{"report_id":"5620fd3c-3fb5-4780-80fc-d2242a6ccc11","version":0,"status":"done","tags":[],"date":"2026-06-28T13:02:37Z","url":{"schema":"https","addr":"reg-plasmafi.live/","fqdn":"reg-plasmafi.live","domain":"reg-plasmafi.live","tld":"live"},"ip":{"addr":"172.67.138.247","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"reg-plasmafi.live/php321/","fqdn":"reg-plasmafi.live","domain":"reg-plasmafi.live","tld":"live"},"title":"Ventuals is sunsetting","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"reg-plasmafi.live/","fqdn":"reg-plasmafi.live","domain":"reg-plasmafi.live","tld":"live"},"ip":{"addr":"172.67.138.247","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-02T13:02:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"reg-plasmafi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"reg-plasmafi.live","ip":{"addr":"104.21.48.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-06-28T12:04:00.530787Z","last_seen":"2026-06-28T12:04:00.530788Z","alert_count":23,"request_count":23,"received_data":1164617,"sent_data":23651,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":11393,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2026-06-21T23:33:31.856708Z","alert_count":0,"request_count":4,"received_data":710170,"sent_data":2883,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"brunhild.challenges.cloudflare.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":0,"first_seen":"2026-06-24T10:51:41.235285Z","last_seen":"2026-06-24T10:51:41.235285Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":631,"comment":"","tags":null,"fingerprints":null},{"fqdn":"103.101.85.74.sslip.io","ip":{"addr":"103.101.85.74","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"domain_registered":"2015-08-15","domain_rank":0,"first_seen":"2026-06-28T11:40:49.714593Z","last_seen":"2026-06-28T11:40:49.714593Z","alert_count":0,"request_count":2,"received_data":3667033,"sent_data":987,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"reg-plasmafi.live/php321/","fqdn":"reg-plasmafi.live","domain":"reg-plasmafi.live","tld":"live"},"ip":{"addr":"104.21.48.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-06-30T16:11:06.689832Z","times_seen":87077,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reg-plasmafi.live/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a12ce2219dd84e4c","fqdn":"reg-plasmafi.live","domain":"reg-plasmafi.live","tld":"live"},"ip":{"addr":"104.21.48.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"643a7ed367694ad336c112f4f3753184","sha1":"d6221d8b53f65bcd40a008f10610d00ff027752c","sha256":"4a54d3a2a665d62acc866f5c3c0254eee8f11bc34ceb2e345484b2177a9dd346","sha512":"44ced7d3b3f77a686ab078b561a4ec0f2dd24905038239b0bc303b850def086518290f67b17bc32b9337908b8e393fd2e7e7776b2ad5c6599eabbd6ce84bd712","ssdeep":"6144:Xv2cYu2v/Jau9BYxzTnekm0LGo2LpMbh/OxfVq0tPt9/Z9GgLEupbVUORu93Y8Cx:uS4","tlshash":"6024f9cf74c27417022324f5846fb08fa26e4d80031c6d2d996186e17a7df7daa7fa69","size":211552,"data":"","first_seen":"2026-06-28T13:02:48.857166Z","last_seen":"2026-06-28T13:02:48.857166Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reg-plasmafi.live/php321/","fqdn":"reg-plasmafi.live","domain":"reg-plasmafi.live","tld":"live"},"ip":{"addr":"104.21.48.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1e21743cd2ee2004cd56bfc5c29e3609","sha1":"bf516634ffbcfd3186b71dafc0ecdcc47894c439","sha256":"0e428980439e794b176e0ee3cd84e4878510b1d52c1efc1c00f4af9729a17029","sha512":"4264e5ce5b4f3acb24046582388132a5915398c9266c18c6349d75fb94bd74bac990dc6ebd12e1e118a3a24752a3e4badae2faabd69b9827d1f223a0750da4c2","ssdeep":"48:atoyTqSsM+c69M+c69M+c69M+c60778KK7NaaM//M+A:atlDNDNDNDl778KKw//M+A","tlshash":"25913f32165427da63ce8fd45a85751d01d2c89a383e60bdff3279eded3a683c031612","size":4506,"data":"","first_seen":"2025-08-01T04:16:24.215618Z","last_seen":"2026-06-29T00:44:02.588634Z","times_seen":3179,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/4kvhz/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"62ea12fd2849fc6275ab32dea6223068","sha1":"f5e8b98b65f78759901167c80b7024dadbe612c2","sha256":"855b5dcd3d8c752684421d3497c6fcda938966326d570c7533ad88296cf56e5d","sha512":"d9e8f37ace9904b2820825bbe2e45ed05f0ec6717fbd904336cf061f4c5d9373d4d4f6eb74ccc2c13ed1d491c6098a714f3bd38c1aefea7abdac11846004f17c","ssdeep":"6144:BLhLke6zenG2bCKIE4nfCjWXHZ85HQxdyY40rWr9Fx5MMqDKco4Oc/xtLdgnDCjq:/E96+q","tlshash":"3c340bca78d2b416132778b6045fb1eeb29a0c8441191d1d912085f13abdf3deb7faad","size":231411,"data":"","first_seen":"2026-06-28T13:02:48.860595Z","last_seen":"2026-06-28T13:02:48.860595Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/4kvhz/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-30T16:30:53.178161Z","times_seen":758976,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/4kvhz/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1e50fcfc8c752175ff807841572530cf","sha1":"03ad81477e761297b3303f079f659d0269fcd829","sha256":"31f8094427d685dd7b752b1d660ec2612ce236cf5402d8351c685ae1654acce6","sha512":"d3af1b45d5b712563fb0b88ed05ee831eabdbfcf04056f2fd8ed9cb37f4cb2241a83e8523977ae0a06b91fa1572bce52ae3050f47c46889e3e4259aa5cd8ccbf","ssdeep":"","tlshash":"8ac08c887a80e014c28125351c6b428ae638de6008581003a0425249b6a071003aaf0f","size":137,"data":"","first_seen":"2026-06-24T10:51:52.241503Z","last_seen":"2026-06-30T15:15:09.065929Z","times_seen":6599,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reg-plasmafi.live/","fqdn":"reg-plasmafi.live","domain":"reg-plasmafi.live","tld":"live"},"ip":{"addr":"104.21.48.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8f76df5a3dddbe8eaeaaeef252991433","sha1":"f270a4a0c356192381bd1beba00fde4eba618159","sha256":"91216978a8f9383227c1f594458f4fa3f79f7dcc19a70c9f84c8199b035bf96e","sha512":"cda81268f4e6c6ea06b86fd68ae137950f60fde13f09d86f02ba17a3ffe2462fa8afce4962936eadf0a67c9165f3b27b442481044083dd383fafcc56cde22b21","ssdeep":"3:N/BKL1Xw:eL1A","tlshash":"605504c074c030710414c504d7d01415d05f05111f1d0c05705f1ddc17310000475550","size":1337359,"data":"","first_seen":"2026-06-28T13:02:48.86266Z","last_seen":"2026-06-28T13:02:48.86266Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reg-plasmafi.live/php321/","fqdn":"reg-plasmafi.live","domain":"reg-plasmafi.live","tld":"live"},"ip":{"addr":"104.21.48.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f278e1582a6b32d6a9a05328bba73b0f","sha1":"02780b645a044990e49787663d3dba06626b1e3d","sha256":"07317dc90130ec69ed8e07a8362168074f9067473354101f361449cff37110aa","sha512":"08463b63ba1654bf203117d8f0c0a2ce4b5d92914ffba7c8ac3d942ff1a812c86cc61d9e840e5f3422c2b22d1b71b1a06b9a6d40d4e4259b32fd8cd40cc8357f","ssdeep":"","tlshash":"55319948a43216904242e8f1c676abeeabe774080574446d349cbec7eff8447e521678","size":1529,"data":"","first_seen":"2025-08-01T04:16:24.221852Z","last_seen":"2026-06-29T04:43:28.904055Z","times_seen":3222,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reg-plasmafi.live/php321/jquery-3.6.0.min.js","fqdn":"reg-plasmafi.live","domain":"reg-plasmafi.live","tld":"live"},"ip":{"addr":"104.21.48.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-30T16:31:03.951838Z","times_seen":485955,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reg-plasmafi.live/php321/","fqdn":"reg-plasmafi.live","domain":"reg-plasmafi.live","tld":"live"},"ip":{"addr":"104.21.48.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a97d6ef5abced657bf5d46b969b239da","sha1":"212f1fc55f39b82d41e88c7628aec3b33d263afc","sha256":"fd3d3ea23ebc1d6ff9299cbe2cc651dfcd714b9be828c8ca2a81540e2f85eaf9","sha512":"6f35480a04c1360f72ae3d1dec34f1357b49fb10a7c7e6de8124e33a87b075127206686daa9145d40be27c4dd761f078d085a1f2538567c714ede67f66122c7c","ssdeep":"192:7mmQewTVPeY8DpuTM3kpVg9LuKXgnudSWXLPKPIlH4SjmnUYsCc0V02Y2pE2XuCh:7mmQewTYY8Fb3kjgTtLPKPIJgcx0V02l","tlshash":"8732c5b06a242ad911d604e20ace4f5d74f591611179dc249b3ef28a2fec3cab7d37a1","size":11308,"data":"","first_seen":"2025-08-01T04:17:54.885074Z","last_seen":"2026-06-29T00:44:02.594094Z","times_seen":1389,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reg-plasmafi.live/php321/","fqdn":"reg-plasmafi.live","domain":"reg-plasmafi.live","tld":"live"},"ip":{"addr":"104.21.48.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3433c9d3e9b7e8e5b34ed72e309db572","sha1":"d53d7df082088749c1df6b08330ee9b9e4076932","sha256":"1d96fa9904e3743570bccd5be90e83fd91975299f374093cc6f723673d582dd1","sha512":"ffd0e047331871f21738643968b7eb7fa045ee0e45346a9ea986c4b8a3e745dd310542c6b2734f6d244408bba6548ec66f5cd7662c69485b5e59e3b9432cdff2","ssdeep":"","tlshash":"06f04245bd825a24d35670ddc41f978cc53690dd91491c4cbb64ece1de94c2cdfc6534","size":585,"data":"","first_seen":"2025-08-01T04:16:24.219641Z","last_seen":"2026-06-29T04:49:39.690433Z","times_seen":3257,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/4kvhz/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2d40c20661e1dc500a859df59046bf38","sha1":"ba7e48565932cf10893a69a8b498b2d6bf670f32","sha256":"1f5b31c318d43d66c3567611f77ff1d6a8745085c8a382562e6b48962d33c84e","sha512":"72c3675118a3eee433d1f2a0bda7487ba6d0be626a12c9fe25ad2942731cb54c425ac14b2d7a7da1542a894e5825924dc5ce6ee136a3318c45b036c6f63d9157","ssdeep":"3:N/BKL1X6U:eL1P","tlshash":"655504c0744030710410c504d7501415d0450501157d0405705f3cdd17310000475d50","size":1337359,"data":"","first_seen":"2026-06-28T13:02:48.865112Z","last_seen":"2026-06-28T13:02:48.865112Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reg-plasmafi.live/php321/","fqdn":"reg-plasmafi.live","domain":"reg-plasmafi.live","tld":"live"},"ip":{"addr":"104.21.48.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"177534fa2b202d2b08e57851c740d11e","sha1":"4d5cf7eb380d4d1e36db20be54d334aeffbbfa1b","sha256":"a7db507f4f1c2c87919577289757c62917d4ec14483757c8a3ab455a4ddd154c","sha512":"0071ba2ea4b0c8d438a3e82e0085c7ca9dc74b30fdab1c0b032d391eddc0e009fcf5c5b2b12dfd585c1a35cbbcb0fde329342081aa31fc5ff26b88fc9d303f91","ssdeep":"768:6+EtVhTFyY6sUmqYUb4izJcu2BLjFcHplVcDNkpoc+Edfgc8J:6nvhToY6QZ6ocI","tlshash":"022383e0260be4e45e5611eee037f801e1681a6bce6df183e52cddc2342df66858b53b","size":48183,"data":"","first_seen":"2026-06-28T12:56:22.782892Z","last_seen":"2026-06-28T13:47:37.28076Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"103.101.85.74.sslip.io/php321/30yid7.php?v=2","fqdn":"103.101.85.74.sslip.io","domain":"sslip.io","tld":"io"},"ip":{"addr":"103.101.85.74","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"introduction_type":"scriptElement","is_inline":false,"md5":"1fa3b181483f537fbf92c1e75d929fca","sha1":"ccb86c5a2b7203899c5ff96e24dd267c9e4c86fc","sha256":"9f7d332848b3e4e5e986e65513f24c49a3eab817dce93bc6550ed15116e31efa","sha512":"bd92c28780832b38ec2b7618767711b4d28e4a3a602f137ec07843bdac7b2a724df910992656d5ec6c0b8a880421d4807ff2cfe9cc9f8377efc3eb1ff4f7a66c","ssdeep":"3072:xXlCroHGp/UrcP/ZE1LjQ/102U6XwuI3uqMNgefXsoLcD16wvQ8YDBgqD:xXlCroHgUroZ4jQ9UF3N160SL","tlshash":"ba7485c9eb53809c8d99119e8177f849e4554d67ce2c78a3ee0ecdc2252ab7b808717f","size":365229,"data":"","first_seen":"2026-06-28T12:56:22.765803Z","last_seen":"2026-06-28T13:47:37.251556Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reg-plasmafi.live/64dbe4a0-6897-4d4e-bd72-b09cb2c16a74","fqdn":"reg-plasmafi.live","domain":"reg-plasmafi.live","tld":"live"},"ip":{"addr":"104.21.48.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"559b25e286518dd5095285175eaaf1f3","sha1":"73796b05b604f1f9b9e82ba5efe05b1ff0624805","sha256":"e2dec43e5f28a3c6ed7646c44bce131b1a582210b6d7d029b883a283e4b166f4","sha512":"89ef12ceea529b9a9f05dfba8ce32eda13432f1e4942a917c9e83752f94e65d75d2bf37732152214eed075911cdd5c57741fbb6654d931dbd72145aac6b68232","ssdeep":"","tlshash":"86e0cd093d71e64982b311337c7f3926c1656664650992485335cef9db6069f2514f54","size":292,"data":"","first_seen":"2026-06-24T10:51:52.198846Z","last_seen":"2026-06-30T15:15:09.076549Z","times_seen":6358,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reg-plasmafi.live/php321/","fqdn":"reg-plasmafi.live","domain":"reg-plasmafi.live","tld":"live"},"ip":{"addr":"104.21.48.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ab11595a2cd2d67c0b6b5654e2eeac4d","sha1":"fcd806e8b5e6e465ebba0e3769bbea1dc640e07e","sha256":"ae86c370a11ecf08cab653fe5f994b688a311e802bfe373b6995168c0b9b688e","sha512":"8fc77f6bc2d97598d932660e4f3b03d5cfff200f802a9fd1b5a673f616f94d053c9388527bad6fa55bbaa01d564232fe55d8a473ee1f344665c543a016112b78","ssdeep":"49152:XGkwdNZngkQCE9lxwW2QUSvhjG+EyY4bfO3xrQanJfCpszVtWX:P","tlshash":"d9e523932d56a4b58f48435470d71e0f29d80d13586da1dee7d9f8c238aefa0c1eb92e","size":3297537,"data":"","first_seen":"2026-06-28T11:40:58.598348Z","last_seen":"2026-06-28T13:02:48.86824Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reg-plasmafi.live/php321/index_6.html","fqdn":"reg-plasmafi.live","domain":"reg-plasmafi.live","tld":"live"},"ip":{"addr":"104.21.48.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"76244d8526da359429886b03a7ada498","sha1":"90415cd87cc2f928fc8e16b7740dfb09f7e5bc10","sha256":"3f699786f5f750c5ee9696bce7941003b51f5e5628b55aa6ca59917195d8b490","sha512":"3ba24210155df81c4378587bf70fa4a66f8eb44e60d01deca3b32a8ccdd092d350a1fd870334d90469b750c2fc86822743811cba384e7baa95635291061c3adb","ssdeep":"","tlshash":"dcc0125970206966048e787d4ccf088ebe268412a20849c999dcd8547fb1e6c42e484c","size":184,"data":"","first_seen":"2023-09-20T06:28:52Z","last_seen":"2026-06-29T00:34:58.504001Z","times_seen":1863,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reg-plasmafi.live/","fqdn":"reg-plasmafi.live","domain":"reg-plasmafi.live","tld":"live"},"ip":{"addr":"104.21.48.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-30T16:30:53.178161Z","times_seen":758976,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reg-plasmafi.live/php321/","fqdn":"reg-plasmafi.live","domain":"reg-plasmafi.live","tld":"live"},"ip":{"addr":"104.21.48.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2380d391cf784bce2f77e0e16fa2268b","sha1":"2b88cb08e3d7f56772d46fe1a10d84774e8728d5","sha256":"e65fcff70fe965f3d1878fe515a7ebcd265dfe61b15461521450c882e8d081d7","sha512":"0f3264af3a045928be20d2ee1ef3af905571d07e3fc25eaeda22199baca89b8c9bff94d90d81124ff45b16c5e40df291c2f49d9464ba901d2d961f6fd1196f1f","ssdeep":"","tlshash":"e6411b1e00aa0aa31ba3054333ce846d0956c2cedcc73534d3b27f8134c67832a93bea","size":2254,"data":"","first_seen":"2025-08-01T04:17:54.882582Z","last_seen":"2026-06-29T00:44:02.589124Z","times_seen":3057,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reg-plasmafi.live/a1053a89-bb45-4279-b3dc-4244a2699e27","fqdn":"reg-plasmafi.live","domain":"reg-plasmafi.live","tld":"live"},"ip":{"addr":"104.21.48.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9acde48d4781a3246dca67e94f9e3737","sha1":"f55152e97be5f226dcc4468437e2e56f35b91d84","sha256":"5ac9c4837baba465aab2e3b7e316d1d9f05cc501006091546dd8b3e9f0ac7c38","sha512":"2d8ad7b8b7bbe4655d07e32d2c9c286e8191c0d2d18e389fa24ec4df448f772592f54a11412dd0ffb30ea091d902e11cb52ca971a8113ae8f6a9739dc8e26f02","ssdeep":"6144:5AEmWJqS7VA94RjAxu4cwm4lPSw/JRg4u5YDAPtEv+2wMdZ:vL7VSf/J67htEZB7","tlshash":"f2f42b2f690b2434dda502a760550863d4c77d429fe8e84cf75c8dcad3a9ea1d3dea38","size":769113,"data":"","first_seen":"2026-06-28T11:40:58.572815Z","last_seen":"2026-06-28T13:02:48.884225Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reg-plasmafi.live/","fqdn":"reg-plasmafi.live","domain":"reg-plasmafi.live","tld":"live"},"ip":{"addr":"104.21.48.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"7735b68ff05c8cdb0e58a36337813abf","sha1":"f3ea40893c8619ba67f6de3c9df444eaed9d4355","sha256":"8d3ce9d0753a8384a260faa6a713e468b65c028a96dd14c734cfeaadae1f54e0","sha512":"1e5f6d07beed0a89926855f789ed75078aa899a43220f24f1ee82e6462298ae9f50fc25932b326fef3cc3d58c80bed0a5af73044765568e366ac558b6801e2fd","ssdeep":"3:N/BKL1XmW:eL1x","tlshash":"df5504c0744030710430c704d750141550150505151f0405705f1cfc17310441475d40","size":1337359,"data":"","first_seen":"2026-06-28T13:02:48.884887Z","last_seen":"2026-06-28T13:02:48.884887Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/ce815518-045d-415c-b3e7-7f79fc706bea","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"","is_inline":false,"md5":"559b25e286518dd5095285175eaaf1f3","sha1":"73796b05b604f1f9b9e82ba5efe05b1ff0624805","sha256":"e2dec43e5f28a3c6ed7646c44bce131b1a582210b6d7d029b883a283e4b166f4","sha512":"89ef12ceea529b9a9f05dfba8ce32eda13432f1e4942a917c9e83752f94e65d75d2bf37732152214eed075911cdd5c57741fbb6654d931dbd72145aac6b68232","ssdeep":"","tlshash":"86e0cd093d71e64982b311337c7f3926c1656664650992485335cef9db6069f2514f54","size":292,"data":"","first_seen":"2026-06-24T10:51:52.198846Z","last_seen":"2026-06-30T15:15:09.076549Z","times_seen":6358,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reg-plasmafi.live/php321/","fqdn":"reg-plasmafi.live","domain":"reg-plasmafi.live","tld":"live"},"ip":{"addr":"104.21.48.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"59a13eef9e5e0ec7844e58e8b47d54a0","sha1":"0fb2b2059a878b87f8524284d448dd46a4351953","sha256":"c890c150b008d069bfddb86ee2c2e3fe979515939053b4c53fd6853b68e4fe35","sha512":"7fcdb614d30b1141e9a1e134a98e2888007f786f866c24e6383106d3e003f094e72901aa295e7d3450fccf5a249b25b436401a5b9439205da6b0eec8d72cfc80","ssdeep":"","tlshash":"33f0beaf336126ca23ae6ad20796c01d1e72e4ab3002163c575a36ca0cb6f52521b07e","size":494,"data":"","first_seen":"2025-08-01T04:17:54.874483Z","last_seen":"2026-06-29T00:44:02.595997Z","times_seen":3021,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reg-plasmafi.live/?__cf_chl_rt_tk=jRiuU0.j1gCVgAJ3u2czd5Kn.df1iYmJEcevEa1HecQ-1782651719-1.0.1.1-fx7t6Pi8yFVahF7_TFQLNWxcqLVqscqmuZ.iuCH_oOA","fqdn":"reg-plasmafi.live","domain":"reg-plasmafi.live","tld":"live"},"ip":{"addr":"104.21.48.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-06-30T16:30:53.178161Z","times_seen":758976,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reg-plasmafi.live/php321/","fqdn":"reg-plasmafi.live","domain":"reg-plasmafi.live","tld":"live"},"ip":{"addr":"104.21.48.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0e1ee9f442371606d9a13b41a0dbeaff","sha1":"a05c25c8ad9127fe7d45319ce13e8b4a485d2e01","sha256":"713285cbc0cb910dfd2e7a86c604d191a27789ae50964ab1c674507ff4a20c45","sha512":"1dbac9fa1e0b338e780a3600f1a3da140a6c83a961a1d0c6c80fe3dc5a9041c346c471d264a07ccc87457cdccc2a28b768d02283512ba9cee0fc2e2b7124e42d","ssdeep":"","tlshash":"0221fedeb2826488526794d742cd8dceb8e617a919008c20452ef299225c3e8fb6ad54","size":1177,"data":"","first_seen":"2025-08-01T04:16:24.218288Z","last_seen":"2026-06-29T00:44:02.596533Z","times_seen":3121,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/25e6c66701a0/api.js?onload=ePmH8\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d26819e314c7334b3a5dd5a004898650","sha1":"559b39e547d32af023ed6ab08c369e93db0c7f80","sha256":"9715b51191ac5c467c5b8d983bf9f77c688c61987ab80f94fe3b4c452429cbf4","sha512":"9f4ea7965bdfe1afd68bd1dbdf79cdaa039492ef8e1d29a4966ec6ae8d9b8cc6af8f8920964deab2926662041ee1ac0feb7d70df7df9e6f0e55c5d130adc818c","ssdeep":"1536:4oYt3AYYdolrsHspjxegN8t5LMhfS8OpyJr:b8+onxeg6Dgc6F","tlshash":"3a632cc472aa7877129ac0f0a03b6753b3267d36a84cc850d427dc65277de869173fba","size":67081,"data":"","first_seen":"2026-06-24T10:51:52.15506Z","last_seen":"2026-06-30T15:19:47.495467Z","times_seen":10376,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reg-plasmafi.live/","fqdn":"reg-plasmafi.live","domain":"reg-plasmafi.live","tld":"live"},"ip":{"addr":"104.21.48.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"da9c4e406f027db9d66644659879c281","sha1":"86a3718ac37cd81542535a9d5c9f22252361217c","sha256":"c1eb624852909a864beecfdb518038bff2da8082bc093b79cd2c8749f56a1b63","sha512":"dc093e0865dd9fa16e742095760c82b2d23379b3944aa46cb8c8687301a750443d29dfeaf0aa39f40864b5ff5f6392262df9e8c56eca7fde792045e337851f63","ssdeep":"3:N/BKL1X1:eL1F","tlshash":"515504c0744030710410c545d7501455700f0541155f440d705f0cdc17310000475540","size":1337359,"data":"","first_seen":"2026-06-28T13:02:48.887106Z","last_seen":"2026-06-28T13:02:48.887106Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reg-plasmafi.live/","fqdn":"reg-plasmafi.live","domain":"reg-plasmafi.live","tld":"live"},"ip":{"addr":"104.21.48.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"882f40e222c7f2dea566f0e68e35a39a","sha1":"5a6aa73d1f9064649a6de77c1d031a39c95f6cc7","sha256":"48ba8c462a1fa0ef924f725e95b3da4c17adbe10f0b655a16267aac57adcaa78","sha512":"2d5af7f63fe8b3e99cc35feacacbe006fc5d959f1324b12907817765ce815fbc14c20b37b2a92ad467c1c976cc73889bbc0a10f9aadb7b38a15a2dd40d562cd0","ssdeep":"3:N/BKL1X3R:eL1HR","tlshash":"da5504c0744030730450c505d7501415d00505111d1d0405705f3ddc17310000475550","size":1337359,"data":"","first_seen":"2026-06-28T13:02:48.887957Z","last_seen":"2026-06-28T13:02:48.887957Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reg-plasmafi.live/29a576bc-2b03-4752-9332-0e07056ebc94","fqdn":"reg-plasmafi.live","domain":"reg-plasmafi.live","tld":"live"},"ip":{"addr":"104.21.48.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a71ee25064890e07bc863ccdacc72a5","sha1":"72961594a436bfa1118b529cf08305dc1ab150a8","sha256":"61371109edbbcff53d2af9a5b45b2ade64ff53246fc274bb40ae776f5c66c884","sha512":"3029cb11989224433d942189b3d25c24356c6e5ed775b1796e5ea9a19db6fb21f80480669cb7d0827ea8f3dc13bcae3d428347d775b747a29f022376eba748a4","ssdeep":"49152:kGkwdNZngkQCE9lRwW2QUSvhjG+EyY4bfO3xrQanJfCpszVtAR:U","tlshash":"bee523d36d46a4758f48475470e71e0f28d90c13686db1dee795f8c238aefa081eb92e","size":3300143,"data":"","first_seen":"2026-06-28T11:40:58.620744Z","last_seen":"2026-06-28T13:02:48.889183Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reg-plasmafi.live/","fqdn":"reg-plasmafi.live","domain":"reg-plasmafi.live","tld":"live"},"ip":{"addr":"104.21.48.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1e50fcfc8c752175ff807841572530cf","sha1":"03ad81477e761297b3303f079f659d0269fcd829","sha256":"31f8094427d685dd7b752b1d660ec2612ce236cf5402d8351c685ae1654acce6","sha512":"d3af1b45d5b712563fb0b88ed05ee831eabdbfcf04056f2fd8ed9cb37f4cb2241a83e8523977ae0a06b91fa1572bce52ae3050f47c46889e3e4259aa5cd8ccbf","ssdeep":"","tlshash":"8ac08c887a80e014c28125351c6b428ae638de6008581003a0425249b6a071003aaf0f","size":137,"data":"","first_seen":"2026-06-24T10:51:52.241503Z","last_seen":"2026-06-30T15:15:09.065929Z","times_seen":6599,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"The next request for the Private Access Token challenge may return a 401 and show a warning in console.","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/4kvhz/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":245695},{"level":"debug","text":"","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/4kvhz/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":245695},{"level":"log","text":"map[actor:server1.conn0.watcher17.process8//obj174 class:RegExp displayString:/.*.*=.*/ extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/4kvhz/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":245695},{"level":"log","text":"map[actor:server1.conn0.watcher17.process8//obj177 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[toString:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process8//obj178 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object] writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/4kvhz/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":245695},{"level":"log","text":"map[actor:server1.conn0.watcher17.process8//obj181 class:HTMLAnchorElement contentDomReference:map[browsingContextId:1.5032385538e+10 id:0.5382743877446522] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:a nodeType:1] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/4kvhz/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":245695},{"level":"debug","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/4kvhz/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":66666},{"level":"error","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/4kvhz/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":66666},{"level":"info","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/4kvhz/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":66666},{"level":"log","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/4kvhz/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":66666},{"level":"warn","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/4kvhz/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":66666},{"level":"log","text":"map[actor:server1.conn0.watcher17.process8//obj176 class:RegExp displayString:/.*.*=.*/ extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/4kvhz/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":245695},{"level":"log","text":"map[actor:server1.conn0.watcher17.process8//obj179 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[toString:map[configurable:true enumerable:true value:map[actor:server1.conn0.watcher17.process8//obj180 class:BoundFunctionObject extensible:true frozen:false isError:false ownPropertyLength:2 sealed:false type:object] writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/4kvhz/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":245695},{"level":"log","text":"map[actor:server1.conn0.watcher17.process8//obj182 class:HTMLAnchorElement contentDomReference:map[browsingContextId:1.5032385538e+10 id:0.5382743877446522] extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[attributes:map[] attributesLength:0 isConnected:false kind:DOMNode nodeName:a nodeType:1] sealed:false type:object]","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/4kvhz/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":245695},{"level":"debug","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/4kvhz/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":66666},{"level":"error","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/4kvhz/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":66666},{"level":"info","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/4kvhz/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":66666},{"level":"log","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/4kvhz/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":66666},{"level":"warn","text":"0","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/4kvhz/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":66666},{"level":"debug","text":"","filename":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/4kvhz/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","line_number":1,"column_number":245695}]},"http":[{"url":{"schema":"https","addr":"reg-plasmafi.live/php321/index_3.html#frame=checkbox-invisible","fqdn":"reg-plasmafi.live","domain":"reg-plasmafi.live","tld":"live"},"ip":{"addr":"104.21.48.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://reg-plasmafi.live/php321/","date":"2026-06-28T13:02:09.411Z","timestamp":1782651729411,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reg-plasmafi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:53:42 GMT","end":"Mon, 21 Sep 2026 14:51:00 GMT"},"fingerprint":{"sha1":"4B:55:03:11:39:5B:F8:C4:89:D3:59:67:8B:4A:C0:0F:3E:10:B4:7B","sha256":"E6:C3:75:49:14:30:5A:21:FC:A5:80:BB:D8:E9:00:C0:79:CB:DC:96:0A:E0:81:4F:B9:E5:E3:7A:B6:58:24:47"}}},"request":{"raw":"GET /php321/index_3.html HTTP/1.1\r\nHost: reg-plasmafi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://reg-plasmafi.live/php321/\r\nCookie: cf_clearance=_oAXW_DGJEi.kjJ.jQTfUiTLeXqovsR92mpISx7Ep0Y-1782651727-1.2.1.1-.wTkErF4iXSKNwOBe9c.Bwn4dnV5aUK6lYaSNGP6DYXqRIGOR4gVOn4oLWXhM..bFnTrXPHdpQ0pG33XfyZ3yHtItdInV5k9BlMa2dCqc7qqrqUQdHzyUnRJWBgyDyRr.W5nYlvRftX7Mtg15HcmfSAjMb3wiJ4ZObpnpVo4bvwrZDEzOaM15ahFnRovJlue3wvRG3w9qwg8lqRw3f6i04LeBHDrRGRtiHAjKZKo1GvjI1K0vi9uMjPi87jJeB5IDapIFHOIN8g.SNCQXbwhA_8KNsIWCI3MrBB9.L8FhvhW1Ui8tli6QCkwf5KSUBRnEd1m4HNCTRM.GHVTjKq7ymDZI1dXx8Yt8ffNceJTOq10k..7gTmiakVQJ4JkUch3_YkOyuz8gZ5B.qECwtESiombw5YDn14.0m8Wuo7qURZl15bOt5.6D0DiuqJicrIoaNG5xad2QvASYoC35qEToMvPBiUGJ4c19Be2Jgbi.FL12FbVo0R.YDqdldLBDeTo\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:02:09 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 26 Jun 2026 17:58:45 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f59kD2pig%2F0oY5MaVPh6jWgLOwrL7ebrWmeAq76dNQknU4OJ0ibR6DGzYlFAlmIAAfxvo9%2Fnczjaw4s3I2ZcwYAR2oHh50wsZ6qAEmtQm2SShqc5UMlJ0vLjBXigpzWJlrrGCA%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a12ce25cde5f4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1643,"size_decoded":1367,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1235)","md5":"a399f5b2e840515695ea858ea2889c0c","sha1":"ee0757febbab16679ab885d4b639a17f245c9cc5","sha256":"60d1e15d12311fb77e6406902c9f4c5db0f95c567189350d6a96881a5f8fc37d","sha512":"f8ca0b613615004617196c540feb96c16928d2a4bc200e428ff8beddd4a2ed0384e77ad627f9a0c31ce985c434ca6042d3d7b3149a10ecfb6b09087294d99e60","ssdeep":"","tlshash":"ff31e49a0d43119ad8978ade9ce47bb4540eeb979a030ec77161d1858b437ddf0f1b0b","first_seen":"2026-06-28T11:40:58.539539Z","last_seen":"2026-06-28T14:40:33.810202Z","times_seen":20,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"reg-plasmafi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"reg-plasmafi.live/","fqdn":"reg-plasmafi.live","domain":"reg-plasmafi.live","tld":"live"},"ip":{"addr":"104.21.48.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-28T13:01:59.820Z","timestamp":1782651719820,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reg-plasmafi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:53:42 GMT","end":"Mon, 21 Sep 2026 14:51:00 GMT"},"fingerprint":{"sha1":"4B:55:03:11:39:5B:F8:C4:89:D3:59:67:8B:4A:C0:0F:3E:10:B4:7B","sha256":"E6:C3:75:49:14:30:5A:21:FC:A5:80:BB:D8:E9:00:C0:79:CB:DC:96:0A:E0:81:4F:B9:E5:E3:7A:B6:58:24:47"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: reg-plasmafi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-egQcjCaeiuYN5rmjpDSCPs' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'\r\nserver: cloudflare\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\nreferrer-policy: same-origin\r\nserver-timing: chlray;desc=\"a12ce2219dd84e4c\", cfExtPri\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z7JazAcrM91my7MQCPzs9rjU28msU7h%2BS4kRWeY4LZeu0Ff4ziwQu%2FKspvgFWAmz3SHT51blDI4re1t%2BFb4GpRPecbwA8WcEqKVGEbowC7nRGPax0j6hjDQfzCNRr%2BFHnovS5Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 28 Jun 2026 13:01:59 GMT\r\npriority: u=0,i\r\ncontent-encoding: zstd\r\ncf-ray: a12ce2219dd84e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5578,"size_decoded":5545,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5578), with no line terminators","md5":"6fcca5bc5568147d6b34a81ea3f2b6c6","sha1":"ec6f7868e18941f1a6a7a4a8275a9f9d4ec59fab","sha256":"99d8819179cf125a929b5f2949adb60885b8dae81e99bb0db9e04b3d3db8b07b","sha512":"3f31858ce49108a0daa2929686d3ec87e35951c708643c7b282b65d700d42f43773aa887b787d6eb69499306cedd2d0fb7d5713b07dd96dbf050ce5b12f45404","ssdeep":"96:PNyTtoXZzIEb0EaW87xXQNZSTdTH32csnJT5PbQNBK72a3rkEYzueh8dTpmw:PNutkCBxQ7GwrjYikNyQw","tlshash":"f3b14bb39932e0178bba4bd554bbb3789211f54faf04d1e4d2d4cd2c45dae1f4029184","first_seen":"2026-06-28T13:02:48.82979Z","last_seen":"2026-06-28T13:02:48.82979Z","times_seen":1,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":70,"connect":14,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"reg-plasmafi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/25e6c66701a0/api.js?onload=ePmH8\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://reg-plasmafi.live/","date":"2026-06-28T13:02:00.600Z","timestamp":1782651720600,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /turnstile/v0/b/25e6c66701a0/api.js?onload=ePmH8\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://reg-plasmafi.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 13:02:00 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nlast-modified: Mon, 22 Jun 2026 14:37:30 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: https://reg-plasmafi.live\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a12ce225db1f23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67081,"size_decoded":22174,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d26819e314c7334b3a5dd5a004898650","sha1":"559b39e547d32af023ed6ab08c369e93db0c7f80","sha256":"9715b51191ac5c467c5b8d983bf9f77c688c61987ab80f94fe3b4c452429cbf4","sha512":"9f4ea7965bdfe1afd68bd1dbdf79cdaa039492ef8e1d29a4966ec6ae8d9b8cc6af8f8920964deab2926662041ee1ac0feb7d70df7df9e6f0e55c5d130adc818c","ssdeep":"1536:4oYt3AYYdolrsHspjxegN8t5LMhfS8OpyJr:b8+onxeg6Dgc6F","tlshash":"3a632cc472aa7877129ac0f0a03b6753b3267d36a84cc850d427dc65277de869173fba","first_seen":"2026-06-24T10:51:52.15506Z","last_seen":"2026-06-30T15:19:47.495467Z","times_seen":10376,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":3,"connect":11,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brunhild.challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/peek/a12ce2265b31b4f4/7gaSpvM3RAnFD0H9mKuRO1R390On62lc5nDw3xC_hF4-1782651720-1.2.1.1-79NoLlZLAfTAuY.PcFCp1sS684n6fnPd1V41_dhWL3UxeTKoZ7OP_TrODGJ_dukC","fqdn":"brunhild.challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/4kvhz/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-28T13:02:01.549Z","timestamp":1782651721549,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/peek/a12ce2265b31b4f4/7gaSpvM3RAnFD0H9mKuRO1R390On62lc5nDw3xC_hF4-1782651720-1.2.1.1-79NoLlZLAfTAuY.PcFCp1sS684n6fnPd1V41_dhWL3UxeTKoZ7OP_TrODGJ_dukC HTTP/1.1\r\nHost: brunhild.challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://challenges.cloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-30T16:32:23.025768Z","times_seen":16864050,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reg-plasmafi.live/php321/92a85b6493699521.css","fqdn":"reg-plasmafi.live","domain":"reg-plasmafi.live","tld":"live"},"ip":{"addr":"104.21.48.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://reg-plasmafi.live/php321/","date":"2026-06-28T13:02:07.972Z","timestamp":1782651727972,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reg-plasmafi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:53:42 GMT","end":"Mon, 21 Sep 2026 14:51:00 GMT"},"fingerprint":{"sha1":"4B:55:03:11:39:5B:F8:C4:89:D3:59:67:8B:4A:C0:0F:3E:10:B4:7B","sha256":"E6:C3:75:49:14:30:5A:21:FC:A5:80:BB:D8:E9:00:C0:79:CB:DC:96:0A:E0:81:4F:B9:E5:E3:7A:B6:58:24:47"}}},"request":{"raw":"GET /php321/92a85b6493699521.css HTTP/1.1\r\nHost: reg-plasmafi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://reg-plasmafi.live/php321/\r\nCookie: cf_clearance=_oAXW_DGJEi.kjJ.jQTfUiTLeXqovsR92mpISx7Ep0Y-1782651727-1.2.1.1-.wTkErF4iXSKNwOBe9c.Bwn4dnV5aUK6lYaSNGP6DYXqRIGOR4gVOn4oLWXhM..bFnTrXPHdpQ0pG33XfyZ3yHtItdInV5k9BlMa2dCqc7qqrqUQdHzyUnRJWBgyDyRr.W5nYlvRftX7Mtg15HcmfSAjMb3wiJ4ZObpnpVo4bvwrZDEzOaM15ahFnRovJlue3wvRG3w9qwg8lqRw3f6i04LeBHDrRGRtiHAjKZKo1GvjI1K0vi9uMjPi87jJeB5IDapIFHOIN8g.SNCQXbwhA_8KNsIWCI3MrBB9.L8FhvhW1Ui8tli6QCkwf5KSUBRnEd1m4HNCTRM.GHVTjKq7ymDZI1dXx8Yt8ffNceJTOq10k..7gTmiakVQJ4JkUch3_YkOyuz8gZ5B.qECwtESiombw5YDn14.0m8Wuo7qURZl15bOt5.6D0DiuqJicrIoaNG5xad2QvASYoC35qEToMvPBiUGJ4c19Be2Jgbi.FL12FbVo0R.YDqdldLBDeTo\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:02:07 GMT\r\ncontent-type: text/css\r\netag: W/\"6a3ebdd5-18ff5\"\r\nlast-modified: Fri, 26 Jun 2026 17:58:45 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2ZVxWRN1Few7HMKQOEnKffCyRnKuZbM31xCfcXimhdQFJB38Chxw9P4J3dH4cLaV3hn69sfCx7fAJshiJkvM3q%2BHa835snh6InarRh8E1OAh6i6XfqIzVPXVcDr%2BUJiRwO%2Fsww%3D%3D\"}]}\r\nage: 4952\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a12ce253dd0a4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102389,"size_decoded":19007,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2c4952a7635291990fa4d443df055700","sha1":"945a2b359a378ecb36221e132f07155d540d0395","sha256":"9adbe32cd7a78a91139ee633efb279052c07ece396cf47940e721a1152b99146","sha512":"55df1d480cadfb6cb90cfe029397ec9a1e6445b33e0e3a4eaf91a00fe151b0357baf86ba0b90767c3690876fc853dd8369450028a83329acfc2ae3cb60f0367d","ssdeep":"3072:j+TIsqh5GMlcGWhVz1PHj48U/PmE+SBTai4:STIsqh5GMlcGWhVz1PHOuBSBTai4","tlshash":"8ea384a4f275d57bbc23b4bda3ecf81c611aa582de125be8ff52601112c7af31863614","first_seen":"2026-06-28T11:40:58.554295Z","last_seen":"2026-06-29T08:40:56.243825Z","times_seen":29,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"reg-plasmafi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"reg-plasmafi.live/php321/afd72e0175be5fd7.css","fqdn":"reg-plasmafi.live","domain":"reg-plasmafi.live","tld":"live"},"ip":{"addr":"104.21.48.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://reg-plasmafi.live/php321/","date":"2026-06-28T13:02:07.977Z","timestamp":1782651727977,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reg-plasmafi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:53:42 GMT","end":"Mon, 21 Sep 2026 14:51:00 GMT"},"fingerprint":{"sha1":"4B:55:03:11:39:5B:F8:C4:89:D3:59:67:8B:4A:C0:0F:3E:10:B4:7B","sha256":"E6:C3:75:49:14:30:5A:21:FC:A5:80:BB:D8:E9:00:C0:79:CB:DC:96:0A:E0:81:4F:B9:E5:E3:7A:B6:58:24:47"}}},"request":{"raw":"GET /php321/afd72e0175be5fd7.css HTTP/1.1\r\nHost: reg-plasmafi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://reg-plasmafi.live/php321/\r\nCookie: cf_clearance=_oAXW_DGJEi.kjJ.jQTfUiTLeXqovsR92mpISx7Ep0Y-1782651727-1.2.1.1-.wTkErF4iXSKNwOBe9c.Bwn4dnV5aUK6lYaSNGP6DYXqRIGOR4gVOn4oLWXhM..bFnTrXPHdpQ0pG33XfyZ3yHtItdInV5k9BlMa2dCqc7qqrqUQdHzyUnRJWBgyDyRr.W5nYlvRftX7Mtg15HcmfSAjMb3wiJ4ZObpnpVo4bvwrZDEzOaM15ahFnRovJlue3wvRG3w9qwg8lqRw3f6i04LeBHDrRGRtiHAjKZKo1GvjI1K0vi9uMjPi87jJeB5IDapIFHOIN8g.SNCQXbwhA_8KNsIWCI3MrBB9.L8FhvhW1Ui8tli6QCkwf5KSUBRnEd1m4HNCTRM.GHVTjKq7ymDZI1dXx8Yt8ffNceJTOq10k..7gTmiakVQJ4JkUch3_YkOyuz8gZ5B.qECwtESiombw5YDn14.0m8Wuo7qURZl15bOt5.6D0DiuqJicrIoaNG5xad2QvASYoC35qEToMvPBiUGJ4c19Be2Jgbi.FL12FbVo0R.YDqdldLBDeTo\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:02:07 GMT\r\ncontent-type: text/css\r\netag: W/\"6a3ebdd5-2988\"\r\nlast-modified: Fri, 26 Jun 2026 17:58:45 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7v34ixxmZWFdymNxKhTBEmd8oYf7Pc5RdgY6aZPpaM%2FqMrCsaroHqiQjS8dUhc6iRRYJJ1HhqZHn9n%2BfhA9ftrX70jIlE1JXrEMJUVrulLOPlH5K7Sznt54YkQkWXNEO1iFZNQ%3D%3D\"}]}\r\nage: 4952\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a12ce253dd0c4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10632,"size_decoded":1461,"mime_type":"text/css","magic":"ASCII text, with very long lines (10632), with no line terminators","md5":"ae78876e3e0cc8e2db7b2047ef64b22c","sha1":"67f605ffd0bd4fe3ae8484db97d200ca288fb034","sha256":"a25794a8f56e3591ce2751d8fccb2543fc21efd1639570e498a1c65029a34951","sha512":"27dd70b313f57011896380d5640dbecfbef634e95c9873f65a789817d4ebc3ed420f16946ce7da6666f1cb4713380981be9d877cfa0b60e3168b2223c9e63a16","ssdeep":"192:+L8xbYvx6YkxdYZxEYGx3YLxuYQxZYyUxipDJYSxTY8y:+L2s5D+ej9woVX6ayuipDKMk1","tlshash":"c62266344039905ec975fcd231cebf133d7c941945d88922aa2c966a8fdbc6b72e1f68","first_seen":"2026-06-28T11:40:58.547582Z","last_seen":"2026-06-28T14:40:33.816481Z","times_seen":26,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"reg-plasmafi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"reg-plasmafi.live/php321/index_5.html#frame=challenge\u0026id=1ytseeyraftf\u0026host=app.ventuals.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=nl\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=b9fc5a50-2e5c-457a-9582-80ce342c2534\u0026size=invisible\u0026theme=light\u0026origin=https%3A%2F%2Fapp.ventuals.com\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22nl-NL%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"reg-plasmafi.live","domain":"reg-plasmafi.live","tld":"live"},"ip":{"addr":"104.21.48.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://reg-plasmafi.live/php321/","date":"2026-06-28T13:02:09.428Z","timestamp":1782651729428,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reg-plasmafi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:53:42 GMT","end":"Mon, 21 Sep 2026 14:51:00 GMT"},"fingerprint":{"sha1":"4B:55:03:11:39:5B:F8:C4:89:D3:59:67:8B:4A:C0:0F:3E:10:B4:7B","sha256":"E6:C3:75:49:14:30:5A:21:FC:A5:80:BB:D8:E9:00:C0:79:CB:DC:96:0A:E0:81:4F:B9:E5:E3:7A:B6:58:24:47"}}},"request":{"raw":"GET /php321/index_5.html HTTP/1.1\r\nHost: reg-plasmafi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://reg-plasmafi.live/php321/\r\nCookie: cf_clearance=_oAXW_DGJEi.kjJ.jQTfUiTLeXqovsR92mpISx7Ep0Y-1782651727-1.2.1.1-.wTkErF4iXSKNwOBe9c.Bwn4dnV5aUK6lYaSNGP6DYXqRIGOR4gVOn4oLWXhM..bFnTrXPHdpQ0pG33XfyZ3yHtItdInV5k9BlMa2dCqc7qqrqUQdHzyUnRJWBgyDyRr.W5nYlvRftX7Mtg15HcmfSAjMb3wiJ4ZObpnpVo4bvwrZDEzOaM15ahFnRovJlue3wvRG3w9qwg8lqRw3f6i04LeBHDrRGRtiHAjKZKo1GvjI1K0vi9uMjPi87jJeB5IDapIFHOIN8g.SNCQXbwhA_8KNsIWCI3MrBB9.L8FhvhW1Ui8tli6QCkwf5KSUBRnEd1m4HNCTRM.GHVTjKq7ymDZI1dXx8Yt8ffNceJTOq10k..7gTmiakVQJ4JkUch3_YkOyuz8gZ5B.qECwtESiombw5YDn14.0m8Wuo7qURZl15bOt5.6D0DiuqJicrIoaNG5xad2QvASYoC35qEToMvPBiUGJ4c19Be2Jgbi.FL12FbVo0R.YDqdldLBDeTo\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:02:09 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 26 Jun 2026 17:58:45 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3pfuTP2qznqqu0RXvVMfCed%2B5hN2xdddE2So%2FNY%2FBBkp8Jb84wgQqF5DrwWVfbQqDsiv6Ke%2Bg6mE2%2BvDb6KBrm5og9pqx%2B7Vqb7DihpVC4at8Q%2BdIbq5QfBzOh5ezgaKbVRp2g%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a12ce25cfe634e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58819,"size_decoded":4408,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (57149)","md5":"c84e80dcfe74cdead2eaa3ac9f22e6dd","sha1":"11c93b82c37de2cf60309cfbd868efc75926f4ca","sha256":"e6abf44017163a42cc9c15e744151e3b4edaf874fecfd36165ed31fdac70a89b","sha512":"d4692f96fe736664677b365215a0582f1ed2776c632286755c6ec41a72dc7bb700a24810a53b0d4b6250d7fef57ddcbda9b62687dce1beca210864eade6940b1","ssdeep":"192:7fIIINkNHCB4a1NClXfvXfFqgVL36Xjb6XNb6XYb6Xrb6Xgb6XRb6XUb6Xrb6Xv0:3a1NiqgVvSyo","tlshash":"a243142156050427b177b7d8b4f18bcf276b8309f55342389ae92a92e1cfdb49c9b743","first_seen":"2026-06-28T11:40:58.544353Z","last_seen":"2026-06-28T14:40:33.848211Z","times_seen":18,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"reg-plasmafi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"reg-plasmafi.live/php321/","fqdn":"reg-plasmafi.live","domain":"reg-plasmafi.live","tld":"live"},"ip":{"addr":"104.21.48.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-28T13:02:07.641Z","timestamp":1782651727641,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reg-plasmafi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:53:42 GMT","end":"Mon, 21 Sep 2026 14:51:00 GMT"},"fingerprint":{"sha1":"4B:55:03:11:39:5B:F8:C4:89:D3:59:67:8B:4A:C0:0F:3E:10:B4:7B","sha256":"E6:C3:75:49:14:30:5A:21:FC:A5:80:BB:D8:E9:00:C0:79:CB:DC:96:0A:E0:81:4F:B9:E5:E3:7A:B6:58:24:47"}}},"request":{"raw":"GET /php321/ HTTP/1.1\r\nHost: reg-plasmafi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://reg-plasmafi.live/?__cf_chl_tk=jRiuU0.j1gCVgAJ3u2czd5Kn.df1iYmJEcevEa1HecQ-1782651719-1.0.1.1-fx7t6Pi8yFVahF7_TFQLNWxcqLVqscqmuZ.iuCH_oOA\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=_oAXW_DGJEi.kjJ.jQTfUiTLeXqovsR92mpISx7Ep0Y-1782651727-1.2.1.1-.wTkErF4iXSKNwOBe9c.Bwn4dnV5aUK6lYaSNGP6DYXqRIGOR4gVOn4oLWXhM..bFnTrXPHdpQ0pG33XfyZ3yHtItdInV5k9BlMa2dCqc7qqrqUQdHzyUnRJWBgyDyRr.W5nYlvRftX7Mtg15HcmfSAjMb3wiJ4ZObpnpVo4bvwrZDEzOaM15ahFnRovJlue3wvRG3w9qwg8lqRw3f6i04LeBHDrRGRtiHAjKZKo1GvjI1K0vi9uMjPi87jJeB5IDapIFHOIN8g.SNCQXbwhA_8KNsIWCI3MrBB9.L8FhvhW1Ui8tli6QCkwf5KSUBRnEd1m4HNCTRM.GHVTjKq7ymDZI1dXx8Yt8ffNceJTOq10k..7gTmiakVQJ4JkUch3_YkOyuz8gZ5B.qECwtESiombw5YDn14.0m8Wuo7qURZl15bOt5.6D0DiuqJicrIoaNG5xad2QvASYoC35qEToMvPBiUGJ4c19Be2Jgbi.FL12FbVo0R.YDqdldLBDeTo\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nSec-Fetch-User: ?1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:02:07 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 26 Jun 2026 18:28:34 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6H%2FYOqPU7uma5GCwfS6VdooSL4U%2Bx5DVitLDdGC27sGmJ1qXLXVK688vyMsQtYRe7Gh5DaIm1GM2O40n067a4q4WWNZ58D9kE9Vo%2FcJWhV334EI2jRelZP%2FdWGcWF8UubfKBxA%3D%3D\"}]}\r\npriority: u=0,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a12ce251cccd4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112569,"size_decoded":24631,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (426)","md5":"9f97dc8a1c86deba2b5a4b535fe20efb","sha1":"0277828643079a9756eec1f7f4ba74e21956a621","sha256":"104822e20bb62a9bdb9c22cb5aeae1b920b41fe45b6cee7298bfe058a8587740","sha512":"88edd3c104f2adf47ed92956307e4bf3e79546bf9819afaa389a28330683b50c636f90b62c6c1d79372a1c58608aa5e854213f34888a2770e6943d9fdc20aee3","ssdeep":"1536:H0txluWyXcLo+TVr5Mf2SJ/fYuSTEnhv8CIcuvzoCWa:H0n8YuSTEnPJa","tlshash":"1eb33d91b76201345c2f836ebbebdb1b62319043e906ec1df5ed0448df899e8a96374d","first_seen":"2026-06-28T11:40:58.543533Z","last_seen":"2026-06-28T14:40:33.843642Z","times_seen":26,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"reg-plasmafi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"reg-plasmafi.live/php321/index_2.html#frame=checkbox-invisible","fqdn":"reg-plasmafi.live","domain":"reg-plasmafi.live","tld":"live"},"ip":{"addr":"104.21.48.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://reg-plasmafi.live/php321/","date":"2026-06-28T13:02:09.404Z","timestamp":1782651729404,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reg-plasmafi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:53:42 GMT","end":"Mon, 21 Sep 2026 14:51:00 GMT"},"fingerprint":{"sha1":"4B:55:03:11:39:5B:F8:C4:89:D3:59:67:8B:4A:C0:0F:3E:10:B4:7B","sha256":"E6:C3:75:49:14:30:5A:21:FC:A5:80:BB:D8:E9:00:C0:79:CB:DC:96:0A:E0:81:4F:B9:E5:E3:7A:B6:58:24:47"}}},"request":{"raw":"GET /php321/index_2.html HTTP/1.1\r\nHost: reg-plasmafi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://reg-plasmafi.live/php321/\r\nCookie: cf_clearance=_oAXW_DGJEi.kjJ.jQTfUiTLeXqovsR92mpISx7Ep0Y-1782651727-1.2.1.1-.wTkErF4iXSKNwOBe9c.Bwn4dnV5aUK6lYaSNGP6DYXqRIGOR4gVOn4oLWXhM..bFnTrXPHdpQ0pG33XfyZ3yHtItdInV5k9BlMa2dCqc7qqrqUQdHzyUnRJWBgyDyRr.W5nYlvRftX7Mtg15HcmfSAjMb3wiJ4ZObpnpVo4bvwrZDEzOaM15ahFnRovJlue3wvRG3w9qwg8lqRw3f6i04LeBHDrRGRtiHAjKZKo1GvjI1K0vi9uMjPi87jJeB5IDapIFHOIN8g.SNCQXbwhA_8KNsIWCI3MrBB9.L8FhvhW1Ui8tli6QCkwf5KSUBRnEd1m4HNCTRM.GHVTjKq7ymDZI1dXx8Yt8ffNceJTOq10k..7gTmiakVQJ4JkUch3_YkOyuz8gZ5B.qECwtESiombw5YDn14.0m8Wuo7qURZl15bOt5.6D0DiuqJicrIoaNG5xad2QvASYoC35qEToMvPBiUGJ4c19Be2Jgbi.FL12FbVo0R.YDqdldLBDeTo\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:02:09 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 26 Jun 2026 17:58:45 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dj6WzCUwwZuuXOAF1ryEabHNSr3aBQfov7gsg0V2TcEDhns5DY4K09%2Fa6cXyIEHtCGWdIAro6l5SzzSGJuy0lbZdDblq49w9nrueRjVonCvRy9BBqiQwCLQcbmB4ff399m8s7Q%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a12ce25cce5e4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1643,"size_decoded":1365,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1235)","md5":"a399f5b2e840515695ea858ea2889c0c","sha1":"ee0757febbab16679ab885d4b639a17f245c9cc5","sha256":"60d1e15d12311fb77e6406902c9f4c5db0f95c567189350d6a96881a5f8fc37d","sha512":"f8ca0b613615004617196c540feb96c16928d2a4bc200e428ff8beddd4a2ed0384e77ad627f9a0c31ce985c434ca6042d3d7b3149a10ecfb6b09087294d99e60","ssdeep":"","tlshash":"ff31e49a0d43119ad8978ade9ce47bb4540eeb979a030ec77161d1858b437ddf0f1b0b","first_seen":"2026-06-28T11:40:58.539539Z","last_seen":"2026-06-28T14:40:33.810202Z","times_seen":20,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"reg-plasmafi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"reg-plasmafi.live/php321/index_1.html","fqdn":"reg-plasmafi.live","domain":"reg-plasmafi.live","tld":"live"},"ip":{"addr":"104.21.48.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://reg-plasmafi.live/php321/","date":"2026-06-28T13:02:09.423Z","timestamp":1782651729423,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reg-plasmafi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:53:42 GMT","end":"Mon, 21 Sep 2026 14:51:00 GMT"},"fingerprint":{"sha1":"4B:55:03:11:39:5B:F8:C4:89:D3:59:67:8B:4A:C0:0F:3E:10:B4:7B","sha256":"E6:C3:75:49:14:30:5A:21:FC:A5:80:BB:D8:E9:00:C0:79:CB:DC:96:0A:E0:81:4F:B9:E5:E3:7A:B6:58:24:47"}}},"request":{"raw":"GET /php321/index_1.html HTTP/1.1\r\nHost: reg-plasmafi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://reg-plasmafi.live/php321/\r\nCookie: cf_clearance=_oAXW_DGJEi.kjJ.jQTfUiTLeXqovsR92mpISx7Ep0Y-1782651727-1.2.1.1-.wTkErF4iXSKNwOBe9c.Bwn4dnV5aUK6lYaSNGP6DYXqRIGOR4gVOn4oLWXhM..bFnTrXPHdpQ0pG33XfyZ3yHtItdInV5k9BlMa2dCqc7qqrqUQdHzyUnRJWBgyDyRr.W5nYlvRftX7Mtg15HcmfSAjMb3wiJ4ZObpnpVo4bvwrZDEzOaM15ahFnRovJlue3wvRG3w9qwg8lqRw3f6i04LeBHDrRGRtiHAjKZKo1GvjI1K0vi9uMjPi87jJeB5IDapIFHOIN8g.SNCQXbwhA_8KNsIWCI3MrBB9.L8FhvhW1Ui8tli6QCkwf5KSUBRnEd1m4HNCTRM.GHVTjKq7ymDZI1dXx8Yt8ffNceJTOq10k..7gTmiakVQJ4JkUch3_YkOyuz8gZ5B.qECwtESiombw5YDn14.0m8Wuo7qURZl15bOt5.6D0DiuqJicrIoaNG5xad2QvASYoC35qEToMvPBiUGJ4c19Be2Jgbi.FL12FbVo0R.YDqdldLBDeTo\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:02:09 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 26 Jun 2026 17:58:45 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZcS%2FZEuqL8nJ0pgAQaNrlI0XBGYrQQ0mpftKYgOSIRXB%2BSPeLuttouFERSgc0T37EZRoXca2nTI5xMNS4UXYb16NJpPbrqFFIX2BiHxowThVZIql0lPX0%2F5uQ%2FSu2tmrSXOA7w%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a12ce25cee614e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":171,"size_decoded":793,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"e077392c817fc1d6f7130b39ec0dcaf2","sha1":"6f7c5c6eead786c7b575399f41278bcf463f7de0","sha256":"1ac27847a1f828bef8e9ed51088d127205fa050a26ea9bc726734361a27f76dd","sha512":"e27d064c9a908bbe91548edefdaf86495a61764fff46523eeb9b6f6a15d89b60ce12d79f7570872b160f77d971e28593aea8ddaac60dbab6a6cb3a4fc5006099","ssdeep":"","tlshash":"16c08c12d8654c8e2a509aa1cb8af6c4c4029d6ed821ad01ba6ea654afa8a20c85b459","first_seen":"2026-01-07T07:56:57.555644Z","last_seen":"2026-06-28T14:40:33.846749Z","times_seen":79,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"reg-plasmafi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"reg-plasmafi.live/php321/7ab6c71e1cbd6ab6-s.p.woff2","fqdn":"reg-plasmafi.live","domain":"reg-plasmafi.live","tld":"live"},"ip":{"addr":"104.21.48.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://reg-plasmafi.live/php321/","date":"2026-06-28T13:02:09.469Z","timestamp":1782651729469,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reg-plasmafi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:53:42 GMT","end":"Mon, 21 Sep 2026 14:51:00 GMT"},"fingerprint":{"sha1":"4B:55:03:11:39:5B:F8:C4:89:D3:59:67:8B:4A:C0:0F:3E:10:B4:7B","sha256":"E6:C3:75:49:14:30:5A:21:FC:A5:80:BB:D8:E9:00:C0:79:CB:DC:96:0A:E0:81:4F:B9:E5:E3:7A:B6:58:24:47"}}},"request":{"raw":"GET /php321/7ab6c71e1cbd6ab6-s.p.woff2 HTTP/1.1\r\nHost: reg-plasmafi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://reg-plasmafi.live/php321/2aad71242bff6512.css\r\nCookie: cf_clearance=_oAXW_DGJEi.kjJ.jQTfUiTLeXqovsR92mpISx7Ep0Y-1782651727-1.2.1.1-.wTkErF4iXSKNwOBe9c.Bwn4dnV5aUK6lYaSNGP6DYXqRIGOR4gVOn4oLWXhM..bFnTrXPHdpQ0pG33XfyZ3yHtItdInV5k9BlMa2dCqc7qqrqUQdHzyUnRJWBgyDyRr.W5nYlvRftX7Mtg15HcmfSAjMb3wiJ4ZObpnpVo4bvwrZDEzOaM15ahFnRovJlue3wvRG3w9qwg8lqRw3f6i04LeBHDrRGRtiHAjKZKo1GvjI1K0vi9uMjPi87jJeB5IDapIFHOIN8g.SNCQXbwhA_8KNsIWCI3MrBB9.L8FhvhW1Ui8tli6QCkwf5KSUBRnEd1m4HNCTRM.GHVTjKq7ymDZI1dXx8Yt8ffNceJTOq10k..7gTmiakVQJ4JkUch3_YkOyuz8gZ5B.qECwtESiombw5YDn14.0m8Wuo7qURZl15bOt5.6D0DiuqJicrIoaNG5xad2QvASYoC35qEToMvPBiUGJ4c19Be2Jgbi.FL12FbVo0R.YDqdldLBDeTo\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:02:09 GMT\r\ncontent-type: application/octet-stream\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 26 Jun 2026 17:58:45 GMT\r\npriority: u=3,i=?0\r\netag: \"6a3ebdd5-5950\"\r\naccept-ranges: bytes\r\nage: 4953\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f0LvGmj%2Fni4Arypuc3pUX8%2BcAgKsJgFWfEyAMKTkiNoMzXwvJ79VGKfbPQIBM2B%2FWb70M4PpgNydg4499DfKGfHSheyoVn9iHMr%2BVBQeVvR%2FKXSGcGdjcrq5fhdtKN4ixqAdjw%3D%3D\"}]}\r\ncontent-length: 22864\r\ncf-ray: a12ce25d3e694e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22864,"size_decoded":23591,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 22864, version 1.0","md5":"de829035f3ec3073c54513b5772508e4","sha1":"7d7e195aa612611de6ae0be2f88d635d578352b6","sha256":"bf215614cb18ef8c5eaf687ae21769b8ead7839ff4d7d2313de911c8d3725f3e","sha512":"cd23c9f2aa3ec59e6efa2d25912dd09926b7b5a46006ce9413126640af7e6337befe5d28f51bad822529467a52af1d3d4c5016714a92e03888a5763f798133ea","ssdeep":"384:msY0jOdY0gboC0hfNs3E3TEYXCVJfUproCeEC626z6Jko4vFDDlIg9Z:K0CuboC0FN0QPC3UhoCeEQMBdvFeg9Z","tlshash":"f4a2d0a66eab724768102373c5003cfe2b2d766a915da678977e44c4f8c346ed6423f4","first_seen":"2025-09-22T03:39:33.528899Z","last_seen":"2026-06-29T08:40:56.251715Z","times_seen":31,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"reg-plasmafi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1022166842:1782648016:EOKH8QvoUSOKg41iakUNyoOIEU6U3nncr5Ho3yWMwhs/a12ce2265b31b4f4/7gaSpvM3RAnFD0H9mKuRO1R390On62lc5nDw3xC_hF4-1782651720-1.2.1.1-79NoLlZLAfTAuY.PcFCp1sS684n6fnPd1V41_dhWL3UxeTKoZ7OP_TrODGJ_dukC","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/4kvhz/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-28T13:02:01.145Z","timestamp":1782651721145,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1022166842:1782648016:EOKH8QvoUSOKg41iakUNyoOIEU6U3nncr5Ho3yWMwhs/a12ce2265b31b4f4/7gaSpvM3RAnFD0H9mKuRO1R390On62lc5nDw3xC_hF4-1782651720-1.2.1.1-79NoLlZLAfTAuY.PcFCp1sS684n6fnPd1V41_dhWL3UxeTKoZ7OP_TrODGJ_dukC HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/4kvhz/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\ncf-chl: 7gaSpvM3RAnFD0H9mKuRO1R390On62lc5nDw3xC_hF4-1782651720-1.2.1.1-79NoLlZLAfTAuY.PcFCp1sS684n6fnPd1V41_dhWL3UxeTKoZ7OP_TrODGJ_dukC\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 4652\r\nOrigin: https://challenges.cloudflare.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 13:02:01 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: BKcsgFSgD9T6ONiwiSoxfrYz+DW3ocvArOFlie91nMK6sGf+aFQlWRi/VwspNqJABlUIBxjGFElL48dX/XDBYwn/6MzAnoVxQa8fUtjz+WegkP3sYkkx0M0wLbWc28TB6avSZaqcpMrOXlNq4uC8W0HoSOBJnI/VCFgpsxW56yiJZxM8bSXVPhFFdqm1o1wP578qRKvijWDkq9/TPf1uDAE2b4x+nlWISBj19gU5EQ9diN/swyhTMTpvHaIyF5PEdH3MJXEY9vA5H+LGZSbWcyd/u6sopiiSLiqm/cfIw9r5lGbOjOEx2yC5gyE29rbN9u0KkQruHM6DOOREt0Qr8tKVmJrQDSrONuGQw4CqDBQrmsraxIPb+3tfkLgUfe5paT1F9PO1zXuVIEsMKLbquwa91zwyKSAKw0SXiUehboKrBq2+6z2qkd2vZzMHx+qSMI2tZE5ma1v1oAA2dNY9Ier0WprueKCY2sHqaTE1d2/ynknioJKVTJcVgK/uYfuCia9D3vxfInE9kHPIW+MlhqD+7i9Us4Kz+Obiddj8ePCWmYvub16H1ukal5jpOUzV8f2/8t0w0/3ySosMaxVOcllR6qAOcpoZUfRtTuUEFet3B3N/DRY8FOgLPfFXTfyLLSnRrnq49G7fC/LK9U/DWNBXhjvCrTmqDKa91O0ya6v8XXH6oLKlaNs403MYJoPzO5O4ZLVPqvTGsZpI+KA2v+OT2KT8tmvwlFih+W+fdp8MhdOeWmzldWLUNBH4IWRhT2WYnC4IVDIcqkCdFMOn6rcqu8yd0O+eP++B/LXVUvwy2Zl9hjnSXTuBupDHoVStqO+8imMCLpBd6MTI9PMiRPzgFq7+zuD8/yO29UhPhG6b6DDmkFVIMG2LyFN5oss4IjtbC79AFab2FEFBK5BdjQ==$jh+5AJ/IeKrdKdoY7GOWsQ==\r\ntiming-allow-origin: https://challenges.cloudflare.com\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a12ce2293e62b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":389808,"size_decoded":293681,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ffc5bedd011ab038a1fb532d2002a3e0","sha1":"a493af84bf887395c872d70f90f6de5cff0b9edd","sha256":"c496ec56239b6686a63f1f6888107083601e64c7f9b8577c424d2b0d504c1b17","sha512":"ef3b1a37f30ad5fa902345e1e59f2802cbf0cf912d8cbea05192283dae36278a375cfa2efa2eea5354d81c06478d6daa97e37a7746697e1b4e5a09fad0a6788c","ssdeep":"6144:pjeP4T8eiwkJQvnQQ3hRmCZTj8O4HW7Bpdqw5QtoRI+q0XvEDJy8Mxi/TX+7pc:pjeP447wkJQIQ3hx38O1BXqbtoEDJDM0","tlshash":"6f8423be30b897db1e82bf3f8151e37b2d415d191072e8e4a9fd3bc79485e844ba4186","first_seen":"2026-06-28T13:02:48.848426Z","last_seen":"2026-06-28T13:02:48.848426Z","times_seen":1,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"103.101.85.74.sslip.io/php321/30yid7.php?v=2","fqdn":"103.101.85.74.sslip.io","domain":"sslip.io","tld":"io"},"ip":{"addr":"103.101.85.74","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://reg-plasmafi.live/php321/","date":"2026-06-28T13:02:07.982Z","timestamp":1782651727982,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"103.101.85.74.sslip.io","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 17:00:26 GMT","end":"Thu, 24 Sep 2026 17:00:25 GMT"},"fingerprint":{"sha1":"57:1E:10:1D:AA:83:E0:46:F8:9C:74:53:C1:5B:83:E2:15:40:71:F3","sha256":"E8:0B:E0:EC:D6:B8:A4:AF:5F:70:8D:D8:6E:D8:01:DD:9F:5B:E1:DC:7E:45:3F:8B:C4:E9:B1:CE:99:E7:C6:5D"}}},"request":{"raw":"GET /php321/30yid7.php?v=2 HTTP/1.1\r\nHost: 103.101.85.74.sslip.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://reg-plasmafi.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sun, 28 Jun 2026 13:02:08 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: *\r\nAccess-Control-Allow-Headers: *\r\nAccess-Control-Max-Age: 3600\r\nCache-Control: public, max-age=3600\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":366207,"size_decoded":366549,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (45510), with no line terminators","md5":"1fa3b181483f537fbf92c1e75d929fca","sha1":"ccb86c5a2b7203899c5ff96e24dd267c9e4c86fc","sha256":"9f7d332848b3e4e5e986e65513f24c49a3eab817dce93bc6550ed15116e31efa","sha512":"bd92c28780832b38ec2b7618767711b4d28e4a3a602f137ec07843bdac7b2a724df910992656d5ec6c0b8a880421d4807ff2cfe9cc9f8377efc3eb1ff4f7a66c","ssdeep":"3072:xXlCroHGp/UrcP/ZE1LjQ/102U6XwuI3uqMNgefXsoLcD16wvQ8YDBgqD:xXlCroHgUroZ4jQ9UF3N160SL","tlshash":"ba7485c9eb53809c8d99119e8177f849e4554d67ce2c78a3ee0ecdc2252ab7b808717f","first_seen":"2026-06-28T12:56:22.765803Z","last_seen":"2026-06-28T13:47:37.251556Z","times_seen":8,"resource_available":true,"data":null}},"time_used":883,"timings":{"blocked":-1,"dns":4,"connect":43,"send":0,"wait":611,"receive":176,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reg-plasmafi.live/php321/icon.png","fqdn":"reg-plasmafi.live","domain":"reg-plasmafi.live","tld":"live"},"ip":{"addr":"104.21.48.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://reg-plasmafi.live/php321/","date":"2026-06-28T13:02:09.474Z","timestamp":1782651729474,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reg-plasmafi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:53:42 GMT","end":"Mon, 21 Sep 2026 14:51:00 GMT"},"fingerprint":{"sha1":"4B:55:03:11:39:5B:F8:C4:89:D3:59:67:8B:4A:C0:0F:3E:10:B4:7B","sha256":"E6:C3:75:49:14:30:5A:21:FC:A5:80:BB:D8:E9:00:C0:79:CB:DC:96:0A:E0:81:4F:B9:E5:E3:7A:B6:58:24:47"}}},"request":{"raw":"GET /php321/icon.png HTTP/1.1\r\nHost: reg-plasmafi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://reg-plasmafi.live/php321/\r\nCookie: cf_clearance=_oAXW_DGJEi.kjJ.jQTfUiTLeXqovsR92mpISx7Ep0Y-1782651727-1.2.1.1-.wTkErF4iXSKNwOBe9c.Bwn4dnV5aUK6lYaSNGP6DYXqRIGOR4gVOn4oLWXhM..bFnTrXPHdpQ0pG33XfyZ3yHtItdInV5k9BlMa2dCqc7qqrqUQdHzyUnRJWBgyDyRr.W5nYlvRftX7Mtg15HcmfSAjMb3wiJ4ZObpnpVo4bvwrZDEzOaM15ahFnRovJlue3wvRG3w9qwg8lqRw3f6i04LeBHDrRGRtiHAjKZKo1GvjI1K0vi9uMjPi87jJeB5IDapIFHOIN8g.SNCQXbwhA_8KNsIWCI3MrBB9.L8FhvhW1Ui8tli6QCkwf5KSUBRnEd1m4HNCTRM.GHVTjKq7ymDZI1dXx8Yt8ffNceJTOq10k..7gTmiakVQJ4JkUch3_YkOyuz8gZ5B.qECwtESiombw5YDn14.0m8Wuo7qURZl15bOt5.6D0DiuqJicrIoaNG5xad2QvASYoC35qEToMvPBiUGJ4c19Be2Jgbi.FL12FbVo0R.YDqdldLBDeTo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:02:09 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 26 Jun 2026 17:58:45 GMT\r\npriority: u=6,i=?0\r\netag: \"6a3ebdd5-3e7\"\r\naccept-ranges: bytes\r\nage: 4953\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bak1yOiFECdyDE6dqqhtoTvD52iuHHIvUwJAABtvIGshl95mh0HaIyifW6TIl1yOG6VKRW1MYSly5oqUdsAaYDc5IbtA1k0AL8ApVp9rK4GOq7SQywpon9YfR6FBaWzO5ri94A%3D%3D\"}]}\r\ncontent-length: 999\r\ncf-ray: a12ce25d8e764e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":999,"size_decoded":1700,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"6084fc0b73be92e3b11876ef4f2ca572","sha1":"e53c7021fa258e1f6a4dc8cf06602c9f6274797b","sha256":"4470a5db41cdaf60c2ea41ba0231b1abbdc290cc694b0f2d29337738e5be43a7","sha512":"5d9b3237f2b658e172d299a32917a8afc848c2ee48d3490b779b593a01ffba9dc594810f5a491c237bc28b3df23ece5e229a4aff979d0b69e17be0b23c8d35b2","ssdeep":"","tlshash":"cd11a86a990a6d74515d1523e72b4c60dcbb2cdadfd08c58285124e247f7864d5f0e8a","first_seen":"2025-08-12T04:00:02.530534Z","last_seen":"2026-06-29T08:40:56.115107Z","times_seen":24,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"reg-plasmafi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"reg-plasmafi.live/favicon.ico","fqdn":"reg-plasmafi.live","domain":"reg-plasmafi.live","tld":"live"},"ip":{"addr":"104.21.48.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://reg-plasmafi.live/","date":"2026-06-28T13:02:00.272Z","timestamp":1782651720272,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reg-plasmafi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:53:42 GMT","end":"Mon, 21 Sep 2026 14:51:00 GMT"},"fingerprint":{"sha1":"4B:55:03:11:39:5B:F8:C4:89:D3:59:67:8B:4A:C0:0F:3E:10:B4:7B","sha256":"E6:C3:75:49:14:30:5A:21:FC:A5:80:BB:D8:E9:00:C0:79:CB:DC:96:0A:E0:81:4F:B9:E5:E3:7A:B6:58:24:47"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: reg-plasmafi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://reg-plasmafi.live/?__cf_chl_rt_tk=jRiuU0.j1gCVgAJ3u2czd5Kn.df1iYmJEcevEa1HecQ-1782651719-1.0.1.1-fx7t6Pi8yFVahF7_TFQLNWxcqLVqscqmuZ.iuCH_oOA\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:02:00 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2chWrh%2FWcfmK4cvAQduh3EKCV1xd1MqsvsPPa3WBR1NoJNitnQ9ezc%2FNRQZImpKyOvJ%2FnUTM3TL8rbwBH3YhnNqtA0ORfxMN72zFkU1vm5apDTOKvtrNvkFB7R9P5%2ForduMkFg%3D%3D\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a12ce223be654e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162,"size_decoded":755,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"1b7c22a214949975556626d7217e9a39","sha1":"d01c97e2944166ed23e47e4a62ff471ab8fa031f","sha256":"340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87","sha512":"ba64847cf1d4157d50abe4f4a1e5c1996fe387c5808e2f758c7fb3213bfefe1f3712d343f0c30a16819749840954654a70611d2250fd0f7b032429db7afd2cc5","ssdeep":"","tlshash":"59c08c6e2613bd4cc6a3217522c3b490c09aa3a7a4ea46214840805331cb29a8ac7396","first_seen":"2023-03-10T20:17:28Z","last_seen":"2026-06-30T16:43:11.079816Z","times_seen":45811,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"reg-plasmafi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"reg-plasmafi.live/php321/2aad71242bff6512.css","fqdn":"reg-plasmafi.live","domain":"reg-plasmafi.live","tld":"live"},"ip":{"addr":"104.21.48.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://reg-plasmafi.live/php321/","date":"2026-06-28T13:02:07.979Z","timestamp":1782651727979,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reg-plasmafi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:53:42 GMT","end":"Mon, 21 Sep 2026 14:51:00 GMT"},"fingerprint":{"sha1":"4B:55:03:11:39:5B:F8:C4:89:D3:59:67:8B:4A:C0:0F:3E:10:B4:7B","sha256":"E6:C3:75:49:14:30:5A:21:FC:A5:80:BB:D8:E9:00:C0:79:CB:DC:96:0A:E0:81:4F:B9:E5:E3:7A:B6:58:24:47"}}},"request":{"raw":"GET /php321/2aad71242bff6512.css HTTP/1.1\r\nHost: reg-plasmafi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://reg-plasmafi.live/php321/\r\nCookie: cf_clearance=_oAXW_DGJEi.kjJ.jQTfUiTLeXqovsR92mpISx7Ep0Y-1782651727-1.2.1.1-.wTkErF4iXSKNwOBe9c.Bwn4dnV5aUK6lYaSNGP6DYXqRIGOR4gVOn4oLWXhM..bFnTrXPHdpQ0pG33XfyZ3yHtItdInV5k9BlMa2dCqc7qqrqUQdHzyUnRJWBgyDyRr.W5nYlvRftX7Mtg15HcmfSAjMb3wiJ4ZObpnpVo4bvwrZDEzOaM15ahFnRovJlue3wvRG3w9qwg8lqRw3f6i04LeBHDrRGRtiHAjKZKo1GvjI1K0vi9uMjPi87jJeB5IDapIFHOIN8g.SNCQXbwhA_8KNsIWCI3MrBB9.L8FhvhW1Ui8tli6QCkwf5KSUBRnEd1m4HNCTRM.GHVTjKq7ymDZI1dXx8Yt8ffNceJTOq10k..7gTmiakVQJ4JkUch3_YkOyuz8gZ5B.qECwtESiombw5YDn14.0m8Wuo7qURZl15bOt5.6D0DiuqJicrIoaNG5xad2QvASYoC35qEToMvPBiUGJ4c19Be2Jgbi.FL12FbVo0R.YDqdldLBDeTo\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:02:07 GMT\r\ncontent-type: text/css\r\netag: W/\"6a3ebdd5-53e\"\r\nlast-modified: Fri, 26 Jun 2026 17:58:45 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nTmw3mFLbZxGLfCLpDIz7nEIDY7%2FNz1issGIRqWccfFZ88KTuionZwJcX644zspqv%2F0Zxb6gr1Rb5qPiIemKaYMVdXmECDZotQynhpvCYAmnZnOivxthCS%2Faq%2FD4h4JRPijsaQ%3D%3D\"}]}\r\nage: 4952\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a12ce253ed0e4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1342,"size_decoded":1146,"mime_type":"text/css","magic":"ASCII text, with very long lines (1342), with no line terminators","md5":"bcb0d1da74630c7bacedf3a75d8ea18b","sha1":"04cd42e37538f4f45e16385ed48fc62df29c11da","sha256":"50f8cb7242f9ceeb2a7963187eade77b11f2974c73244e9bd8c607edd800a87a","sha512":"d4149fa76b2cf63562cf10fd59c2f12faecb6d9aff425313552097b28af8b0db6e57a42a69be3d9b608ece12e1a329ade67e3de3ceeece22ffd4dfef7d9199b2","ssdeep":"","tlshash":"022150200a1d999de670bdc237853f631d6d64148ea91d32f32702698dd787a32a17bc","first_seen":"2026-06-28T11:40:58.567103Z","last_seen":"2026-06-28T16:46:39.445195Z","times_seen":28,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"reg-plasmafi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"reg-plasmafi.live/php321/index_4.html#frame=challenge\u0026id=0029igjkfuc6c\u0026host=app.ventuals.com\u0026sentry=true\u0026reportapi=https%3A%2F%2Faccounts.hcaptcha.com\u0026recaptchacompat=true\u0026custom=false\u0026hl=nl\u0026tplinks=on\u0026andint=off\u0026pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com\u0026sitekey=b9fc5a50-2e5c-457a-9582-80ce342c2534\u0026size=invisible\u0026theme=light\u0026origin=https%3A%2F%2Fapp.ventuals.com\u0026clientOptions=%7B%22sentry%22%3Atrue%2C%22reportapi%22%3A%22https%3A%2F%2Faccounts.hcaptcha.com%22%2C%22recaptchacompat%22%3A%22true%22%2C%22custom%22%3Afalse%2C%22hl%22%3A%22nl-NL%22%2C%22tplinks%22%3A%22on%22%2C%22andint%22%3A%22off%22%2C%22pat%22%3A%22on%22%2C%22pstissuer%22%3A%22https%3A%2F%2Fpst-issuer.hcaptcha.com%22%2C%22endpoint%22%3A%22https%3A%2F%2Fapi.hcaptcha.com%22%2C%22theme%22%3A%22light%22%2C%22size%22%3A%22normal%22%2C%22confirm-nav%22%3Afalse%7D","fqdn":"reg-plasmafi.live","domain":"reg-plasmafi.live","tld":"live"},"ip":{"addr":"104.21.48.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://reg-plasmafi.live/php321/","date":"2026-06-28T13:02:09.426Z","timestamp":1782651729426,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reg-plasmafi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:53:42 GMT","end":"Mon, 21 Sep 2026 14:51:00 GMT"},"fingerprint":{"sha1":"4B:55:03:11:39:5B:F8:C4:89:D3:59:67:8B:4A:C0:0F:3E:10:B4:7B","sha256":"E6:C3:75:49:14:30:5A:21:FC:A5:80:BB:D8:E9:00:C0:79:CB:DC:96:0A:E0:81:4F:B9:E5:E3:7A:B6:58:24:47"}}},"request":{"raw":"GET /php321/index_4.html HTTP/1.1\r\nHost: reg-plasmafi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://reg-plasmafi.live/php321/\r\nCookie: cf_clearance=_oAXW_DGJEi.kjJ.jQTfUiTLeXqovsR92mpISx7Ep0Y-1782651727-1.2.1.1-.wTkErF4iXSKNwOBe9c.Bwn4dnV5aUK6lYaSNGP6DYXqRIGOR4gVOn4oLWXhM..bFnTrXPHdpQ0pG33XfyZ3yHtItdInV5k9BlMa2dCqc7qqrqUQdHzyUnRJWBgyDyRr.W5nYlvRftX7Mtg15HcmfSAjMb3wiJ4ZObpnpVo4bvwrZDEzOaM15ahFnRovJlue3wvRG3w9qwg8lqRw3f6i04LeBHDrRGRtiHAjKZKo1GvjI1K0vi9uMjPi87jJeB5IDapIFHOIN8g.SNCQXbwhA_8KNsIWCI3MrBB9.L8FhvhW1Ui8tli6QCkwf5KSUBRnEd1m4HNCTRM.GHVTjKq7ymDZI1dXx8Yt8ffNceJTOq10k..7gTmiakVQJ4JkUch3_YkOyuz8gZ5B.qECwtESiombw5YDn14.0m8Wuo7qURZl15bOt5.6D0DiuqJicrIoaNG5xad2QvASYoC35qEToMvPBiUGJ4c19Be2Jgbi.FL12FbVo0R.YDqdldLBDeTo\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:02:09 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 26 Jun 2026 17:58:45 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n%2FR9C1UDUTJZBudUSFG45D0zNWt8YubQ%2BEs7fTk0SYcXPYXvaRKEmSHQtRA3d2YEaCWCBhLh0J5SHvhHY82ZiokRfd3YSkE21PVVrMqryup98R2KP%2FfmH4883l7TyV5WSQPdJQ%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a12ce25cee624e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58993,"size_decoded":4447,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (57323)","md5":"475266804dca308501f6d5deac63b37b","sha1":"caae8885dbb54b4e91b392700531767379a0b84c","sha256":"509749b824122e03ed89e61442492df27be79b18db92359247c22246db6d3332","sha512":"3c90cd3ff2b443120184e353d48fdec77843af6bfaba2d6d38a7af7d61cd077c4a4d5c9f5a2e8915577801a0ed95ca4c41f487d1596b869d1896c4ad26059e56","ssdeep":"192:7fIIINkNHCB4a1NCSXfvXfFqgaL36Xjb6XNb6XYb6Xrb6Xgb6XRb6XUb6Xrb6XvQ:3a1NhqgavSyjxK","tlshash":"6b43152196050427b177b798b4f18bcf276b8309f55342389be92a92e1cfcb45c9b747","first_seen":"2026-06-28T11:40:58.550298Z","last_seen":"2026-06-28T14:40:33.821756Z","times_seen":18,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"reg-plasmafi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"reg-plasmafi.live/php321/64579aaceba9f83a-s.p.woff2","fqdn":"reg-plasmafi.live","domain":"reg-plasmafi.live","tld":"live"},"ip":{"addr":"104.21.48.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://reg-plasmafi.live/php321/","date":"2026-06-28T13:02:09.472Z","timestamp":1782651729472,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reg-plasmafi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:53:42 GMT","end":"Mon, 21 Sep 2026 14:51:00 GMT"},"fingerprint":{"sha1":"4B:55:03:11:39:5B:F8:C4:89:D3:59:67:8B:4A:C0:0F:3E:10:B4:7B","sha256":"E6:C3:75:49:14:30:5A:21:FC:A5:80:BB:D8:E9:00:C0:79:CB:DC:96:0A:E0:81:4F:B9:E5:E3:7A:B6:58:24:47"}}},"request":{"raw":"GET /php321/64579aaceba9f83a-s.p.woff2 HTTP/1.1\r\nHost: reg-plasmafi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://reg-plasmafi.live/php321/2aad71242bff6512.css\r\nCookie: cf_clearance=_oAXW_DGJEi.kjJ.jQTfUiTLeXqovsR92mpISx7Ep0Y-1782651727-1.2.1.1-.wTkErF4iXSKNwOBe9c.Bwn4dnV5aUK6lYaSNGP6DYXqRIGOR4gVOn4oLWXhM..bFnTrXPHdpQ0pG33XfyZ3yHtItdInV5k9BlMa2dCqc7qqrqUQdHzyUnRJWBgyDyRr.W5nYlvRftX7Mtg15HcmfSAjMb3wiJ4ZObpnpVo4bvwrZDEzOaM15ahFnRovJlue3wvRG3w9qwg8lqRw3f6i04LeBHDrRGRtiHAjKZKo1GvjI1K0vi9uMjPi87jJeB5IDapIFHOIN8g.SNCQXbwhA_8KNsIWCI3MrBB9.L8FhvhW1Ui8tli6QCkwf5KSUBRnEd1m4HNCTRM.GHVTjKq7ymDZI1dXx8Yt8ffNceJTOq10k..7gTmiakVQJ4JkUch3_YkOyuz8gZ5B.qECwtESiombw5YDn14.0m8Wuo7qURZl15bOt5.6D0DiuqJicrIoaNG5xad2QvASYoC35qEToMvPBiUGJ4c19Be2Jgbi.FL12FbVo0R.YDqdldLBDeTo\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:02:09 GMT\r\ncontent-type: application/octet-stream\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 26 Jun 2026 17:58:45 GMT\r\npriority: u=3,i=?0\r\netag: \"6a3ebdd5-bbcc\"\r\naccept-ranges: bytes\r\nage: 4953\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CBZtcTUDjHbUCmih4lQ8MsXURwBU%2BcdWXSCtssxvib%2BMhe961AngMVfib0b1YhhxSA0%2BIJuXIRLoMiDVRD7R4TVjncud3YXavolV4F7Yn8LGrc8JRRlJWXWshjFa4FGFtxacnw%3D%3D\"}]}\r\ncontent-length: 48076\r\ncf-ray: a12ce25d3e6a4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48076,"size_decoded":48799,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 48076, version 1.0","md5":"44025666cfb90c19f4a7aaafc7132b9a","sha1":"4db1d1be467ec67084c4bee650a484bc0cb30008","sha256":"b7b2e90334d02effc6f8dc59d45a6ab2105f7ab862449e3b7cad7325c785b504","sha512":"0a070772f0aa52e830c808e3b00208dbd420ed2e2def3552498821003963945511dbbe985c18d22501cab878c403de249c9bd8ec39c93df3b1959d805023c81c","ssdeep":"768:qch31gkJ0Ucgw2446WrQXtdn50Qj+9e55Effr5ZgrFBZPT7RgexxjtSUtRiC7jdq:FFgI06w24NpdUQpgffVerNPPRfxh0Utw","tlshash":"9e2302eafe5ca64491d5d80e23a8852a86a00941e7cb78e9797f04532e03e1af53d5bc","first_seen":"2024-08-20T12:22:15.703907Z","last_seen":"2026-06-29T08:40:56.218073Z","times_seen":162,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"reg-plasmafi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"reg-plasmafi.live/php321/index_6.html","fqdn":"reg-plasmafi.live","domain":"reg-plasmafi.live","tld":"live"},"ip":{"addr":"104.21.48.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://reg-plasmafi.live/php321/","date":"2026-06-28T13:02:09.415Z","timestamp":1782651729415,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reg-plasmafi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:53:42 GMT","end":"Mon, 21 Sep 2026 14:51:00 GMT"},"fingerprint":{"sha1":"4B:55:03:11:39:5B:F8:C4:89:D3:59:67:8B:4A:C0:0F:3E:10:B4:7B","sha256":"E6:C3:75:49:14:30:5A:21:FC:A5:80:BB:D8:E9:00:C0:79:CB:DC:96:0A:E0:81:4F:B9:E5:E3:7A:B6:58:24:47"}}},"request":{"raw":"GET /php321/index_6.html HTTP/1.1\r\nHost: reg-plasmafi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://reg-plasmafi.live/php321/\r\nCookie: cf_clearance=_oAXW_DGJEi.kjJ.jQTfUiTLeXqovsR92mpISx7Ep0Y-1782651727-1.2.1.1-.wTkErF4iXSKNwOBe9c.Bwn4dnV5aUK6lYaSNGP6DYXqRIGOR4gVOn4oLWXhM..bFnTrXPHdpQ0pG33XfyZ3yHtItdInV5k9BlMa2dCqc7qqrqUQdHzyUnRJWBgyDyRr.W5nYlvRftX7Mtg15HcmfSAjMb3wiJ4ZObpnpVo4bvwrZDEzOaM15ahFnRovJlue3wvRG3w9qwg8lqRw3f6i04LeBHDrRGRtiHAjKZKo1GvjI1K0vi9uMjPi87jJeB5IDapIFHOIN8g.SNCQXbwhA_8KNsIWCI3MrBB9.L8FhvhW1Ui8tli6QCkwf5KSUBRnEd1m4HNCTRM.GHVTjKq7ymDZI1dXx8Yt8ffNceJTOq10k..7gTmiakVQJ4JkUch3_YkOyuz8gZ5B.qECwtESiombw5YDn14.0m8Wuo7qURZl15bOt5.6D0DiuqJicrIoaNG5xad2QvASYoC35qEToMvPBiUGJ4c19Be2Jgbi.FL12FbVo0R.YDqdldLBDeTo\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:02:09 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 26 Jun 2026 17:58:45 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cJsNN74kPE20mUdQvvRxgM6%2FGBzgT3nw0Vkc0bcwi6vccqGPXH30cYiWYo8XQTUj2EsMKmBhPjM6OCsgzFoF2h7u3Sda2r1oeQn%2Bh%2BWIxbEJU3LgkMN8od8jIq4VLdSo44LPIA%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a12ce25cde604e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1154,"size_decoded":1332,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1153), with no line terminators","md5":"3ce41be93748333fcf2fbecaf76f63d2","sha1":"6b1b44de5cfc21908bbb8dcf2a00ebf6ce182e47","sha256":"2c164277570b74cb2d00ec3334484997a7737c38cb892f55f1b2a93226430332","sha512":"4faedbd0e6fdf4edaf60f907153b647697457bd61271a6a4f8851747f6b1611b0ee8221c2a4e8386f0309f6ca9564c11d6b10eb4da647109a889c81b614854f3","ssdeep":"","tlshash":"9b2196e668119d29601767ed9cca604eb903fa2de7445cccfdced81ddcb6d3c1141888","first_seen":"2026-06-28T11:40:58.549442Z","last_seen":"2026-06-28T14:40:33.811031Z","times_seen":18,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"reg-plasmafi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"reg-plasmafi.live/cdn-cgi/challenge-platform/h/b/flow/ov1/696527360:1782648014:9d2O0z3myJv4qbZfR7y4-7FH_SdDggY7nf2vir9BYug/a12ce2219dd84e4c/i8F.b5hpJ8alQ6MsrqpZXHvrW3nq7p92p44EuhuJDnQ-1782651719-1.2.1.1-sSVtMz7No7yqBh4hQrRb6gexlPWj_Mixt5WuBHqbus0hywNz2K4QfYzJLwvwNSBC","fqdn":"reg-plasmafi.live","domain":"reg-plasmafi.live","tld":"live"},"ip":{"addr":"104.21.48.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://reg-plasmafi.live/","date":"2026-06-28T13:02:00.620Z","timestamp":1782651720620,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reg-plasmafi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:53:42 GMT","end":"Mon, 21 Sep 2026 14:51:00 GMT"},"fingerprint":{"sha1":"4B:55:03:11:39:5B:F8:C4:89:D3:59:67:8B:4A:C0:0F:3E:10:B4:7B","sha256":"E6:C3:75:49:14:30:5A:21:FC:A5:80:BB:D8:E9:00:C0:79:CB:DC:96:0A:E0:81:4F:B9:E5:E3:7A:B6:58:24:47"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/696527360:1782648014:9d2O0z3myJv4qbZfR7y4-7FH_SdDggY7nf2vir9BYug/a12ce2219dd84e4c/i8F.b5hpJ8alQ6MsrqpZXHvrW3nq7p92p44EuhuJDnQ-1782651719-1.2.1.1-sSVtMz7No7yqBh4hQrRb6gexlPWj_Mixt5WuBHqbus0hywNz2K4QfYzJLwvwNSBC HTTP/1.1\r\nHost: reg-plasmafi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://reg-plasmafi.live/\r\ncf-chl: i8F.b5hpJ8alQ6MsrqpZXHvrW3nq7p92p44EuhuJDnQ-1782651719-1.2.1.1-sSVtMz7No7yqBh4hQrRb6gexlPWj_Mixt5WuBHqbus0hywNz2K4QfYzJLwvwNSBC\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2242\r\nOrigin: https://reg-plasmafi.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-gen: c0Rc93Uix92uCqvIT3zfSkiHeRFuVLgFJ4Wx3aVNLd0=$AK2lX6z5XHl6DH1wtRrwtA==\r\ntiming-allow-origin: https://reg-plasmafi.live\r\ncontent-encoding: zstd\r\ndate: Sun, 28 Jun 2026 13:02:00 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a12ce225eec84e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19192,"size_decoded":14864,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (19192), with no line terminators","md5":"0ded1cb14f31304d08e839829b86949a","sha1":"58a63157329d81b87a9375e33b16791799c34864","sha256":"7d1130d5186bf065b0f8d0737505aa6efe6f298d221824792e6e909126ffdd2d","sha512":"d80b6cb4da05fb90702bfeb3640a986025deb8343995a284d5a0344d7041abe2c30ae24c963c0778b8e9a8b88976a571792a48a401dc5df0af4d3a252f5b547e","ssdeep":"384:7I/AxCSEJLPlKbmitJnEwacxAYBhlEdQMso+sdHi2yciRm8:sI0SExPlO9JETcxAsA+M5+sHlyNz","tlshash":"6782d06d4a3d0452bfe7a01ffde0d22de8591b358eeae072fe7bad7c0184409545027a","first_seen":"2026-06-28T13:02:48.853687Z","last_seen":"2026-06-28T13:02:48.853687Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"reg-plasmafi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"103.101.85.74.sslip.io/php321/30yid7.php?m=2971086","fqdn":"103.101.85.74.sslip.io","domain":"sslip.io","tld":"io"},"ip":{"addr":"103.101.85.74","port":443,"asn":200239,"as":"Bogahost Bilisim ve Telekomunikasyon Hiz. San ve Tic. Ltd. Sti.","country":"Türkiye","country_code":"TR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://reg-plasmafi.live/php321/","date":"2026-06-28T13:02:09.687Z","timestamp":1782651729687,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"103.101.85.74.sslip.io","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 26 Jun 2026 17:00:26 GMT","end":"Thu, 24 Sep 2026 17:00:25 GMT"},"fingerprint":{"sha1":"57:1E:10:1D:AA:83:E0:46:F8:9C:74:53:C1:5B:83:E2:15:40:71:F3","sha256":"E8:0B:E0:EC:D6:B8:A4:AF:5F:70:8D:D8:6E:D8:01:DD:9F:5B:E1:DC:7E:45:3F:8B:C4:E9:B1:CE:99:E7:C6:5D"}}},"request":{"raw":"GET /php321/30yid7.php?m=2971086 HTTP/1.1\r\nHost: 103.101.85.74.sslip.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://reg-plasmafi.live/\r\nOrigin: https://reg-plasmafi.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Sun, 28 Jun 2026 13:02:09 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: *\r\nAccess-Control-Allow-Headers: *\r\nAccess-Control-Max-Age: 3600\r\nCache-Control: public, max-age=300\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3300143,"size_decoded":3300484,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"db1372d01bf77da64ddef4ec47ef5f59","sha1":"a3b0cf48b80d000a28af19d61dec704077545118","sha256":"1eb124615274b84b7953b84fa2128ced1e67595058d6631e0092140e3a37c2c8","sha512":"a6040672a2388a4e02ed9c26ad6ed9cf35bf13a3f04da28fc89e0062b943c1e4ed595843eafa36434404fadaa2ff50eb9e31e675cd5a874f102948f4baa62fe0","ssdeep":"24576:+b/YWmLkwsOukzMSPbg+lsVo5/Cr0OSzcfUjeTC0Iox9F0aM:kGkwdNZngkQCE9lM","tlshash":"132523e32f5694388f4c5e94b0eb1d0f39440d1318896699e9d5e8c236d9bf081eb97f","first_seen":"2026-06-28T11:40:58.555202Z","last_seen":"2026-06-28T13:02:48.854762Z","times_seen":7,"resource_available":false,"data":null}},"time_used":507,"timings":{"blocked":-1,"dns":0,"connect":53,"send":0,"wait":92,"receive":305,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reg-plasmafi.live/favicon.ico","fqdn":"reg-plasmafi.live","domain":"reg-plasmafi.live","tld":"live"},"ip":{"addr":"104.21.48.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://reg-plasmafi.live/","date":"2026-06-28T13:02:00.625Z","timestamp":1782651720625,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reg-plasmafi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:53:42 GMT","end":"Mon, 21 Sep 2026 14:51:00 GMT"},"fingerprint":{"sha1":"4B:55:03:11:39:5B:F8:C4:89:D3:59:67:8B:4A:C0:0F:3E:10:B4:7B","sha256":"E6:C3:75:49:14:30:5A:21:FC:A5:80:BB:D8:E9:00:C0:79:CB:DC:96:0A:E0:81:4F:B9:E5:E3:7A:B6:58:24:47"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: reg-plasmafi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://reg-plasmafi.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:02:00 GMT\r\ncontent-type: text/html\r\nvary: accept-encoding\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7ZNqGUFQEPqm1PBGO3uQg%2Bfiiuh8wll%2BbWbKmBpu5j1YvVxmjwnmRSBnIAPnSzizSbxnTkLF%2BpOQiYCJpWoc4ZEhymQDjJ90mDxE9s7l3zZV9GYmbrYfxkIWI0TT0J5urfd%2Bog%3D%3D\"}]}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a12ce225eecf4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162,"size_decoded":756,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"1b7c22a214949975556626d7217e9a39","sha1":"d01c97e2944166ed23e47e4a62ff471ab8fa031f","sha256":"340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87","sha512":"ba64847cf1d4157d50abe4f4a1e5c1996fe387c5808e2f758c7fb3213bfefe1f3712d343f0c30a16819749840954654a70611d2250fd0f7b032429db7afd2cc5","ssdeep":"","tlshash":"59c08c6e2613bd4cc6a3217522c3b490c09aa3a7a4ea46214840805331cb29a8ac7396","first_seen":"2023-03-10T20:17:28Z","last_seen":"2026-06-30T16:43:11.079816Z","times_seen":45811,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"reg-plasmafi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"reg-plasmafi.live/php321/jquery-3.6.0.min.js","fqdn":"reg-plasmafi.live","domain":"reg-plasmafi.live","tld":"live"},"ip":{"addr":"104.21.48.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://reg-plasmafi.live/php321/","date":"2026-06-28T13:02:07.987Z","timestamp":1782651727987,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reg-plasmafi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:53:42 GMT","end":"Mon, 21 Sep 2026 14:51:00 GMT"},"fingerprint":{"sha1":"4B:55:03:11:39:5B:F8:C4:89:D3:59:67:8B:4A:C0:0F:3E:10:B4:7B","sha256":"E6:C3:75:49:14:30:5A:21:FC:A5:80:BB:D8:E9:00:C0:79:CB:DC:96:0A:E0:81:4F:B9:E5:E3:7A:B6:58:24:47"}}},"request":{"raw":"GET /php321/jquery-3.6.0.min.js HTTP/1.1\r\nHost: reg-plasmafi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://reg-plasmafi.live/php321/\r\nCookie: cf_clearance=_oAXW_DGJEi.kjJ.jQTfUiTLeXqovsR92mpISx7Ep0Y-1782651727-1.2.1.1-.wTkErF4iXSKNwOBe9c.Bwn4dnV5aUK6lYaSNGP6DYXqRIGOR4gVOn4oLWXhM..bFnTrXPHdpQ0pG33XfyZ3yHtItdInV5k9BlMa2dCqc7qqrqUQdHzyUnRJWBgyDyRr.W5nYlvRftX7Mtg15HcmfSAjMb3wiJ4ZObpnpVo4bvwrZDEzOaM15ahFnRovJlue3wvRG3w9qwg8lqRw3f6i04LeBHDrRGRtiHAjKZKo1GvjI1K0vi9uMjPi87jJeB5IDapIFHOIN8g.SNCQXbwhA_8KNsIWCI3MrBB9.L8FhvhW1Ui8tli6QCkwf5KSUBRnEd1m4HNCTRM.GHVTjKq7ymDZI1dXx8Yt8ffNceJTOq10k..7gTmiakVQJ4JkUch3_YkOyuz8gZ5B.qECwtESiombw5YDn14.0m8Wuo7qURZl15bOt5.6D0DiuqJicrIoaNG5xad2QvASYoC35qEToMvPBiUGJ4c19Be2Jgbi.FL12FbVo0R.YDqdldLBDeTo\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:02:07 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a3ebdd5-15d9d\"\r\nlast-modified: Fri, 26 Jun 2026 17:58:45 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h8nrfN7oqgF4%2FxxXJZc0hZvUMGyObz1SxTN5Sx%2FkW0OxAnSDWQLA1BJgcKPX8L2qWkJ0ao45Nbo1F6jg%2FVZI2qPxWLLX3sybiv6ogSvjrp%2FlVgdOzYLFeO4N5uDPMU6MkNw0gQ%3D%3D\"}]}\r\nage: 4952\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a12ce253ed104e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89501,"size_decoded":33549,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-30T16:31:03.951838Z","times_seen":485955,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"reg-plasmafi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/4kvhz/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://reg-plasmafi.live/","date":"2026-06-28T13:02:00.691Z","timestamp":1782651720691,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/4kvhz/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 13:02:00 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npermissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-9nz2e6G4LC504hT3cKsobH' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self' https://hagen.challenges.cloudflare.com https://brunhild.challenges.cloudflare.com; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; trusted-types gIqNx7 default; require-trusted-types-for 'script'; sandbox allow-same-origin allow-scripts allow-popups allow-forms\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nreferrer-policy: same-origin\r\ndocument-policy: js-profiling\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a12ce2265b31b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: lddrsgbs;dur=249278, cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":249278,"size_decoded":96722,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"d5b59db7130ba8acb2f2c4fbac5d07ef","sha1":"0a20dc1de6e5e14389abac75089cd008dfacfd31","sha256":"96bd34591d01fe16db6ced3f1178b4d51d264ff4d1415be19c0dfa0c9788ad47","sha512":"db5d58343645d2ee0c26cd24daf83143bf7ec3010e7bc403f4774c0648db92b2c7ba7654d0cbee6a77ebc7fa1a882ce7d3384738b942bc4e0c77a81fdb9c9548","ssdeep":"6144:/LhLke6zenG2bCKIE4nfCjWXHZ85HQxdyY40rWr9Fx5MMqDKco4Oc/xtLdgnDCj6:hE96+6","tlshash":"a4340aca78d1b416532778b7005bb1ee72aa0c8445191d1d922085f13abcf3deb7faad","first_seen":"2026-06-28T13:02:48.855797Z","last_seen":"2026-06-28T13:02:48.855797Z","times_seen":1,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reg-plasmafi.live/php321/logo-green.png","fqdn":"reg-plasmafi.live","domain":"reg-plasmafi.live","tld":"live"},"ip":{"addr":"104.21.48.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://reg-plasmafi.live/php321/","date":"2026-06-28T13:02:07.991Z","timestamp":1782651727991,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reg-plasmafi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:53:42 GMT","end":"Mon, 21 Sep 2026 14:51:00 GMT"},"fingerprint":{"sha1":"4B:55:03:11:39:5B:F8:C4:89:D3:59:67:8B:4A:C0:0F:3E:10:B4:7B","sha256":"E6:C3:75:49:14:30:5A:21:FC:A5:80:BB:D8:E9:00:C0:79:CB:DC:96:0A:E0:81:4F:B9:E5:E3:7A:B6:58:24:47"}}},"request":{"raw":"GET /php321/logo-green.png HTTP/1.1\r\nHost: reg-plasmafi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://reg-plasmafi.live/php321/\r\nCookie: cf_clearance=_oAXW_DGJEi.kjJ.jQTfUiTLeXqovsR92mpISx7Ep0Y-1782651727-1.2.1.1-.wTkErF4iXSKNwOBe9c.Bwn4dnV5aUK6lYaSNGP6DYXqRIGOR4gVOn4oLWXhM..bFnTrXPHdpQ0pG33XfyZ3yHtItdInV5k9BlMa2dCqc7qqrqUQdHzyUnRJWBgyDyRr.W5nYlvRftX7Mtg15HcmfSAjMb3wiJ4ZObpnpVo4bvwrZDEzOaM15ahFnRovJlue3wvRG3w9qwg8lqRw3f6i04LeBHDrRGRtiHAjKZKo1GvjI1K0vi9uMjPi87jJeB5IDapIFHOIN8g.SNCQXbwhA_8KNsIWCI3MrBB9.L8FhvhW1Ui8tli6QCkwf5KSUBRnEd1m4HNCTRM.GHVTjKq7ymDZI1dXx8Yt8ffNceJTOq10k..7gTmiakVQJ4JkUch3_YkOyuz8gZ5B.qECwtESiombw5YDn14.0m8Wuo7qURZl15bOt5.6D0DiuqJicrIoaNG5xad2QvASYoC35qEToMvPBiUGJ4c19Be2Jgbi.FL12FbVo0R.YDqdldLBDeTo\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:02:08 GMT\r\ncontent-type: image/png\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 26 Jun 2026 17:58:45 GMT\r\npriority: u=5,i\r\netag: \"6a3ebdd5-2036\"\r\naccept-ranges: bytes\r\nage: 4952\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EtOTr1q64TzBYhEWW%2FKA4lSfEtYcDMcV8hvMMFY3DKGTfzAakFskRIIkjCO7rBIoGWEZLGL04dgS3cvFa9Zq1UYeZWxMLTA5bHFdUTr4uYC2qZa09lzYQ3QICJVH6cQJQpfS1w%3D%3D\"}]}\r\ncontent-length: 8246\r\ncf-ray: a12ce253fd124e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8246,"size_decoded":8946,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"f683473cd3748b66166f54b380398889","sha1":"118bf80d840b7e1665fea0abc0fb9dac02590d03","sha256":"bfd22ad3169b22a3b4c9cf99f25534f639249156186695e879e6d801ca70bcfc","sha512":"513ff0738ecf4f478aa6ed0aa0d467d1028927a73e9a79be5c7fc90e338239a490693e26fd5ed3ff00d5092ea69ecc9f31f3977783b929670f0e44160235ab18","ssdeep":"192:sSlyZ+/dNKRPMbuk8PVBsIN7sbdxvfCAFWFX0/uGQk:rgZ+qR+fBlbTCAF60/BL","tlshash":"02024bf07f15a7a7762fc3d2921c5e7b307013dd8a922635d296ae92383350c57ac169","first_seen":"2025-08-12T04:00:02.439458Z","last_seen":"2026-06-29T08:40:56.246432Z","times_seen":30,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"reg-plasmafi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"reg-plasmafi.live/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a12ce2219dd84e4c","fqdn":"reg-plasmafi.live","domain":"reg-plasmafi.live","tld":"live"},"ip":{"addr":"104.21.48.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://reg-plasmafi.live/","date":"2026-06-28T13:02:00.243Z","timestamp":1782651720243,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reg-plasmafi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:53:42 GMT","end":"Mon, 21 Sep 2026 14:51:00 GMT"},"fingerprint":{"sha1":"4B:55:03:11:39:5B:F8:C4:89:D3:59:67:8B:4A:C0:0F:3E:10:B4:7B","sha256":"E6:C3:75:49:14:30:5A:21:FC:A5:80:BB:D8:E9:00:C0:79:CB:DC:96:0A:E0:81:4F:B9:E5:E3:7A:B6:58:24:47"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=a12ce2219dd84e4c HTTP/1.1\r\nHost: reg-plasmafi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://reg-plasmafi.live/?__cf_chl_rt_tk=jRiuU0.j1gCVgAJ3u2czd5Kn.df1iYmJEcevEa1HecQ-1782651719-1.0.1.1-fx7t6Pi8yFVahF7_TFQLNWxcqLVqscqmuZ.iuCH_oOA\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\ncontent-encoding: zstd\r\ndate: Sun, 28 Jun 2026 13:02:00 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a12ce2238e4c4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":211552,"size_decoded":77087,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"643a7ed367694ad336c112f4f3753184","sha1":"d6221d8b53f65bcd40a008f10610d00ff027752c","sha256":"4a54d3a2a665d62acc866f5c3c0254eee8f11bc34ceb2e345484b2177a9dd346","sha512":"44ced7d3b3f77a686ab078b561a4ec0f2dd24905038239b0bc303b850def086518290f67b17bc32b9337908b8e393fd2e7e7776b2ad5c6599eabbd6ce84bd712","ssdeep":"6144:Xv2cYu2v/Jau9BYxzTnekm0LGo2LpMbh/OxfVq0tPt9/Z9GgLEupbVUORu93Y8Cx:uS4","tlshash":"6024f9cf74c27417022324f5846fb08fa26e4d80031c6d2d996186e17a7df7daa7fa69","first_seen":"2026-06-28T13:02:48.857166Z","last_seen":"2026-06-28T13:02:48.857166Z","times_seen":1,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"reg-plasmafi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/4kvhz/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-06-28T13:02:00.805Z","timestamp":1782651720805,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 20:15:28 GMT","end":"Mon, 14 Sep 2026 21:15:13 GMT"},"fingerprint":{"sha1":"77:27:72:42:CF:51:E8:8C:7C:3E:8C:4C:A1:F0:9A:86:96:B9:0A:16","sha256":"ED:7C:F7:38:B3:0F:00:86:32:D1:14:CE:C0:FF:CA:0E:7C:86:EE:49:51:EF:A4:4B:AA:5C:B6:7C:00:B5:3D:F3"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/4kvhz/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 13:02:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 86\r\npriority: u=6,i\r\nserver: cloudflare\r\ncf-ray: a12ce2278c5bb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86,"size_decoded":305,"mime_type":"image/png","magic":"PNG image data, 2 x 2, 8-bit grayscale, non-interlaced","md5":"f4787cfad1a1e3b9dabfb7997dd91986","sha1":"e1a99c7f5e9f5b083a56456b3ff287bff47b3e1f","sha256":"d86da054c28b33418c4c31228d89338e21354cae3b414f42de5072f72b68dbc6","sha512":"754b3e9aa0f951aaa383ffa0322d291839d8bbe370ac97806be581120c23dd8fc4187d00f296e6b202f39b0e92c731a8c1d5d6089401ae08e228a5119de60bd1","ssdeep":"","tlshash":"c6a012d56180ad2bc18a0332c1501620f8301042115301340443c8154411f05c2d9a03","first_seen":"2026-06-24T11:31:11.263775Z","last_seen":"2026-06-30T06:44:47.240343Z","times_seen":40,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"reg-plasmafi.live/","fqdn":"reg-plasmafi.live","domain":"reg-plasmafi.live","tld":"live"},"ip":{"addr":"104.21.48.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-28T13:02:07.489Z","timestamp":1782651727489,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reg-plasmafi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:53:42 GMT","end":"Mon, 21 Sep 2026 14:51:00 GMT"},"fingerprint":{"sha1":"4B:55:03:11:39:5B:F8:C4:89:D3:59:67:8B:4A:C0:0F:3E:10:B4:7B","sha256":"E6:C3:75:49:14:30:5A:21:FC:A5:80:BB:D8:E9:00:C0:79:CB:DC:96:0A:E0:81:4F:B9:E5:E3:7A:B6:58:24:47"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: reg-plasmafi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://reg-plasmafi.live/?__cf_chl_tk=jRiuU0.j1gCVgAJ3u2czd5Kn.df1iYmJEcevEa1HecQ-1782651719-1.0.1.1-fx7t6Pi8yFVahF7_TFQLNWxcqLVqscqmuZ.iuCH_oOA\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 2093\r\nOrigin: https://reg-plasmafi.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=_oAXW_DGJEi.kjJ.jQTfUiTLeXqovsR92mpISx7Ep0Y-1782651727-1.2.1.1-.wTkErF4iXSKNwOBe9c.Bwn4dnV5aUK6lYaSNGP6DYXqRIGOR4gVOn4oLWXhM..bFnTrXPHdpQ0pG33XfyZ3yHtItdInV5k9BlMa2dCqc7qqrqUQdHzyUnRJWBgyDyRr.W5nYlvRftX7Mtg15HcmfSAjMb3wiJ4ZObpnpVo4bvwrZDEzOaM15ahFnRovJlue3wvRG3w9qwg8lqRw3f6i04LeBHDrRGRtiHAjKZKo1GvjI1K0vi9uMjPi87jJeB5IDapIFHOIN8g.SNCQXbwhA_8KNsIWCI3MrBB9.L8FhvhW1Ui8tli6QCkwf5KSUBRnEd1m4HNCTRM.GHVTjKq7ymDZI1dXx8Yt8ffNceJTOq10k..7gTmiakVQJ4JkUch3_YkOyuz8gZ5B.qECwtESiombw5YDn14.0m8Wuo7qURZl15bOt5.6D0DiuqJicrIoaNG5xad2QvASYoC35qEToMvPBiUGJ4c19Be2Jgbi.FL12FbVo0R.YDqdldLBDeTo\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nSec-Fetch-User: ?1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:02:07 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlocation: https://reg-plasmafi.live/php321/\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QBPSiFguK0gtXgN0wKm9uxOzGUoRFk3awPX2SFlvYFdEcs5KIR50PXtU7SzIDzwD0idWMuR82AFGTIPzo9EnyOh5Q%2BNDqIqiiSh%2F3VlQ4u%2BDLhGXxXj69h9U55EPJiDyiQ24LQ%3D%3D\"}]}\r\ncf-ray: a12ce250dcab4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-30T16:32:23.025768Z","times_seen":16864050,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"reg-plasmafi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"reg-plasmafi.live/php321/36aaf9d54bb7f7f2.css","fqdn":"reg-plasmafi.live","domain":"reg-plasmafi.live","tld":"live"},"ip":{"addr":"104.21.48.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://reg-plasmafi.live/php321/","date":"2026-06-28T13:02:07.974Z","timestamp":1782651727974,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reg-plasmafi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:53:42 GMT","end":"Mon, 21 Sep 2026 14:51:00 GMT"},"fingerprint":{"sha1":"4B:55:03:11:39:5B:F8:C4:89:D3:59:67:8B:4A:C0:0F:3E:10:B4:7B","sha256":"E6:C3:75:49:14:30:5A:21:FC:A5:80:BB:D8:E9:00:C0:79:CB:DC:96:0A:E0:81:4F:B9:E5:E3:7A:B6:58:24:47"}}},"request":{"raw":"GET /php321/36aaf9d54bb7f7f2.css HTTP/1.1\r\nHost: reg-plasmafi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://reg-plasmafi.live/php321/\r\nCookie: cf_clearance=_oAXW_DGJEi.kjJ.jQTfUiTLeXqovsR92mpISx7Ep0Y-1782651727-1.2.1.1-.wTkErF4iXSKNwOBe9c.Bwn4dnV5aUK6lYaSNGP6DYXqRIGOR4gVOn4oLWXhM..bFnTrXPHdpQ0pG33XfyZ3yHtItdInV5k9BlMa2dCqc7qqrqUQdHzyUnRJWBgyDyRr.W5nYlvRftX7Mtg15HcmfSAjMb3wiJ4ZObpnpVo4bvwrZDEzOaM15ahFnRovJlue3wvRG3w9qwg8lqRw3f6i04LeBHDrRGRtiHAjKZKo1GvjI1K0vi9uMjPi87jJeB5IDapIFHOIN8g.SNCQXbwhA_8KNsIWCI3MrBB9.L8FhvhW1Ui8tli6QCkwf5KSUBRnEd1m4HNCTRM.GHVTjKq7ymDZI1dXx8Yt8ffNceJTOq10k..7gTmiakVQJ4JkUch3_YkOyuz8gZ5B.qECwtESiombw5YDn14.0m8Wuo7qURZl15bOt5.6D0DiuqJicrIoaNG5xad2QvASYoC35qEToMvPBiUGJ4c19Be2Jgbi.FL12FbVo0R.YDqdldLBDeTo\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:02:07 GMT\r\ncontent-type: text/css\r\netag: W/\"6a3ebdd5-43a23\"\r\nlast-modified: Fri, 26 Jun 2026 17:58:45 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=68Lg%2BL0NqSgxT4SBSS0riMXeYGSBAAaGfJSQhooVTa9FFYaovnZ5YH49yJ8BgrSgkkh1rrhYNwLpFbIAFwcNgsCuI766BOBkT2avvPu%2F7PSXmDWv5iXVLZ51yZ%2FtO4q3qBkxcA%3D%3D\"}]}\r\nage: 4952\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a12ce253dd0b4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":277027,"size_decoded":26205,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"5543576d42cdc767956cf564b763a478","sha1":"737bea776195fdf18c13507dcd6cba6c15d24caa","sha256":"cf20035842054bb3a6f800ccca4c5ec2615dfe7cc4570e5ecb214678c02dff80","sha512":"9936879b38065a850081b360196dbb75fe9e36e90261044a59c2cd0d2a16e6ed963830cd97445fd6f9d0efa433f95ea385fb09ea94934c36be360ea1a491ef94","ssdeep":"768:hy73l5ovja43GIP+1ey9ktRLD8QbVBiy/LDqsgCSMV3Z7eQNJ2o+jzEi8JFbX11r:8F199yHnbkiiAMrYPV6rMrjmkB84t","tlshash":"da4400d5bd6cff3e693b647d36c4849c8d8778a2cc40879fe82530de19d979820a364a","first_seen":"2026-06-28T11:40:58.538508Z","last_seen":"2026-06-29T08:40:56.25405Z","times_seen":29,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"reg-plasmafi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"reg-plasmafi.live/php321/499890bf53c59576.css","fqdn":"reg-plasmafi.live","domain":"reg-plasmafi.live","tld":"live"},"ip":{"addr":"104.21.48.248","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://reg-plasmafi.live/php321/index_6.html","date":"2026-06-28T13:02:09.601Z","timestamp":1782651729601,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"reg-plasmafi.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 23 Jun 2026 13:53:42 GMT","end":"Mon, 21 Sep 2026 14:51:00 GMT"},"fingerprint":{"sha1":"4B:55:03:11:39:5B:F8:C4:89:D3:59:67:8B:4A:C0:0F:3E:10:B4:7B","sha256":"E6:C3:75:49:14:30:5A:21:FC:A5:80:BB:D8:E9:00:C0:79:CB:DC:96:0A:E0:81:4F:B9:E5:E3:7A:B6:58:24:47"}}},"request":{"raw":"GET /php321/499890bf53c59576.css HTTP/1.1\r\nHost: reg-plasmafi.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://reg-plasmafi.live/php321/index_6.html\r\nCookie: cf_clearance=_oAXW_DGJEi.kjJ.jQTfUiTLeXqovsR92mpISx7Ep0Y-1782651727-1.2.1.1-.wTkErF4iXSKNwOBe9c.Bwn4dnV5aUK6lYaSNGP6DYXqRIGOR4gVOn4oLWXhM..bFnTrXPHdpQ0pG33XfyZ3yHtItdInV5k9BlMa2dCqc7qqrqUQdHzyUnRJWBgyDyRr.W5nYlvRftX7Mtg15HcmfSAjMb3wiJ4ZObpnpVo4bvwrZDEzOaM15ahFnRovJlue3wvRG3w9qwg8lqRw3f6i04LeBHDrRGRtiHAjKZKo1GvjI1K0vi9uMjPi87jJeB5IDapIFHOIN8g.SNCQXbwhA_8KNsIWCI3MrBB9.L8FhvhW1Ui8tli6QCkwf5KSUBRnEd1m4HNCTRM.GHVTjKq7ymDZI1dXx8Yt8ffNceJTOq10k..7gTmiakVQJ4JkUch3_YkOyuz8gZ5B.qECwtESiombw5YDn14.0m8Wuo7qURZl15bOt5.6D0DiuqJicrIoaNG5xad2QvASYoC35qEToMvPBiUGJ4c19Be2Jgbi.FL12FbVo0R.YDqdldLBDeTo\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 28 Jun 2026 13:02:09 GMT\r\ncontent-type: text/css\r\netag: W/\"6a3ebdd5-1c369\"\r\nlast-modified: Fri, 26 Jun 2026 17:58:45 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mmobci56QgltKTN1z5XPYSGK%2FI2W3IvHyB5KiPZtJgKU9Z5AyRuHgti2IoAhVrrzvP%2BpstfF0HI5rUo6cJ6uS%2B%2FuvdpB3j9d3LlJBKPJS%2F%2BZDUKTsWTnqM2MbebYj05%2Ffs%2B6Wg%3D%3D\"}]}\r\nage: 4953\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a12ce25e0e8f4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":115561,"size_decoded":22226,"mime_type":"text/css","magic":"ASCII text, with very long lines (59489)","md5":"1d2473113bcf24d1ad767c708a597aee","sha1":"0810429795005e8afe81c9461e4a40a0d86c2bac","sha256":"a6ee82d3c921a9c43f54c269baee410f45bfd57318c1d16a4b79131397a217fc","sha512":"936d2204ac17b15017af56df8953f1745fe03a6aebdd24f39e2f9699a11a25a67e0040f261440a084d4d82732d0d1012aa1e9de583c755693fa20d45bff96377","ssdeep":"3072:QGlhfV+2t5ZeYCmUD8VN4ZUT2MztqhjrSWxDhbYZlvBzFY:QGlhfV+2t5ZexmUoptqhjrSWxDhbYZl4","tlshash":"7db3821df612113f3c2780f9d29cedada116b1c0ee296be6be4261118ac67f75de3214","first_seen":"2026-06-23T11:34:46.60726Z","last_seen":"2026-06-28T14:40:33.823406Z","times_seen":20,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"reg-plasmafi.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}