-08-12T14:21:01.370907Z","times_seen":1799,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/coinflip_bot_default.2ff4680c32fdd3359f28a0f92e16d47b.svg","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.864Z","timestamp":1786544409864,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /coinflip_bot_default.2ff4680c32fdd3359f28a0f92e16d47b.svg HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 13 Jul 2026 18:43:10 GMT\r\nx-content-type-options: nosniff\r\nexpires: Fri, 11 Sep 2026 14:20:09 GMT\r\ncache-control: public, max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 2562494\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\netag: W/\"6a5531be-1198\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2a01e81ac030b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4504,"size_decoded":2515,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b199aa52e8d95ea8e4333297de43b1b9","sha1":"f4cf8e54628fb2b11614e4b3bad2309d81cae397","sha256":"fad8258ddaa35fa1d4e76c038144c563cea36b7567e0fcc8b3b32a086f07c4af","sha512":"657d68d648dc0ae70c811b9f889eeadc34a794fa10ae00f54c4e6a62f7d11bb810d9d2cf8ed5695e5d5b969551a57b4eec76c1e660ab9bf028578fcf62a45ead","ssdeep":"96:gQsHyz2ZMM9CjRpfNO4CcmPU/PIO3Dea5XOR0yPZMiu48rMLsbXgO7:gnHyayRhCGeaYGoiPZ","tlshash":"c391668473bac1b5f405e6f9439af078265259db6412c09ee3e7bd26e48184d0de8cdf","first_seen":"2025-11-15T22:25:40.55512Z","last_seen":"2026-08-12T14:21:01.478616Z","times_seen":6,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@100;200;300;400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:08.340Z","timestamp":1786544408340,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:43 GMT","end":"Mon, 12 Oct 2026 18:07:42 GMT"},"fingerprint":{"sha1":"3C:2E:4A:58:D0:DB:8D:00:50:7D:0E:E6:87:DE:CA:95:B3:BA:1B:89","sha256":"C2:4F:05:DF:4B:24:E4:A9:E4:2A:30:66:F4:78:E7:75:AC:AE:71:43:E7:DA:3E:24:4B:A3:AA:9A:39:4E:E2:E1"}}},"request":{"raw":"GET /css2?family=Inter:wght@100;200;300;400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 12 Aug 2026 14:20:08 GMT\r\ndate: Wed, 12 Aug 2026 14:20:08 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22743,"size_decoded":1639,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"03d386d3d51356518f1c932bd7d1f021","sha1":"f20bdaa14bb1dba0ae6b28e1c455976bcc6e0081","sha256":"e833d17f31411e640714d4c41bd3d264b7c2b48b4740ce7ea6d7988f50e58d69","sha512":"dcbd99af933cbe40c84ba846643ac9e9e5b070e391a04d2d608a0f89f470b31aea8bee06ba7048fb2e7140eaeb75ce1c990d32444736469826bee4c96ffb2dc5","ssdeep":"192:WpNmp9pKpO3tp3pxYp5NnWjO3GAxRKNA1cO3lnxirNNIxO34OxDENOPCO3/Nx8NP:WLmXoKtZIB1OKYXuM0p2+g7GQK","tlshash":"d5a28992002ba400ab971dc233cf7f3aaece10856085d1b96ffd0dc59cead66436876d","first_seen":"2025-09-10T18:54:49.359958Z","last_seen":"2026-08-12T18:53:45.87015Z","times_seen":9277,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":1,"connect":15,"send":0,"wait":34,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/visa.d4e40a8c25a6fd82af9c.svg","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.247Z","timestamp":1786544409247,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /visa.d4e40a8c25a6fd82af9c.svg HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/main.0fffc87820ff4b62.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 13 Jul 2026 18:43:10 GMT\r\nx-content-type-options: nosniff\r\nexpires: Fri, 11 Sep 2026 14:20:09 GMT\r\ncache-control: public, max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 2562451\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\netag: W/\"6a5531be-5a6\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2a01e7dc8ba0b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1446,"size_decoded":1283,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fc89e3a445bf1dd27d8cdbe5d1b78b95","sha1":"f353590e9c41ebe3024ca714366a43460bcb5364","sha256":"68fa8134dccbd0f86b4d8ee6d5bc742fd4955e310485e0dad77f2fb0d90316af","sha512":"2d745381522c60f69931e56bc0ca51f293bde7640f8318d1b4a1f6299311c92281cc02ac986f64aae8a070bf2b624404af7d256d5f4c8d2e1b506e0a45906a05","ssdeep":"","tlshash":"8831467573c8c2a8e60587548730b46db15f3eef2ed5430550636e59700906e8ce6596","first_seen":"2025-08-28T22:23:07.236872Z","last_seen":"2026-08-12T14:21:01.480005Z","times_seen":8,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUQjIg1_i6t8kCHKm459WxRyS7m0dJ9pQOi.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.279Z","timestamp":1786544409279,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/montserrat/v31/JTUQjIg1_i6t8kCHKm459WxRyS7m0dJ9pQOi.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://plgv2.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39580\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 12 Aug 2026 13:18:40 GMT\r\nexpires: Thu, 12 Aug 2027 13:18:40 GMT\r\ncache-control: public, max-age=31536000\r\nage: 3689\r\nlast-modified: Thu, 04 Sep 2025 17:10:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":39580,"size_decoded":40391,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39580, version 1.0","md5":"adbb74ed85ae03bafbc689d12c4b009d","sha1":"7f3b99b45e6d2fcfc6236e972f9eca353cf0d130","sha256":"d7143d0ded43c36b8c4ff4a0df9fba2d356d27f64d38f33d962ec5977f928d31","sha512":"d91511c5a20c5b851b6363603959dc520622c0202e2c39b8bd7cacf95f597bccbfe4595cda9785639dbd216e1a45c980e8e54c94a778165b6d81b83192d57a55","ssdeep":"768:GtZDr7XQiUGTkhuSlVGpCRf0p0lBYtg8PdVc4vtSbga/azp8kAUuzqksy8G:GzP7xyhuSlwpq7R8Ve6UN/ad8kLufsyP","tlshash":"e30301c6940ca5f9dcaa027bfc5e0cfa39654cb89c0a6b9c5f89e7634165cf2425ca4c","first_seen":"2025-09-05T00:54:06.266401Z","last_seen":"2026-08-12T19:13:47.456203Z","times_seen":234467,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":53,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avatars.steamstatic.com/0781e4554716c4362f9b410684ade8c230a941c2_full.jpg","fqdn":"avatars.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.868Z","timestamp":1786544409868,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avatars.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 13:33:18 GMT","end":"Mon, 21 Sep 2026 13:33:17 GMT"},"fingerprint":{"sha1":"7E:A8:7E:7A:3C:7E:B6:D6:B8:FD:DE:25:7C:26:02:14:6A:C0:E4:E4","sha256":"D1:CF:B0:B9:E1:DA:54:D8:17:C7:F7:77:FA:5A:37:E4:63:8E:A6:DE:42:57:85:7B:36:BA:72:7A:4F:3F:07:A6"}}},"request":{"raw":"GET /0781e4554716c4362f9b410684ade8c230a941c2_full.jpg HTTP/1.1\r\nHost: avatars.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AKhXX7JBWXpXhAzvC_fEPHBzBNrsvNkJN29Fg9I-8TVDGypYH4wsWOyjK0Dgz5N4kg-Z7syJYY0SqrA\r\nlast-modified: Sat, 07 Mar 2026 21:05:34 GMT\r\netag: \"fbc097b6499ec4cdaadbab9e7d0bfb22\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\nvia: 1.1 varnish\r\nage: 178232\r\nx-served-by: cache-bma-essb1270036-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 1\r\nx-timer: S1786544410.897467,VS0,VE4\r\ncontent-length: 6393\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6393,"size_decoded":7000,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 184x184, components 3","md5":"fbc097b6499ec4cdaadbab9e7d0bfb22","sha1":"8809c58eab8a7db3bb858129bea9dff954b41b18","sha256":"a589f178e074f269e2044d5e2c0c5bced3b606251d04830e53874cd95d9f32b0","sha512":"64639e5efb2d2dc765f4b08dcb913c4e3d5ff20650c8ab30b3ceb1b485fdf40732de1965f7f6a5ad1cd5ec466cf8a72b847e6cafe7b5418981f7c901e05058d4","ssdeep":"192:l3bfwVPRnE5hnSURxKzGdlB3l+OA7FlCIQuFoV:l3jee5hVaS3LwFltw","tlshash":"c6d19f915c0a39c1b82dbb3a1c6d4c64f2c9b34ad2f790584bff1d91f296f6a1b2c008","first_seen":"2026-08-12T14:16:13.967313Z","last_seen":"2026-08-12T14:21:01.481432Z","times_seen":2,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/assets/svg/language/pl.svg","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.184Z","timestamp":1786544409184,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /assets/svg/language/pl.svg HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/main.0fffc87820ff4b62.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 20 Jul 2026 03:29:45 GMT\r\nx-content-type-options: nosniff\r\nexpires: Fri, 11 Sep 2026 14:20:09 GMT\r\ncache-control: public, max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 1930056\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\netag: W/\"6a5d9629-1ac\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2a01e7d686a0b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":428,"size_decoded":855,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"06c183f8150573f06dc0ba150d75d3b7","sha1":"1974795a73de43cad654be96b2d0c2452ab4e088","sha256":"50607bcc576816c8434513ceffc843e830084e97d90c4376611c46ab2ddb4873","sha512":"8a60f957870c9ba8a58eb5a4b87664ddbaf1fe7f95aa63d02dbbd59e94936d058a064afb4199a9842bfdbe0633d0c3bf5999c20936d7bcacc35c5996f764a3fe","ssdeep":"","tlshash":"0fe02b94617dc20f960d1f260a9d34760490f0d01b4944d7f7997f293e5fa5f6c226d8","first_seen":"2026-05-10T23:10:02.783895Z","last_seen":"2026-08-12T14:21:01.48285Z","times_seen":4,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/assets/images/games/dice.png","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.212Z","timestamp":1786544409212,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /assets/images/games/dice.png HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/main.0fffc87820ff4b62.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: image/png\r\ncontent-length: 49674\r\nlast-modified: Mon, 13 Jul 2026 18:43:10 GMT\r\netag: \"6a5531be-c20a\"\r\nexpires: Fri, 11 Sep 2026 14:20:09 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 2562450\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: a2a01e7d88860b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":49674,"size_decoded":50275,"mime_type":"image/png","magic":"PNG image data, 674 x 400, 8-bit colormap, non-interlaced","md5":"b96882ad750aea0f38bbc5d3c97fb460","sha1":"dfa3c8f508f763a3045e709b7ad3bde38c7625bd","sha256":"041abdb4f46f0b0a21d9b74eb4ea897a211e864b5dd931d0e795fbdd1a69cdde","sha512":"14f8615b67ba6b873bd29ad7ac304ae0d86d5f5fd7d5a72bf74b6297ea1b2464e162056725f22679e93306b7f56c86f850880763b2f8b7dffbe84ce17afc5fe0","ssdeep":"768:esczdc5Y1iSYMzkQvelxmz0wQ7vuTlyT4yl0l3C0C000o0dms2LrRFENyei:esczT1icEls4wQClUl8D00o0CLrIi","tlshash":"af2302876c39afd18afdcc73bc5d18b27176f08c99cdb728e39419840bd521c12aa56d","first_seen":"2025-08-28T22:23:07.2694Z","last_seen":"2026-08-12T14:21:01.483578Z","times_seen":6,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.274Z","timestamp":1786544409274,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://plgv2.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 07 Aug 2026 18:07:09 GMT\r\nexpires: Sat, 07 Aug 2027 18:07:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 418380\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-12T21:33:01.711813Z","times_seen":548813,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":3,"connect":33,"send":0,"wait":19,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avatars.steamstatic.com/66135c3513ac8b2e950c6b694c4996f3e96594b3_full.jpg","fqdn":"avatars.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:12.801Z","timestamp":1786544412801,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avatars.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 13:33:18 GMT","end":"Mon, 21 Sep 2026 13:33:17 GMT"},"fingerprint":{"sha1":"7E:A8:7E:7A:3C:7E:B6:D6:B8:FD:DE:25:7C:26:02:14:6A:C0:E4:E4","sha256":"D1:CF:B0:B9:E1:DA:54:D8:17:C7:F7:77:FA:5A:37:E4:63:8E:A6:DE:42:57:85:7B:36:BA:72:7A:4F:3F:07:A6"}}},"request":{"raw":"GET /66135c3513ac8b2e950c6b694c4996f3e96594b3_full.jpg HTTP/1.1\r\nHost: avatars.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncontent-md5: gEH0z/ASsP0Ri4e857X3jg==\r\nlast-modified: Fri, 19 Dec 2025 17:44:16 GMT\r\netag: \"0x8DE3F263AD81569\"\r\nx-ms-access-tier: Cold\r\nx-ms-access-tier-change-time: Thu, 18 Jun 2026 01:40:20 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Wed, 12 Aug 2026 14:20:12 GMT\r\nvia: 1.1 varnish\r\nage: 178642\r\nx-served-by: cache-bma-essb1270036-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 2\r\nx-timer: S1786544413.801676,VS0,VE0\r\ncontent-length: 16261\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16261,"size_decoded":16875,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 184x184, components 3","md5":"8041f4cff012b0fd118b87bce7b5f78e","sha1":"fff23b58afb2d5b5f1827c12c9852ec23c6ac0bb","sha256":"9d040d442459f0035d73d4c06dd2859aa232a4a296657d1d42c5e08414769031","sha512":"2862cdf5ce5a1d47088a364f177acb0461d1e407b2301d9cbfde4ec83889b1f0609dfaac105b7de1367a92a63bd6e5e5ed06a0dbdc0bb2777e882e9f6d4c041a","ssdeep":"384:nmuDI3NVDmOuhfL99WKFj1az+/PiSlPyJU0R+rIWfUzlG:WdxTo9iSlPyOlkWf1","tlshash":"6072bf1af28075f1b51616797cf21cc929fe07411aa34005b8cbb6f425aa6f6a4fb0b5","first_seen":"2026-08-12T14:16:14.038771Z","last_seen":"2026-08-12T14:21:01.485088Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1bccfa6c-7880-43ee-a687-6866c000c244.snippet.anjouangaming.org/anj-seal.js","fqdn":"1bccfa6c-7880-43ee-a687-6866c000c244.snippet.anjouangaming.org","domain":"anjouangaming.org","tld":"org"},"ip":{"addr":"108.157.229.13","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:08.234Z","timestamp":1786544408234,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"anjcdn.org","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 09 Sep 2025 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"E8:BB:D8:6E:0B:96:2F:6B:79:F4:51:03:9E:0B:82:DF:B3:89:F2:61","sha256":"FF:12:4C:5C:69:6A:A0:75:A5:73:2B:7B:4D:C8:C5:4D:08:45:4A:89:9C:9B:40:21:53:78:BB:ED:95:B5:55:19"}}},"request":{"raw":"GET /anj-seal.js HTTP/1.1\r\nHost: 1bccfa6c-7880-43ee-a687-6866c000c244.snippet.anjouangaming.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Wed, 12 Aug 2026 14:15:22 GMT\r\nserver: cloudflare\r\ncf-ray: a2a0177c8e060cf2-FRA\r\ncache-control: max-age=300\r\netag: W/\"bed-Z6+p/Ak0KwTI9mOFXKm0AulBlEM\"\r\nstrict-transport-security: max-age=15724800; includeSubDomains\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: gzip\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 3130c9b603e4215bb05d32cd39e3843c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN56-P2\r\nx-amz-cf-id: mM5AgeVfoYlT3G0Xyjd5D0PxT8Jq8zPjf4g4ntdeARSb7NkWDbFA5Q==\r\nage: 286\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":3053,"size_decoded":1826,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3053), with no line terminators","md5":"86e446e1ddddf6e53b6e371ba276e55b","sha1":"67afa9fc09342b04c8f663855ca9b402e9419443","sha256":"59de63fd13c734539781b4114474a1d2ef9ef865d3fdfc1efd3aa2ad7554ffcd","sha512":"74a861cb4166e82ac14527ef3c020305978ae09694dcf44eb64ad873cdb40c664aadba0fada13a4ad8b96a152aac33cc3c3b4049349a61f4e482721f6f0ad466","ssdeep":"","tlshash":"c15142793ec0c4cb776aadab6a7f30d8d717d49a5f43080a5433ac68fd64524ec865b0","first_seen":"2026-08-12T14:16:13.895272Z","last_seen":"2026-08-12T14:21:01.486525Z","times_seen":2,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":36,"connect":34,"send":0,"wait":33,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/assets/svg/avatar/border-cube-diamond.svg","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.887Z","timestamp":1786544409887,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /assets/svg/avatar/border-cube-diamond.svg HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/main.0fffc87820ff4b62.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 06 Aug 2026 14:05:40 GMT\r\nx-content-type-options: nosniff\r\nexpires: Fri, 11 Sep 2026 14:20:09 GMT\r\ncache-control: public, max-age=2592000\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 97616\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\netag: W/\"6a7494b4-24d\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a2a01e81dc250b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":589,"size_decoded":920,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ee956a2c789a87396210ba65ee7520fb","sha1":"f99341f7f8d93b5e650e1e58a46e6de0101e2aad","sha256":"82282ebb1abf860ddcd39c7778db3d2ddeb6f1ed3a3f64350d7c3dd8ed16cc49","sha512":"1d735d310f2036a24808e8b74c1ae5599ba1b9e0ec08995646888f56338738b4a67a4793c449d2a92313a89436639aeeb6f7a5d02c10959b4b20708150ae603e","ssdeep":"","tlshash":"27f0282ab298cc3bc26cc28ce8406025215d529359c5c250e5e4ef2e59294c23c2f7d9","first_seen":"2026-08-12T14:16:13.952952Z","last_seen":"2026-08-12T14:21:01.487921Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/support.f9774257f1cbb312.png","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:10.262Z","timestamp":1786544410262,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /support.f9774257f1cbb312.png HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DMMT9B3B8Y=GS2.1.s1786544408$o1$g0$t1786544408$j60$l0$h0; _ga=GA1.1.1280024709.1786544409\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 30804\r\nlast-modified: Thu, 06 Aug 2026 14:05:40 GMT\r\netag: \"6a7494b4-7854\"\r\nexpires: Fri, 11 Sep 2026 14:20:10 GMT\r\ncache-control: public, max-age=2592000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 290435\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: a2a01e842e110b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30804,"size_decoded":31404,"mime_type":"image/png","magic":"PNG image data, 128 x 140, 8-bit/color RGBA, non-interlaced","md5":"b593f96b40e236357c4b5ef1b7ebc709","sha1":"69399079fb177419661b4a86a3912652598184fc","sha256":"8dd7431a622151fc4f13365fa6e0c28891d4dbcbbd9da18edb65a9d65fcce5fd","sha512":"55d6e50a7440eeda9d6fe9742c8d25f56f04d9e1e0f4ebeb235101deee6679abe47a74295b8cc2a38d06bca39fcfa065028cbbec69c4e9590556f89e8e232271","ssdeep":"768:pBi28N4JS2WVKURG+FCppSlQC1/XSGwI//YhYZncU40umW:m28N4zkK+FCrSCC1fFwJ01W","tlshash":"01d2f2113937fa10438c34edec9ce625ce094f578e00d88fdad7abae1d76d809251ae8","first_seen":"2026-05-10T23:10:02.697045Z","last_seen":"2026-08-12T14:21:01.489418Z","times_seen":4,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-DMMT9B3B8Y","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:08.230Z","timestamp":1786544408230,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:06:08 GMT","end":"Mon, 12 Oct 2026 18:06:07 GMT"},"fingerprint":{"sha1":"BA:95:90:2D:24:46:69:E3:91:01:2E:0F:2E:73:5C:7A:52:38:4B:B4","sha256":"13:70:D8:3E:0B:A2:B9:38:B9:CE:9E:5B:8E:2D:0D:92:96:C6:06:EF:29:36:F4:A7:7D:E3:34:75:6A:A0:E8:08"}}},"request":{"raw":"GET /gtag/js?id=G-DMMT9B3B8Y HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Wed, 12 Aug 2026 14:20:08 GMT\r\nexpires: Wed, 12 Aug 2026 14:20:08 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 161393\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":466594,"size_decoded":161997,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5404)","md5":"6eca057aef745c121b776b6edefe2911","sha1":"99135e9e06a0094004a6fdc48096c503656cbf6a","sha256":"4261be2b1a68eb8079436c7ff967be2960af458a79b9d1d417193f841a087fc0","sha512":"b2765642a1917ef8195c088ad2ecc43a556f3818b66d32f2e28d1cd0148a59af87398faca027b73c69576af50304ae1ea3cacfff5b7aed9ef648765bdeaa0cdc","ssdeep":"6144:3JRjzqjUgQu8mLaW3IuNcad5JdEQJ3iDqojpjU6OetM:3JVAUgp8I3Jo9U6Ox","tlshash":"42a419cdb3d674269396f078903f018ba57b29a2f44cc899f189c8d42e7469a4237f7d","first_seen":"2026-08-12T14:21:01.490351Z","last_seen":"2026-08-12T14:21:01.490351Z","times_seen":1,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":1,"connect":14,"send":0,"wait":43,"receive":44,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/styles.e5355f3e4a0b67fe.css","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:08.235Z","timestamp":1786544408235,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /styles.e5355f3e4a0b67fe.css HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 18 Jul 2026 14:44:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5b9167-1f35c\"\r\nexpires: Thu, 12 Aug 2027 14:20:08 GMT\r\ncache-control: public, max-age=31536000\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Accept-Language,Authorization,Accept,Origin,DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range\r\naccess-control-allow-methods: GET,POST,OPTIONS,PUT,DELETE,PATCH\r\nx-robots-tag: noindex, nofollow, nosnippet, noarchive\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 2158449\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: a2a01e777b140b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":127836,"size_decoded":29617,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (63979)","md5":"29436316499d9d7f58c53e0db76dd5bf","sha1":"784c6121da14ba6a65e50166f27204583178b937","sha256":"71f6a08cd0cc92ab7d73596092b7e3f242c12d7710e6010e1bbec524396273d0","sha512":"97ed5be85268a809ab62c7d87b7bbb693551b84ece5cb153329161076587753f58fd33bfd3b70b315ed15504aab35f73c2b480aeac3e364f425f2c9375dcb30d","ssdeep":"768:HnC+iU7kONCuq9iccCW61m4xtjaBY7JJSFyypGBBhYBNthgxDvUa+N6OjF9pjQAx:tdq9i2aqdo99mV4KHbNq503+XuLK","tlshash":"f5c3a63191d6246ef47bd237a1f0ba5d333cc84beb270baada65356d8185167013afc8","first_seen":"2026-08-12T14:16:13.977746Z","last_seen":"2026-08-12T14:21:01.49267Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/runtime.df623079a8aadcc9.js","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:08.238Z","timestamp":1786544408238,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /runtime.df623079a8aadcc9.js HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 18 Jul 2026 14:44:55 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5b9167-1b79\"\r\nexpires: Thu, 12 Aug 2027 14:20:08 GMT\r\ncache-control: public, max-age=31536000\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Accept-Language,Authorization,Accept,Origin,DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range\r\naccess-control-allow-methods: GET,POST,OPTIONS,PUT,DELETE,PATCH\r\nx-robots-tag: noindex, nofollow, nosnippet, noarchive\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 2158283\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: a2a01e777b180b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7033,"size_decoded":4133,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7033), with no line terminators","md5":"c9d921c2263a2a05c2adfdd8f6ada3bc","sha1":"b62dc3e341dc4363fe5e2b016f7ca520728642b0","sha256":"ed25a355267df1429e36fb5d6db895a10b9115187204f60e4f449739414ad0da","sha512":"fbf51bf49a57f56e6d138e4bbfda0b45c59b8c521fabfd695697320a42acdc3323d86b7e5f3a3efaa7a0525503596235bc80d0564af1a743ea6ad571a3a61eb5","ssdeep":"96:QQSKtP9qviRIaBr3coWCndnEZkkePWjSpirerHSpirOJlrCE:cOFWiRdr3DWfkTWjSpirYSpirHE","tlshash":"c0e1f9ae225479b536d965d2983ce0d6b824603f2a0ea8709b4fdc35f878fc18516fa1","first_seen":"2026-08-12T14:16:14.034561Z","last_seen":"2026-08-12T14:21:01.494631Z","times_seen":2,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plgv2.com/main.71989c3097627fab.js","fqdn":"plgv2.com","domain":"plgv2.com","tld":"com"},"ip":{"addr":"45.87.187.1","port":443,"asn":24768,"as":"Almouroltec Servicos De Informatica E Internet Lda","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:08.241Z","timestamp":1786544408241,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plgv2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 03:18:19 GMT","end":"Mon, 07 Sep 2026 04:18:18 GMT"},"fingerprint":{"sha1":"5E:67:AA:38:42:BF:94:62:E6:42:5A:DB:50:6A:8D:8F:8B:6C:D7:9F","sha256":"E0:E8:93:E8:CE:4E:25:0D:7E:69:DB:FB:D7:C0:AB:42:55:13:63:98:AA:49:35:24:63:1E:CD:0A:B6:F5:9A:5E"}}},"request":{"raw":"GET /main.71989c3097627fab.js HTTP/1.1\r\nHost: plgv2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plgv2.com/ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:08 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Jul 2026 03:54:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a5855f7-363027\"\r\nexpires: Thu, 12 Aug 2027 14:20:08 GMT\r\ncache-control: public, max-age=31536000\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Accept-Language,Authorization,Accept,Origin,DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range\r\naccess-control-allow-methods: GET,POST,OPTIONS,PUT,DELETE,PATCH\r\nx-robots-tag: noindex, nofollow, nosnippet, noarchive\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-xss-protection: 1; mode=block\r\nage: 2367826\r\ncf-cache-status: HIT\r\nexpect-ct: max-age=86400, enforce\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nserver: cloudflare\r\ncf-ray: a2a01e777b200b59-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3551271,"size_decoded":1257218,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65457)","md5":"7f2833796dc9364b26060360cb3d3dbd","sha1":"0eb2d7242e447a2b2412360cb561fafe58a727a9","sha256":"1ab3a85b0f46a85ea94d4ebccac2e1d184317bfbcd99683f84f7a85f037e19c8","sha512":"fd2334db4353672fb4b03507c5c013b76ab507fbe531da579eb3937fdbfaf1395b162e03b54d004b5b5f5c77fafe0fb00bf9f484626422c516702097904e2a7a","ssdeep":"24576:QTs9VBNmWnI4hlSw9a6AOEe9/F2BntEuQVqf:QTs9VBNmWnI4hlSw9a6AOEe9/F2BntEC","tlshash":"de256cc4b295f4a557ab46d1403f0109b33e2d58b40e8878f178edda381998eb277fb9","first_seen":"2026-08-12T14:16:13.949186Z","last_seen":"2026-08-12T14:21:01.496542Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-12","alert":"Sinkholed","trigger":"plgv2.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"avatars.steamstatic.com/8bd34daaa819b83faa6e6e43b3dcbc0c92a6c16f_full.jpg","fqdn":"avatars.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.211.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:27.236Z","timestamp":1786544427236,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avatars.steamstatic.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 13:33:18 GMT","end":"Mon, 21 Sep 2026 13:33:17 GMT"},"fingerprint":{"sha1":"7E:A8:7E:7A:3C:7E:B6:D6:B8:FD:DE:25:7C:26:02:14:6A:C0:E4:E4","sha256":"D1:CF:B0:B9:E1:DA:54:D8:17:C7:F7:77:FA:5A:37:E4:63:8E:A6:DE:42:57:85:7B:36:BA:72:7A:4F:3F:07:A6"}}},"request":{"raw":"GET /8bd34daaa819b83faa6e6e43b3dcbc0c92a6c16f_full.jpg HTTP/1.1\r\nHost: avatars.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncontent-md5: BU1pOOOz96SJABo/QjNsyQ==\r\nlast-modified: Sun, 31 May 2026 16:40:28 GMT\r\netag: \"0x8DEBF33529A82E1\"\r\nx-ms-access-tier: Hot\r\nx-ms-access-tier-inferred: true\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 619201\r\ndate: Wed, 12 Aug 2026 14:20:27 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270036-BMA\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0\r\nx-timer: S1786544427.237204,VS0,VE1\r\ncontent-length: 4584\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4584,"size_decoded":5168,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 184x184, components 3","md5":"054d6938e3b3f7a489001a3f42336cc9","sha1":"97eafd2c60d40764c4cf96758ca880069da1984d","sha256":"2d989b9c8a36a8a55a93bfecd74e62c60803d630e0c36c391136869ba78a4f8c","sha512":"aa3eb289fd5e0afbb6d48fa21f6d9967d48655772447d2771cd5ef88a3df22dcd83b95cf69e13577314b2825506e70e5dacf09b52a9b6d56032d8ea05e9188f5","ssdeep":"96:3KBOm0oTLRLKH1wcS2tgwehQz6RQ3Q1npOFRHD5X/JfPk15EUXwSjF:3KBOm0oTLRGH+3hq6R+QxpOFjXJ812Zw","tlshash":"97916b353258f3d2fd27a0b58db65c2411f6a83a313b19d91afa1fb087a37e84ca6104","first_seen":"2026-08-12T14:21:01.498543Z","last_seen":"2026-08-12T14:21:01.498543Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.reamaze.com/assets/reamaze.js","fqdn":"cdn.reamaze.com","domain":"reamaze.com","tld":"com"},"ip":{"addr":"172.66.151.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plgv2.com/ru","date":"2026-08-12T14:20:09.660Z","timestamp":1786544409660,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.reamaze.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Thu, 17 Jul 2025 20:54:16 GMT","end":"Tue, 18 Aug 2026 20:54:16 GMT"},"fingerprint":{"sha1":"95:C6:DA:9F:AF:CA:EF:87:7E:36:1A:38:18:5D:94:C6:B2:F0:9E:30","sha256":"86:29:30:4F:A2:4A:3D:4D:DD:E8:F8:F3:90:7D:BB:C6:D9:38:3F:36:D3:F8:BA:B7:AE:70:44:B2:2F:FA:53:FD"}}},"request":{"raw":"GET /assets/reamaze.js HTTP/1.1\r\nHost: cdn.reamaze.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 12 Aug 2026 14:20:09 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 211147\r\nserver: cloudflare\r\nvary: Accept-encoding\r\nlast-modified: Tue, 11 Aug 2026 21:37:51 GMT\r\netag: \"338cb-658cc485ea9c0\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nage: 1377\r\ncf-cache-status: HIT\r\ncf-ray: a2a01e8058fe5ebd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":808122,"size_decoded":211501,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32729)","md5":"7c8b296bfb8701939c19156628c39995","sha1":"ccf5e5cd881fbad48d4f8d0f92dda38e30f8ed61","sha256":"0ae65e5243eec78c1a861a98184c6a68e96a393fac53924d2a4034e658d9ec1f","sha512":"d28792b1b768f4b0dfa6c009d95200b54b31e7710579209a0fea431b7af4c1dd3045c14485aeefd0f6dded541641772e2f0925b642cd8aff0758fc4ab97d8a50","ssdeep":"6144:yfWd1EsJf8KXvvR7yAuP0outXHauphBXi+ZcWW3Yj3kQ8wXFS3qS5BGM5vtCV2Zo:o+SK8lcnxF+B75I+o","tlshash":"69053a98f6e0702943e7117651bf2505b376381da4184028b66dd8eabff894d623bfbc","first_seen":"2026-08-07T19:29:10.287216Z","last_seen":"2026-08-12T14:21:01.374788Z","times_seen":18,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}