{"report_id":"db5ab7b4-cf59-4fa6-83e6-a333ac09fcc8","version":0,"status":"done","tags":[],"date":"2026-08-23T01:42:59Z","url":{"schema":"https","addr":"plushmc.com/","fqdn":"plushmc.com","domain":"plushmc.com","tld":"com"},"ip":{"addr":"75.2.60.5","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"plushmc.com/","fqdn":"plushmc.com","domain":"plushmc.com","tld":"com"},"title":"PlushMC | PlushCraft SMP — Launcher \u0026 Custom Server","dom":{"size":30813,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (511)","md5":"38bbe3982d125a67dc60f58385f53d21","sha1":"e1ef41c109e2911916d51db29239742753b4528f","sha256":"3db5e40a39452c96e19a3e3ccdf05542f124e7e21b31d61e4dda59b3c9818123","sha512":"3e3ccfe5deae86cd2d69287c87895bf1545d0d679f83ea7a2a428c2488a68d7e301430bd114aad8a1f5e3f01ebd7223ee6427a630e6cc6fab2f10c1b894f7549","ssdeep":"192:kVFwhDD5zBphO2CT5txObpZ68XLBIS2jkHwAo5noq9pPtRVv9tSj10v1f84sI4TF:krwhmGNIS/w7CqtnS21flSd1co+N5+d","tlshash":"3cd2752670f1603f016b82c6776a9b2b7ee1a207e90e461077bd0b845fe7c85ec1364e","dom_hash":"domhash19b7d1b410ac70ee401ec228fd96e1a3","first_seen":"2026-08-23T01:43:02.550122Z","last_seen":"2026-08-23T01:43:02.550122Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"plushmc.com/","fqdn":"plushmc.com","domain":"plushmc.com","tld":"com"},"ip":{"addr":"75.2.60.5","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-27T01:42:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"pinkyslauncher.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"pinkyslauncher.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"pinkyslauncher.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"fontenddev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-16T22:23:57.509837Z","alert_count":0,"request_count":1,"received_data":11509,"sent_data":563,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"plushmc.com","ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-06-07","domain_rank":0,"first_seen":"2026-08-23T01:42:32.997098Z","last_seen":"2026-08-23T01:42:32.997098Z","alert_count":0,"request_count":8,"received_data":102681,"sent_data":3548,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-08-16T22:46:07.924415Z","alert_count":0,"request_count":3,"received_data":379482,"sent_data":1743,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pinkyslauncher.com","ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2026-05-19","domain_rank":0,"first_seen":"2026-07-27T22:32:41.479645Z","last_seen":"2026-08-23T01:42:33.732005Z","alert_count":30,"request_count":10,"received_data":12352367,"sent_data":5537,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}]},{"fqdn":"fontenddev.com","ip":{"addr":"172.105.128.43","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"domain_registered":"2018-09-07","domain_rank":0,"first_seen":"2026-07-24T06:17:59.235524Z","last_seen":"2026-08-23T01:42:33.769445Z","alert_count":2,"request_count":2,"received_data":45777,"sent_data":1023,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP:8.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Autoptimize:3.1.15.1","description":"Autoptimize is a WordPress plugin that optimises website performance by aggregating, minifying, and compressing HTML, CSS, and JavaScript files.","website":"https://autoptimize.com","common_platform_enumeration":"","icon":"Autoptimize.png","categories":["WordPress plugins","Performance"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-16T22:20:46.906465Z","alert_count":0,"request_count":6,"received_data":177316,"sent_data":3304,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"plushmc.com/js/counter.js","fqdn":"plushmc.com","domain":"plushmc.com","tld":"com"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b33c8160061356100d973a0ea5a96520","sha1":"cc73f661f87f47f57176de2a514e8b98ae365708","sha256":"a4242cc381f5e11976cfb3ebebad572ce30e7d785c2bd4c37adcffa1693244ac","sha512":"1f9aabc5404244204a7c0b969a12f1ae1cd8243a175b2bedb48c21d46c56b9b4db72f41d7719a27ef94f7086798ee7bd0a8ff0c0cf049c76d417b628aaec3933","ssdeep":"","tlshash":"03f05209fac911203a81d237afb968083838f2031806e567b88c19008ffbb00b0edad8","size":524,"data":"","first_seen":"2026-07-30T02:11:04.01306Z","last_seen":"2026-08-23T01:43:02.565229Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plushmc.com/","fqdn":"plushmc.com","domain":"plushmc.com","tld":"com"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"806f8aa760a70a7314df97d1fd41148d","sha1":"8e1d55ff39b7aca936b37d7475201a5a162c8af6","sha256":"7fe5d7548930cbf7d69768c363fee455bf3fd2f05f84fe10cc476fea7a5c7a4b","sha512":"aa979568b874e9274fbb91dbfc127baf1839b1ac5aa8618971828f04e3f921f0fce14fc6a45ca430b72015fb0507ab358efd759507011c9f5dd061f5298b86ba","ssdeep":"","tlshash":"39b09b793114513144a5147ef695f5947632222151156510d10d44441a7994d1a14f89","size":118,"data":"","first_seen":"2026-08-23T01:42:39.027036Z","last_seen":"2026-08-23T01:43:02.570289Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plushmc.com/","fqdn":"plushmc.com","domain":"plushmc.com","tld":"com"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"5ec6888e6bb3c581ea0accbeb858bf7d","sha1":"e4608cd66d927f91b612b8c4e8e531461b9526cc","sha256":"37a032a7bebd1271bc74109848da07bdb65bac25488b41052e82d79368ce95ae","sha512":"70dc96ca65d054e02e9d6347a64577f1e9366c81792ffd1ee61de2ee3fb6ceccecb5a312c127b3e564bb103a057fef2977760244a70dff3e1beae591e2cc4422","ssdeep":"","tlshash":"d4d0127e1066912084ab25bea94791543a2232116116a501fd0d5c401ff592d5652f5d","size":203,"data":"","first_seen":"2026-08-23T01:42:39.029011Z","last_seen":"2026-08-23T01:43:02.57098Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plushmc.com/","fqdn":"plushmc.com","domain":"plushmc.com","tld":"com"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d0c38b143886fbd9ccde6e6e4c9769fa","sha1":"52046b98864f4719f35d16cabbe1347249c40f21","sha256":"65b6a305f363e0b14f60c85b5f163cb4925b2e8eaa5684993d0cb7630f4ef0a7","sha512":"77d4f78c6aea3aeaadce5a321530a755208a3e38d5dc4286a7574644587a805522e6408b76effe23c6cac655ce30eb8bdb919f5d67e0ffa13b62c1b86b7bcf93","ssdeep":"48:AnS5E87y6Z/MlUZyb5QKgomsj/4z5Pu6m5+i71/3pHYuiKh88ohO8RvYAQ2t/T:9y08QKgob/i5PuNwiB/3p4u9h3oUUo4T","tlshash":"b491a81e35b3103a857775fa878b529a763130037805ce193eacc7419f919398eb2bde","size":4600,"data":"","first_seen":"2026-08-23T01:42:39.03034Z","last_seen":"2026-08-23T01:43:02.571839Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plushmc.com/js/loader.js","fqdn":"plushmc.com","domain":"plushmc.com","tld":"com"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9870ddcbaf30b1b2ec2b1a7579b786cc","sha1":"db506a9a74c52e3660b5e842c1cf25bf99b6af42","sha256":"c0322bc303f9189ecf6aee2cc3fb39623b9be9c976c55e1c3a5f5fba94ba3431","sha512":"9e05e196621a7a8058d0ddddf1970a5bc59bac3b46da6ef1fc661f56dc01b9e59692a6b051ca9fb4bce1b641598b21c4937f651ebf4ce38f6a204ff570644e2b","ssdeep":"","tlshash":"ee31e3163ab38165173bd02507ffa9083538612b418ad9503d3d9148cfe1badb629bed","size":1683,"data":"","first_seen":"2026-08-23T01:42:39.01854Z","last_seen":"2026-08-23T01:43:02.559612Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plushmc.com/js/protection.js","fqdn":"plushmc.com","domain":"plushmc.com","tld":"com"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"749019b81a36824ad708d7b23d8e1e15","sha1":"9162a59b97e6f8a80520e0d1190563c676de247f","sha256":"0d4682c24dc913ba34f20053fc195ca12cc647f742f35acc7a5776147615d3a9","sha512":"f93fa956373e17b28342ac9c289772e6834b1c7be1cd224dd5b89c65dc6f1816d7990713d9b28c4a199a91e729173d10bede3b19d8c196bf67d81374e0663f53","ssdeep":"","tlshash":"cf0124d5999259e065baf2ba426ee130ecb318e708819351b98e0d08afb2409877adc5","size":790,"data":"","first_seen":"2026-07-30T02:11:03.998132Z","last_seen":"2026-08-23T01:43:02.552804Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plushmc.com/js/config.js","fqdn":"plushmc.com","domain":"plushmc.com","tld":"com"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"520b66d3b9ac2f4c54130fd45b4ba200","sha1":"ea2ac6d2513a1a253f505017ea1c9ba05043915b","sha256":"508ba6e0fdaaa462c197a4f13da9c22e6c2050bb472bd10eb952767a2626b5da","sha512":"3de6519d10d3f4416c689dde5750fe7839f8798044edbd3174e81cdbb5ef33287a1c1896fa6b83b705c44abaf386d721cbbc9729155a85b10599e8e6fa43af44","ssdeep":"","tlshash":"a801489a65b4c46d6831272e5b0fb22667a610430409e3153efc6146ff9c86f3ea1ad9","size":847,"data":"","first_seen":"2026-08-23T01:42:38.993435Z","last_seen":"2026-08-23T01:43:02.560661Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"plushmc.com/index.css","fqdn":"plushmc.com","domain":"plushmc.com","tld":"com"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://plushmc.com/","date":"2026-08-23T01:42:28.110Z","timestamp":1787449348110,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plushmc.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 22:53:49 GMT","end":"Wed, 04 Nov 2026 22:53:48 GMT"},"fingerprint":{"sha1":"97:7E:3E:4F:87:EC:76:D0:13:72:E6:D3:81:85:AF:37:13:1E:87:8F","sha256":"1E:F1:02:7D:1D:BC:5D:D1:A8:DA:F5:F2:50:43:63:0A:BD:E3:4B:C9:CE:63:15:69:57:0C:69:06:88:65:8E:D8"}}},"request":{"raw":"GET /index.css HTTP/1.1\r\nHost: plushmc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plushmc.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 31\r\ncache-control: public,max-age=3600,stale-while-revalidate=300\r\ncache-status: \"Netlify Edge\"; hit; ttl=31535969\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Sun, 23 Aug 2026 01:42:28 GMT\r\netag: \"38e1c06173bdae897a1863f3167dbf2f-ssl-df\"\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-nf-request-id: 01M0P4H40QY1G7FWKBA8NTHHKJ\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 3976\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":18082,"size_decoded":4666,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text","md5":"2065eda715652fd92f1c0e5f7fd0d022","sha1":"ff823d4357d3048bb3446f5c6024338df3a64e10","sha256":"21e8ebca9300682eec3338867c2da6b93d50b0d98426a38a11967bae9b4d44e6","sha512":"0bea119e37d676217a804a5647afc8323c07d283e128677002b2f5e05948be436ad135a76eeb60dfd677019006172422f0c405860389841a6558237d36872efb","ssdeep":"192:1xiLxTw/LZ2b4lAy/iWhJXOQbkmT6BfeOC6ZmPlCYFD06rpjO6XMhKys6wfO9aR0:1xiLxTkeYcfA1IZEeNv","tlshash":"02824f546b235575ac27a1597beb974e332da207cc1ac82d7ac512048fca3fd72d2f88","first_seen":"2026-08-23T01:42:39.00331Z","last_seen":"2026-08-23T01:43:02.551978Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plushmc.com/js/protection.js","fqdn":"plushmc.com","domain":"plushmc.com","tld":"com"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plushmc.com/","date":"2026-08-23T01:42:28.119Z","timestamp":1787449348119,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plushmc.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 22:53:49 GMT","end":"Wed, 04 Nov 2026 22:53:48 GMT"},"fingerprint":{"sha1":"97:7E:3E:4F:87:EC:76:D0:13:72:E6:D3:81:85:AF:37:13:1E:87:8F","sha256":"1E:F1:02:7D:1D:BC:5D:D1:A8:DA:F5:F2:50:43:63:0A:BD:E3:4B:C9:CE:63:15:69:57:0C:69:06:88:65:8E:D8"}}},"request":{"raw":"GET /js/protection.js HTTP/1.1\r\nHost: plushmc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plushmc.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 31\r\ncache-control: public,max-age=3600,stale-while-revalidate=300\r\ncache-status: \"Netlify Edge\"; hit; ttl=31535969\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 23 Aug 2026 01:42:28 GMT\r\netag: \"2a794c8c37711bc6a59595f307c2840a-ssl\"\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-nf-request-id: 01M0P4H411KQ26PPCJGXVVZXYE\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 790\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":790,"size_decoded":1445,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"749019b81a36824ad708d7b23d8e1e15","sha1":"9162a59b97e6f8a80520e0d1190563c676de247f","sha256":"0d4682c24dc913ba34f20053fc195ca12cc647f742f35acc7a5776147615d3a9","sha512":"f93fa956373e17b28342ac9c289772e6834b1c7be1cd224dd5b89c65dc6f1816d7990713d9b28c4a199a91e729173d10bede3b19d8c196bf67d81374e0663f53","ssdeep":"","tlshash":"cf0124d5999259e065baf2ba426ee130ecb318e708819351b98e0d08afb2409877adc5","first_seen":"2026-07-30T02:11:03.998132Z","last_seen":"2026-08-23T01:43:02.552804Z","times_seen":4,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/webfonts/fa-brands-400.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://plushmc.com/","date":"2026-08-23T01:42:28.326Z","timestamp":1787449348326,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://plushmc.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 23 Aug 2026 01:42:28 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 117372\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CfEH%2FzyJhyvmRO4sp6tB0oV6DlfcsG2MD6IIgMwPHxyE1FfiOwVyBt%2F0TPrfgtB5Isjy7hFa4%2Fpuzak8pvA%2BzYZ5vkIXFZJ2UKVykoTYD3i%2F5M9JzIMiRf803LhqvQSg72G5AYzA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=5,i=?0\r\nserver: cloudflare\r\ncf-ray: a2f66bbb0b8a32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":117372,"size_decoded":118362,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 117372, version 773.768","md5":"b6356c957274676e6571c1ff5e11c9a8","sha1":"4022f95e001d734ca8f082b8e7627abd205609ec","sha256":"3a8924cd5203a28628716aedb5cef0943da4c3b44e3ffcee90ab06387b41c490","sha512":"83de79c74480fafc62cdac4012ff2a129d8701772ee16216c3d9488826ac21a9c2f8a416fe3208a61bfea7e12c24ac1cc2d26f6d22bd2b0ba39a22d630238b59","ssdeep":"3072:U3JKgVzg5ybfXYe5W59JPQaPWKSsx/DBMnVnqedkAFqPQTzIBIOK2vDMF:IVM5A5GJPQaH/NMtBkAvcnYF","tlshash":"c4b312f88b7ac9a5e304e67b55e4613555a0aec8b180f35453be7c2c221e10dc67afe3","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-08-25T08:54:23.253365Z","times_seen":30561,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":39,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pinkyslauncher.com/images/hellokitty.mp4","fqdn":"pinkyslauncher.com","domain":"pinkyslauncher.com","tld":"com"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://plushmc.com/","date":"2026-08-23T01:42:28.636Z","timestamp":1787449348636,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pinkyslauncher.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 08:04:05 GMT","end":"Fri, 16 Oct 2026 08:04:04 GMT"},"fingerprint":{"sha1":"F7:D4:F2:F4:80:78:65:45:92:A4:80:9D:9E:D8:CB:F3:5C:D6:C6:2A","sha256":"03:23:24:06:53:8A:E7:D9:13:7F:3D:DA:1C:18:8A:FC:7F:94:95:E7:EE:F9:80:48:43:EE:E4:C2:D3:DD:DA:CF"}}},"request":{"raw":"GET /images/hellokitty.mp4 HTTP/1.1\r\nHost: pinkyslauncher.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nReferer: https://plushmc.com/\r\nRange: bytes=1343488-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\naccept-ranges: bytes\r\nage: 30\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit; ttl=31535970\r\ncontent-range: bytes 1343488-11511766/11511767\r\ncontent-type: video/mp4\r\ndate: Sun, 23 Aug 2026 01:42:28 GMT\r\netag: \"2be603355f1f68b0ec1bf9b48f9bd99f-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01M0P4H4H67ATVKGKFA5R86909\r\ncontent-length: 10168279\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":10168279,"size_decoded":10168732,"mime_type":"video/mp4","magic":"data","md5":"9a1f9894118a5f280d23bc189e85b9b9","sha1":"04387e478cb5b3b128b2dca3a0ba8239ffd88778","sha256":"ba2c173122d90495ac7491c77c49ac5dce83ad764b6db8999e46b1c9eb89d991","sha512":"60cc9bcb092aed87453ad3fdd64fe3eaa92569dc30669eabc45b17a4a57d063e01b911b0411aecb636c001026af55cbcd6cb76e11e4bc4b50566aed661dd34e3","ssdeep":"24576:OAwiQSIwEEDnm4UPPnBFOo1KU6QmnP48QP2ZY8GI:OAw58EEb+F1x6NAMZcI","tlshash":"5d25332cd4bce994b2f9a8f32f98673a069c2aa4c459470f7293e431647e5dc0b7c91d","first_seen":"2026-08-23T01:43:02.554141Z","last_seen":"2026-08-23T01:43:02.554141Z","times_seen":1,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":210,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"pinkyslauncher.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"pinkyslauncher.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"pinkyslauncher.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fontenddev.com/fonts/minecraft/Minecraft.woff","fqdn":"fontenddev.com","domain":"fontenddev.com","tld":"com"},"ip":{"addr":"172.105.128.43","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://plushmc.com/","date":"2026-08-23T01:42:29.732Z","timestamp":1787449349732,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fontenddev.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:25:49 GMT","end":"Wed, 11 Nov 2026 09:25:48 GMT"},"fingerprint":{"sha1":"EB:4D:C2:27:61:A8:38:C9:E8:DC:F8:FB:13:C8:57:E0:46:EA:7E:75","sha256":"FB:CD:B4:D7:AB:3A:88:87:73:E4:FF:A0:2E:BE:A7:86:7E:7D:69:0E:29:08:B1:4B:0F:C3:DE:01:BC:40:D6:9B"}}},"request":{"raw":"GET /fonts/minecraft/Minecraft.woff HTTP/1.1\r\nHost: fontenddev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://plushmc.com/\r\nOrigin: https://plushmc.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nx-powered-by: PHP/8.3.33\r\nvary: accept,content-type,User-Agent\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nx-ua-compatible: IE=edge\r\nlink: \u003chttps://fontenddev.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 23 Aug 2026 01:42:28 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP:8.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Autoptimize:3.1.15.1","description":"Autoptimize is a WordPress plugin that optimises website performance by aggregating, minifying, and compressing HTML, CSS, and JavaScript files.","website":"https://autoptimize.com","common_platform_enumeration":"","icon":"Autoptimize.png","categories":["WordPress plugins","Performance"]}],"data":{"size":22491,"size_decoded":22888,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (20752)","md5":"4feed9be6dd3c5fa03d3e6bcf7a11533","sha1":"fc54b49915490559103e65dead07a7a466f985ac","sha256":"74a1e125b5f45f842961a8a14c34865156a914318f0c21915deff1bd9f403b1a","sha512":"9accedff31a1f975bb173f22afa0160f1733cf830602876e0447b2cb2bca83b99034b4e3e58c4604cd3803aa485f441ddf754a3190e32ac9df20d676c1e2b1aa","ssdeep":"384:bm//TyqzSO+DoJKZtTASQpv1pGwssV027zZ2TNpu66Qv:bm//TyqzVJCtTtQpvCwss2A6u5Qv","tlshash":"43a209f386b4257e1277c6abb7d5f22c3057c40acb455be0e6e7c20c82daf921651b98","first_seen":"2026-08-23T01:42:39.017142Z","last_seen":"2026-08-23T01:43:02.555257Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1263,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1263,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"fontenddev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plushmc.com/home.css","fqdn":"plushmc.com","domain":"plushmc.com","tld":"com"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://plushmc.com/","date":"2026-08-23T01:42:28.111Z","timestamp":1787449348111,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plushmc.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 22:53:49 GMT","end":"Wed, 04 Nov 2026 22:53:48 GMT"},"fingerprint":{"sha1":"97:7E:3E:4F:87:EC:76:D0:13:72:E6:D3:81:85:AF:37:13:1E:87:8F","sha256":"1E:F1:02:7D:1D:BC:5D:D1:A8:DA:F5:F2:50:43:63:0A:BD:E3:4B:C9:CE:63:15:69:57:0C:69:06:88:65:8E:D8"}}},"request":{"raw":"GET /home.css HTTP/1.1\r\nHost: plushmc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plushmc.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 31\r\ncache-control: public,max-age=3600,stale-while-revalidate=300\r\ncache-status: \"Netlify Edge\"; hit; ttl=31535969\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=UTF-8\r\ndate: Sun, 23 Aug 2026 01:42:28 GMT\r\netag: \"71db5d63ccf14c3db8cc5b19e9ecfec8-ssl-df\"\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-nf-request-id: 01M0P4H40TF3XSWKDGV9DENRSD\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 6826\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":39200,"size_decoded":7516,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text","md5":"633035d92fae2f977228556fe37b3132","sha1":"686dcf5f47868497e3a7578872485bdf7a926236","sha256":"ab29abb75f7363900bf4c396e50fae65e9d01881fff4f3971619ad2e4393584f","sha512":"39a8006a616272f44fe5f1121b25a263460c82c0b1e90705b81d4b4fcbc45a9bf6cd8668606d77647e0db24d554becdd6922aaeaadd0036ce82fc5d527e87b91","ssdeep":"384:xmlt10NaQIOr19S31CiC4sHX5hBI2N0VNIOIeDUnOrOmJBnVLPv:wtQy3vCh5Iu0/IOIeDU8THVLPv","tlshash":"28039358a75359a5ac27d9197bebcb49236c6103cd0ac96c7bc612484f8a3fc71d2f8c","first_seen":"2026-08-23T01:42:39.024021Z","last_seen":"2026-08-23T01:43:02.556106Z","times_seen":2,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pinkyslauncher.com/images/emoji.png","fqdn":"pinkyslauncher.com","domain":"pinkyslauncher.com","tld":"com"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plushmc.com/","date":"2026-08-23T01:42:28.126Z","timestamp":1787449348126,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pinkyslauncher.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 08:04:05 GMT","end":"Fri, 16 Oct 2026 08:04:04 GMT"},"fingerprint":{"sha1":"F7:D4:F2:F4:80:78:65:45:92:A4:80:9D:9E:D8:CB:F3:5C:D6:C6:2A","sha256":"03:23:24:06:53:8A:E7:D9:13:7F:3D:DA:1C:18:8A:FC:7F:94:95:E7:EE:F9:80:48:43:EE:E4:C2:D3:DD:DA:CF"}}},"request":{"raw":"GET /images/emoji.png HTTP/1.1\r\nHost: pinkyslauncher.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plushmc.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 30\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit; ttl=31535970\r\ncontent-type: image/png\r\ndate: Sun, 23 Aug 2026 01:42:28 GMT\r\netag: \"8df114ed58e9096956a7719eb7c3aae4-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01M0P4H454V5B5V23BDC44P93H\r\ncontent-length: 96151\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":96151,"size_decoded":96553,"mime_type":"image/png","magic":"PNG image data, 554 x 554, 8-bit colormap, non-interlaced","md5":"2413e4e70e1362a1b00e627e76bed5bb","sha1":"f5d5e8fcaeaa6c676945412a51ef007a460af00f","sha256":"d62a10e8240622774b4c775b65bad905145f011fabd44f911fc9c3dddf94a4d2","sha512":"ff847c5c026d7e7ee859e732606279f809aba846ae553fdeddda6c3fcacc76e1c5133b5639b26c2156d40b33701d7d62b274865a54d182636e88946ba72ada48","ssdeep":"1536:BFsQp/YnFZqNS5OrsRzWo37acCCLW8H7FPDLTkn9S7XAbpt+PKvGdcd3mjZ3/KGK:B23zkMJGcB6G7pDLTkgkQeI3/E","tlshash":"2e93027a6ad10b70def5fb973557042828d31fd8909b281172a0b1ac643afe53e72c5d","first_seen":"2026-01-09T01:16:04.630058Z","last_seen":"2026-08-23T01:43:02.55673Z","times_seen":16,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":54,"dns":0,"connect":23,"send":0,"wait":88,"receive":46,"ssl":36},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"pinkyslauncher.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"pinkyslauncher.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"pinkyslauncher.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://plushmc.com/","date":"2026-08-23T01:42:28.253Z","timestamp":1787449348253,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://plushmc.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 21 Aug 2026 10:29:32 GMT\r\nexpires: Sat, 21 Aug 2027 10:29:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 141176\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":39941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-08-25T08:46:57.230549Z","times_seen":48894,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":29,"send":0,"wait":17,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://plushmc.com/","date":"2026-08-23T01:42:28.327Z","timestamp":1787449348327,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://plushmc.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 21 Aug 2026 10:29:32 GMT\r\nexpires: Sat, 21 Aug 2027 10:29:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 141176\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":39941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-08-25T08:46:57.230549Z","times_seen":48894,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://plushmc.com/","date":"2026-08-23T01:42:28.329Z","timestamp":1787449348329,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://plushmc.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 21 Aug 2026 10:29:32 GMT\r\nexpires: Sat, 21 Aug 2027 10:29:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 141176\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":39941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-08-25T08:46:57.230549Z","times_seen":48894,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://plushmc.com/","date":"2026-08-23T01:42:28.109Z","timestamp":1787449348109,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plushmc.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 23 Aug 2026 01:42:28 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18861\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1G%2Febz88YF6oBazbVWhUvABHldz16eAsv3rUeTxkJWfkQvlEC%2BsIgM9CTB36ZVcBUn0YSVbjUj4eRxTsWQ1ooGLB1YFYIa3YjQW8QuTX97Hb8qjyI0OyQhgaoV8gXdW%2Bq3VT5QYS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: a2f66bb9cebb3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102641,"size_decoded":19852,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"9402848c3d4bbc710c764326f8b887c9","sha1":"b6e555166eb1381392e00adcde9bf8863f16ff01","sha256":"c22cfb6520a7fdbb738632834019acf47c78b1279462c0eb4cb83bae83ecb5a7","sha512":"0d33903bd456087de9a46a9c59a100d41219382eb1c5a97012cc3d73641078021fb65f957a0a2f96779ed5cf505f84dcb6758c9f5dd36727be822326f1ed8bc0","ssdeep":"1536:iwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPG9ZpgSLCJ:O709gMGFiyPG9ZiSLCJ","tlshash":"79a3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-08-25T08:26:23.942364Z","times_seen":35219,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":3,"connect":11,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pinkyslauncher.com/images/image%20(1).jpg","fqdn":"pinkyslauncher.com","domain":"pinkyslauncher.com","tld":"com"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plushmc.com/","date":"2026-08-23T01:42:28.128Z","timestamp":1787449348128,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pinkyslauncher.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 08:04:05 GMT","end":"Fri, 16 Oct 2026 08:04:04 GMT"},"fingerprint":{"sha1":"F7:D4:F2:F4:80:78:65:45:92:A4:80:9D:9E:D8:CB:F3:5C:D6:C6:2A","sha256":"03:23:24:06:53:8A:E7:D9:13:7F:3D:DA:1C:18:8A:FC:7F:94:95:E7:EE:F9:80:48:43:EE:E4:C2:D3:DD:DA:CF"}}},"request":{"raw":"GET /images/image%20(1).jpg HTTP/1.1\r\nHost: pinkyslauncher.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plushmc.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 30\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit; ttl=31535970\r\ncontent-type: image/jpeg\r\ndate: Sun, 23 Aug 2026 01:42:28 GMT\r\netag: \"8d30bb6ce89e6cf3f3df9cf149085f26-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01M0P4H453EW9TG26YMSGXBHF7\r\ncontent-length: 207064\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":207064,"size_decoded":207468,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=Paint.NET 5.1.11], baseline, precision 8, 1024x585, components 3","md5":"92a92681975e8d27aa345da2bffb9948","sha1":"2ebf23047c7a36d47f8321b0c56777fb2bd92785","sha256":"ee2e6e8ff7063e4786856ce2f68133291820823bc0ea66a3c27616d4d456e081","sha512":"6d07c4b1180fa6babff7fb7f52dc935f2ac44c04ce544eb6bc96e461ac8c5e03f34647c787b94c2e621ca2db85383d055c69142811b009fcc78de960860a8abd","ssdeep":"6144:HGS6OMmyrmP53EhilZ6h4UnbZP4VqtNr7:H9Mmyrmhu60VRH/","tlshash":"a41412657679c27b0d0cd532c26adb4924ea4f7b41b73d98300d7d25e3eb913a63da08","first_seen":"2026-01-09T01:16:04.634507Z","last_seen":"2026-08-23T01:43:02.558265Z","times_seen":9,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":54,"dns":0,"connect":24,"send":0,"wait":88,"receive":61,"ssl":34},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"pinkyslauncher.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"pinkyslauncher.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"pinkyslauncher.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pinkyslauncher.com/images/download.png","fqdn":"pinkyslauncher.com","domain":"pinkyslauncher.com","tld":"com"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plushmc.com/","date":"2026-08-23T01:42:28.132Z","timestamp":1787449348132,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pinkyslauncher.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 08:04:05 GMT","end":"Fri, 16 Oct 2026 08:04:04 GMT"},"fingerprint":{"sha1":"F7:D4:F2:F4:80:78:65:45:92:A4:80:9D:9E:D8:CB:F3:5C:D6:C6:2A","sha256":"03:23:24:06:53:8A:E7:D9:13:7F:3D:DA:1C:18:8A:FC:7F:94:95:E7:EE:F9:80:48:43:EE:E4:C2:D3:DD:DA:CF"}}},"request":{"raw":"GET /images/download.png HTTP/1.1\r\nHost: pinkyslauncher.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plushmc.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 30\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit; ttl=31535970\r\ncontent-type: image/png\r\ndate: Sun, 23 Aug 2026 01:42:28 GMT\r\netag: \"50134330e06430727d49385558b9301d-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01M0P4H453B9W029RJ1SNEQNR8\r\ncontent-length: 125633\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":125633,"size_decoded":126036,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"fbc4dff27cbb5f4e036d27e6db0c85d6","sha1":"ea778f4faddae2367e661db26a363884b8a36f77","sha256":"36eee7c94d4e988d1a3a0e60f8be04e8ab71a5317be35cdf502e696ed705728e","sha512":"c0d9b7ed7c7f508117c26a9923fa492571204a3ed04dec977fa1865313fa33a9fe9de599ddf6dfcb90544a4b081517c24dd7a3a7838a35e11d5469e7a6def150","ssdeep":"3072:iFiPV1TlJjwoxCtDZBUyKcyGZ4MsA9+VNn2KlvVMcE/6dMAtZM:wiPVhlhwoSLvZ4y9uN2LTydMa+","tlshash":"20c3e1a9960acf89cb9485f17dc389435b3080c99950cbbb837e761388b736575cf1ba","first_seen":"2025-12-22T17:51:11.404739Z","last_seen":"2026-08-23T01:43:02.558942Z","times_seen":66,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":114,"dns":0,"connect":0,"send":0,"wait":88,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"pinkyslauncher.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"pinkyslauncher.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"pinkyslauncher.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plushmc.com/js/loader.js","fqdn":"plushmc.com","domain":"plushmc.com","tld":"com"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plushmc.com/","date":"2026-08-23T01:42:28.118Z","timestamp":1787449348118,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plushmc.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 22:53:49 GMT","end":"Wed, 04 Nov 2026 22:53:48 GMT"},"fingerprint":{"sha1":"97:7E:3E:4F:87:EC:76:D0:13:72:E6:D3:81:85:AF:37:13:1E:87:8F","sha256":"1E:F1:02:7D:1D:BC:5D:D1:A8:DA:F5:F2:50:43:63:0A:BD:E3:4B:C9:CE:63:15:69:57:0C:69:06:88:65:8E:D8"}}},"request":{"raw":"GET /js/loader.js HTTP/1.1\r\nHost: plushmc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plushmc.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 31\r\ncache-control: public,max-age=3600,stale-while-revalidate=300\r\ncache-status: \"Netlify Edge\"; hit; ttl=31535969\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 23 Aug 2026 01:42:28 GMT\r\netag: \"884fa2ff81729ef88a7ba3d7c31a4a0e-ssl-df\"\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-nf-request-id: 01M0P4H410RCD8M1KH8EGATFFB\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 624\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1683,"size_decoded":1327,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"9870ddcbaf30b1b2ec2b1a7579b786cc","sha1":"db506a9a74c52e3660b5e842c1cf25bf99b6af42","sha256":"c0322bc303f9189ecf6aee2cc3fb39623b9be9c976c55e1c3a5f5fba94ba3431","sha512":"9e05e196621a7a8058d0ddddf1970a5bc59bac3b46da6ef1fc661f56dc01b9e59692a6b051ca9fb4bce1b641598b21c4937f651ebf4ce38f6a204ff570644e2b","ssdeep":"","tlshash":"ee31e3163ab38165173bd02507ffa9083538612b418ad9503d3d9148cfe1badb629bed","first_seen":"2026-08-23T01:42:39.01854Z","last_seen":"2026-08-23T01:43:02.559612Z","times_seen":2,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/silkscreen/v6/m8JXjfVPf62XiF7kO-i9YLNlaw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://plushmc.com/","date":"2026-08-23T01:42:28.332Z","timestamp":1787449348332,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/silkscreen/v6/m8JXjfVPf62XiF7kO-i9YLNlaw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://plushmc.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8404\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Aug 2026 16:19:58 GMT\r\nexpires: Thu, 19 Aug 2027 16:19:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 292950\r\nlast-modified: Mon, 08 Sep 2025 18:16:49 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8404,"size_decoded":9216,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8404, version 1.0","md5":"5eef6cee3f3dc19e37add9708df39a80","sha1":"c40ed2272b0b88f50daaf87b6e6e944ef4ad9534","sha256":"e6c72ea4702249202bcdd79d3343057e4e25ef1f04e3fcffd8602ab53b40b4cc","sha512":"c7ffdd5e2ced689c8bc15d087b623f9e9c800629520587c867118f6321af1ac45a2a0622731d039737e9560e59c504ac8328c93ba968ca6fb1d47c331c755098","ssdeep":"96:xVl453WtoFwxKzfS+9yF0JuvWTVQyIjr6INYSzIzMZMAJ8AcpxBrbfHHZ0hpKvkL:flnoFwMSLFATp5QIAZRGBrbgpKvbFDS","tlshash":"7002ae33e4091d4bd6be2ff1aa49027d0652be27cbe0bdaa41f42d179993091f613984","first_seen":"2025-09-18T21:23:16.404647Z","last_seen":"2026-08-25T02:11:28.252509Z","times_seen":515,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plushmc.com/js/config.js","fqdn":"plushmc.com","domain":"plushmc.com","tld":"com"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plushmc.com/","date":"2026-08-23T01:42:28.115Z","timestamp":1787449348115,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plushmc.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 22:53:49 GMT","end":"Wed, 04 Nov 2026 22:53:48 GMT"},"fingerprint":{"sha1":"97:7E:3E:4F:87:EC:76:D0:13:72:E6:D3:81:85:AF:37:13:1E:87:8F","sha256":"1E:F1:02:7D:1D:BC:5D:D1:A8:DA:F5:F2:50:43:63:0A:BD:E3:4B:C9:CE:63:15:69:57:0C:69:06:88:65:8E:D8"}}},"request":{"raw":"GET /js/config.js HTTP/1.1\r\nHost: plushmc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plushmc.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 31\r\ncache-control: public,max-age=3600,stale-while-revalidate=300\r\ncache-status: \"Netlify Edge\"; hit; ttl=31535969\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 23 Aug 2026 01:42:28 GMT\r\netag: \"d2d93331e5d44decc6bbdf58f49c2819-ssl\"\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-nf-request-id: 01M0P4H40Z262FDFWFE05SN1BH\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 847\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":847,"size_decoded":1502,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"520b66d3b9ac2f4c54130fd45b4ba200","sha1":"ea2ac6d2513a1a253f505017ea1c9ba05043915b","sha256":"508ba6e0fdaaa462c197a4f13da9c22e6c2050bb472bd10eb952767a2626b5da","sha512":"3de6519d10d3f4416c689dde5750fe7839f8798044edbd3174e81cdbb5ef33287a1c1896fa6b83b705c44abaf386d721cbbc9729155a85b10599e8e6fa43af44","ssdeep":"","tlshash":"a801489a65b4c46d6831272e5b0fb22667a610430409e3153efc6146ff9c86f3ea1ad9","first_seen":"2026-08-23T01:42:38.993435Z","last_seen":"2026-08-23T01:43:02.560661Z","times_seen":2,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://plushmc.com/","date":"2026-08-23T01:42:28.321Z","timestamp":1787449348321,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://plushmc.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 23 Aug 2026 01:42:28 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 156496\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c825OegQKmr6pqeRA3uOAJXKxmLZcIYaQYnmb3szbp0%2Bqfyax2IdVHUdgR4Iw7yvWDDVj6aD%2BtUySqGs6KBn%2BvdU%2FnATPxUDwzX%2Ba0mGiMElIJugtq5y9Y6sxwygeRu4TWShXE%2FE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=5,i=?0\r\nserver: cloudflare\r\ncf-ray: a2f66bbb0b8832fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":156496,"size_decoded":157488,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 156496, version 773.768","md5":"6c4eee562650e53cee32496bdfbe534b","sha1":"1aae708e3b94ee981b452a918d28ed037fbb5e18","sha256":"9fc85f3a4544ab0d570c7f8f9bbb88db8d92c359b2707580ea8b07c75673eae2","sha512":"ebcb5a2e2a908228f77ecd03b45491778cad73ddc39fa3a6334b129aaf9fa36c16c0307aeaad74d77f616b5b34aac52d91e9f4816945253dc9a826ddd71f4d12","ssdeep":"3072:OvM6gZMLmY8uGpjVnlooQ+GQs8jic0f/KkMdE:OU65LoP5QSsuic0f/cdE","tlshash":"8ce31200d620498d9978fd5b2a1fa1ffa7a939c95ed210bad3c30cb93257143bbc2556","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-08-25T08:54:23.246309Z","times_seen":50901,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":20,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plushmc.com/","fqdn":"plushmc.com","domain":"plushmc.com","tld":"com"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-23T01:42:27.551Z","timestamp":1787449347551,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plushmc.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 22:53:49 GMT","end":"Wed, 04 Nov 2026 22:53:48 GMT"},"fingerprint":{"sha1":"97:7E:3E:4F:87:EC:76:D0:13:72:E6:D3:81:85:AF:37:13:1E:87:8F","sha256":"1E:F1:02:7D:1D:BC:5D:D1:A8:DA:F5:F2:50:43:63:0A:BD:E3:4B:C9:CE:63:15:69:57:0C:69:06:88:65:8E:D8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: plushmc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 30\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit; ttl=31535970\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 23 Aug 2026 01:42:27 GMT\r\netag: \"fc9d8d09e2c1b0809a85bd7a75bdcf5b-ssl-df\"\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-nf-request-id: 01M0P4H3KJ94XZRPRH5Y7GMF6F\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 6794\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":30228,"size_decoded":7471,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (511)","md5":"b0d9e97c2c8089cd1c10874c3744993c","sha1":"bf062c55363a9d47876749106d5439dc8ab707ee","sha256":"9261a0b6ff85bef47c1456492624c46627af35dfc0cfa93ec072ca12809396e2","sha512":"80b50b1c5470f609957fb8daca78b9be3dd75f7ef90440aac0396c5d4a59d39d02168c4a82abd7d01e1eea180173e0438e5a96dd90d1389de7d850586bfdfa83","ssdeep":"192:HJFMD5zBphOfOxt5txObpZ68XXIS2jkHwAojoq9pPtRVv9tSj10nVz8c4rsSdtgB:HvcxUXIS/w70qtnS2VzLSdtg/+N5+h","tlshash":"4dd2652630f1603f016b82c6776a9b5b7ee1a607e90e461077bd0b985fe7c85ec1364e","first_seen":"2026-08-23T01:42:39.022486Z","last_seen":"2026-08-23T01:43:02.562187Z","times_seen":2,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":81,"connect":1,"send":0,"wait":24,"receive":18,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pinkyslauncher.com/winter-images/christmas-tree.png","fqdn":"pinkyslauncher.com","domain":"pinkyslauncher.com","tld":"com"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plushmc.com/","date":"2026-08-23T01:42:28.129Z","timestamp":1787449348129,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pinkyslauncher.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 08:04:05 GMT","end":"Fri, 16 Oct 2026 08:04:04 GMT"},"fingerprint":{"sha1":"F7:D4:F2:F4:80:78:65:45:92:A4:80:9D:9E:D8:CB:F3:5C:D6:C6:2A","sha256":"03:23:24:06:53:8A:E7:D9:13:7F:3D:DA:1C:18:8A:FC:7F:94:95:E7:EE:F9:80:48:43:EE:E4:C2:D3:DD:DA:CF"}}},"request":{"raw":"GET /winter-images/christmas-tree.png HTTP/1.1\r\nHost: pinkyslauncher.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plushmc.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 30\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit; ttl=31535970\r\ncontent-type: image/png\r\ndate: Sun, 23 Aug 2026 01:42:28 GMT\r\netag: \"cdaa7688957c4ce10242ebf971310727-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01M0P4H454WZMJ0N29BPWJS919\r\ncontent-length: 99206\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":99206,"size_decoded":99608,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"6f75e9079e936c181826b9071dfb6d86","sha1":"ca4cd7fcd0cc6e394c23daa28c9bd1c15acec02e","sha256":"0aab7ebec1541e3e721c0ad16f864d6d4c39fbec788dd9c757a06f44adb4e7b0","sha512":"090a8383058c9109d72b5b6b0cbabfdcbe32e0b807ee5be604b28c315fecc416572a38a34ead9ca7eb5b1e00fc3c38a0dd1fd1112133b592a6399a4abccce7a4","ssdeep":"3072:B9iL3oZCcuK1+Zk/pCsMSAoalofzMyS5hMSdFqLN4XOco+4cT:B9iL3oZCcuK1+Zk/pCsMSxa20gSdo8OM","tlshash":"80a30263e438dff9f65b38866a31b2501dc9b38176063b6b6a65c87cd50fbd20819d31","first_seen":"2026-01-09T01:16:04.637051Z","last_seen":"2026-08-23T01:43:02.562777Z","times_seen":18,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":54,"dns":0,"connect":30,"send":0,"wait":88,"receive":45,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"pinkyslauncher.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"pinkyslauncher.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"pinkyslauncher.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pinkyslauncher.com/images/hellokitty.mp4","fqdn":"pinkyslauncher.com","domain":"pinkyslauncher.com","tld":"com"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://plushmc.com/","date":"2026-08-23T01:42:28.492Z","timestamp":1787449348492,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pinkyslauncher.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 08:04:05 GMT","end":"Fri, 16 Oct 2026 08:04:04 GMT"},"fingerprint":{"sha1":"F7:D4:F2:F4:80:78:65:45:92:A4:80:9D:9E:D8:CB:F3:5C:D6:C6:2A","sha256":"03:23:24:06:53:8A:E7:D9:13:7F:3D:DA:1C:18:8A:FC:7F:94:95:E7:EE:F9:80:48:43:EE:E4:C2:D3:DD:DA:CF"}}},"request":{"raw":"GET /images/hellokitty.mp4 HTTP/1.1\r\nHost: pinkyslauncher.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nReferer: https://plushmc.com/\r\nRange: bytes=11468800-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\naccept-ranges: bytes\r\nage: 30\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit; ttl=31535970\r\ncontent-range: bytes 11468800-11511766/11511767\r\ncontent-type: video/mp4\r\ndate: Sun, 23 Aug 2026 01:42:28 GMT\r\netag: \"2be603355f1f68b0ec1bf9b48f9bd99f-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01M0P4H4CVXND00P3RHZA0TXED\r\ncontent-length: 42967\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42967,"size_decoded":43418,"mime_type":"video/mp4","magic":"data","md5":"c3523efc36f9c9d4ab0a08266a80965e","sha1":"308369075553763e2b1e875a40e7bde562193440","sha256":"96946d388e22039ebb1d02bdd55bd3f3aed791aec321e0411d2a199215730e25","sha512":"36c7d540789c5136e02e3c8abed27a461fac94d690bd06a426d71f439558f89b9b21ce744c308e93394b3802713bb4665523a49389f0fc1c6d0671319abf3f7c","ssdeep":"768:D/56acn2VFC03r44lnuQROT6C17XYftlit4PZ9jQ5Y:zcaFtUUQAifY","tlshash":"96134a9327226723c2112a7cc4fb13057370da8adbe79797da81d6712dca3891705fda","first_seen":"2026-01-09T01:16:04.626998Z","last_seen":"2026-08-23T01:43:02.563287Z","times_seen":66,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"pinkyslauncher.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"pinkyslauncher.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"pinkyslauncher.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"plushmc.com/favicon.ico","fqdn":"plushmc.com","domain":"plushmc.com","tld":"com"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plushmc.com/","date":"2026-08-23T01:42:28.843Z","timestamp":1787449348843,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plushmc.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 22:53:49 GMT","end":"Wed, 04 Nov 2026 22:53:48 GMT"},"fingerprint":{"sha1":"97:7E:3E:4F:87:EC:76:D0:13:72:E6:D3:81:85:AF:37:13:1E:87:8F","sha256":"1E:F1:02:7D:1D:BC:5D:D1:A8:DA:F5:F2:50:43:63:0A:BD:E3:4B:C9:CE:63:15:69:57:0C:69:06:88:65:8E:D8"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: plushmc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plushmc.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 30\r\ncache-control: public,max-age=604800\r\ncache-status: \"Netlify Edge\"; hit; ttl=31535970\r\ncontent-encoding: br\r\ncontent-type: image/vnd.microsoft.icon\r\ndate: Sun, 23 Aug 2026 01:42:28 GMT\r\netag: \"fe668f2cc32923afb9772d1e99d3bb18-ssl-df\"\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-nf-request-id: 01M0P4H4QNM3Z0JX54PD0B8DBH\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 5398\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":5936,"size_decoded":6064,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 3 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced, 32 bits/pixel, 32x32 with \n- PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced, 32 bits/pixel","md5":"c4ec87be2ad5022723b342367ba7c877","sha1":"f0649fc914003a7b7241d6ebe541fdfbfdb6d51b","sha256":"3ad8ae6eb5b8400e8b38b38dfa03385d1e7b233b988959d41e90b350a9f20809","sha512":"ff9d08675411beb0b8b077165c282b9eb974257811f03eb6b86280380c6e81646154d505b87963c21c85874d4b63ec5b1b4e2da7fb27679ff496399f78646706","ssdeep":"96:CAtTAHh+cTEJ+Hh6c4xT6dq/MoLOq+WD0CEHhK47kU0DT54xihZWmzZt:CABAB+cTEJ+BiVB0oLSWDjEBKGh0HmqN","tlshash":"4ec17dc747389edd5026be7d267ebe4a8df8136e83725f54c421dac59219f8c025c80a","first_seen":"2026-08-23T01:42:39.015652Z","last_seen":"2026-08-23T01:43:02.563798Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Nunito:wght@400;600;700;800;900\u0026family=Silkscreen:wght@400;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://plushmc.com/","date":"2026-08-23T01:42:28.106Z","timestamp":1787449348106,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:53 GMT","end":"Wed, 28 Oct 2026 20:43:52 GMT"},"fingerprint":{"sha1":"91:24:44:08:3E:65:60:72:3B:18:06:E2:82:7E:C0:8F:97:46:5D:B2","sha256":"71:59:B7:BB:3B:E8:E0:81:C8:B6:24:A3:57:11:62:47:10:A1:3D:E4:38:30:54:27:2E:19:C8:96:02:25:52:DD"}}},"request":{"raw":"GET /css2?family=Nunito:wght@400;600;700;800;900\u0026family=Silkscreen:wght@400;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plushmc.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 23 Aug 2026 01:42:28 GMT\r\ndate: Sun, 23 Aug 2026 01:42:28 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10825,"size_decoded":1435,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"8d660be5ff54b566937898e925c43ec5","sha1":"b1d593afce49fa115a53c2121c86f0f42b719af2","sha256":"d4925768c8ba5e4321a5a29dc1dcc6152c3e55791481c05d1246728f4c7f52e2","sha512":"a6d74456daa1906f43c4691691f0f14375726222d85364e8200c7c193f0300ded459c488de851dd103b320b2a48a68c98c68e3b884f60dc50ae9d9ab623fd4c9","ssdeep":"192:OH+yptkUkH0yXLkeLHbywkkdiHyy1RkoRHhyWikvhSMna17:il6DPe9hjcF","tlshash":"e3229791045bd400aa832cc227cf7e37ed4e62513454c57aebfd9898ecabd272365b1e","first_seen":"2026-07-30T02:11:04.009118Z","last_seen":"2026-08-23T01:43:02.564734Z","times_seen":4,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":33,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"plushmc.com/js/counter.js","fqdn":"plushmc.com","domain":"plushmc.com","tld":"com"},"ip":{"addr":"75.2.60.5","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://plushmc.com/","date":"2026-08-23T01:42:28.116Z","timestamp":1787449348116,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"plushmc.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 06 Aug 2026 22:53:49 GMT","end":"Wed, 04 Nov 2026 22:53:48 GMT"},"fingerprint":{"sha1":"97:7E:3E:4F:87:EC:76:D0:13:72:E6:D3:81:85:AF:37:13:1E:87:8F","sha256":"1E:F1:02:7D:1D:BC:5D:D1:A8:DA:F5:F2:50:43:63:0A:BD:E3:4B:C9:CE:63:15:69:57:0C:69:06:88:65:8E:D8"}}},"request":{"raw":"GET /js/counter.js HTTP/1.1\r\nHost: plushmc.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plushmc.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 31\r\ncache-control: public,max-age=3600,stale-while-revalidate=300\r\ncache-status: \"Netlify Edge\"; hit; ttl=31535969\r\ncontent-type: application/javascript; charset=UTF-8\r\ndate: Sun, 23 Aug 2026 01:42:28 GMT\r\netag: \"b3da42a6e8f5ff54593f83fccab1a75d-ssl\"\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-nf-request-id: 01M0P4H40ZGEWJMAVPSHHY3NRD\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 524\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":524,"size_decoded":1179,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"b33c8160061356100d973a0ea5a96520","sha1":"cc73f661f87f47f57176de2a514e8b98ae365708","sha256":"a4242cc381f5e11976cfb3ebebad572ce30e7d785c2bd4c37adcffa1693244ac","sha512":"1f9aabc5404244204a7c0b969a12f1ae1cd8243a175b2bedb48c21d46c56b9b4db72f41d7719a27ef94f7086798ee7bd0a8ff0c0cf049c76d417b628aaec3933","ssdeep":"","tlshash":"03f05209fac911203a81d237afb968083838f2031806e567b88c19008ffbb00b0edad8","first_seen":"2026-07-30T02:11:04.01306Z","last_seen":"2026-08-23T01:43:02.565229Z","times_seen":4,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fontenddev.com/fonts/minecraft/Minecraft.woff2","fqdn":"fontenddev.com","domain":"fontenddev.com","tld":"com"},"ip":{"addr":"172.105.128.43","port":443,"asn":63949,"as":"Akamai Connected Cloud","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://plushmc.com/","date":"2026-08-23T01:42:28.325Z","timestamp":1787449348325,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.fontenddev.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 09:25:49 GMT","end":"Wed, 11 Nov 2026 09:25:48 GMT"},"fingerprint":{"sha1":"EB:4D:C2:27:61:A8:38:C9:E8:DC:F8:FB:13:C8:57:E0:46:EA:7E:75","sha256":"FB:CD:B4:D7:AB:3A:88:87:73:E4:FF:A0:2E:BE:A7:86:7E:7D:69:0E:29:08:B1:4B:0F:C3:DE:01:BC:40:D6:9B"}}},"request":{"raw":"GET /fonts/minecraft/Minecraft.woff2 HTTP/1.1\r\nHost: fontenddev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://plushmc.com/\r\nOrigin: https://plushmc.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nx-powered-by: PHP/8.3.33\r\nvary: accept,content-type,User-Agent\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nx-ua-compatible: IE=edge\r\nlink: \u003chttps://fontenddev.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sun, 23 Aug 2026 01:42:27 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Autoptimize:3.1.15.1","description":"Autoptimize is a WordPress plugin that optimises website performance by aggregating, minifying, and compressing HTML, CSS, and JavaScript files.","website":"https://autoptimize.com","common_platform_enumeration":"","icon":"Autoptimize.png","categories":["WordPress plugins","Performance"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP:8.3.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":22492,"size_decoded":22889,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (20752)","md5":"67a082f71b49c80525e5e0d0d7bda80b","sha1":"9ef3eb753be181f62b0b102d9ac30003d08df2f4","sha256":"029e28265307a7297e5fccb756dc79a190b6976d9842ae43fd5dd4b6cc7490d9","sha512":"de528a36a5677f9f0551dc9a377a1cfce0cd5f63891b194c8896117beb0b2d5df982030a6c8a69849f0df7b14a9e47139dc4c77e345db21c80a2854a72269442","ssdeep":"384:bm//TyqzSO+DoJKZtTASQpv1pGwssV027zZ2TNpu6MQv:bm//TyqzVJCtTtQpvCwss2A6uhQv","tlshash":"a1a209f386b4257e1277c6abb7d5f22c3057c40acb455be0e6e7c20c82daf921651b98","first_seen":"2026-08-23T01:42:39.012706Z","last_seen":"2026-08-23T01:43:02.56589Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1393,"timings":{"blocked":-1,"dns":107,"connect":94,"send":0,"wait":1098,"receive":0,"ssl":94},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"fontenddev.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pinkyslauncher.com/images/hellokitty.mp4","fqdn":"pinkyslauncher.com","domain":"pinkyslauncher.com","tld":"com"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://plushmc.com/","date":"2026-08-23T01:42:28.335Z","timestamp":1787449348335,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pinkyslauncher.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 08:04:05 GMT","end":"Fri, 16 Oct 2026 08:04:04 GMT"},"fingerprint":{"sha1":"F7:D4:F2:F4:80:78:65:45:92:A4:80:9D:9E:D8:CB:F3:5C:D6:C6:2A","sha256":"03:23:24:06:53:8A:E7:D9:13:7F:3D:DA:1C:18:8A:FC:7F:94:95:E7:EE:F9:80:48:43:EE:E4:C2:D3:DD:DA:CF"}}},"request":{"raw":"GET /images/hellokitty.mp4 HTTP/1.1\r\nHost: pinkyslauncher.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nReferer: https://plushmc.com/\r\nRange: bytes=0-\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\naccept-ranges: bytes\r\nage: 30\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit; ttl=31535970\r\ncontent-range: bytes 0-11511766/11511767\r\ncontent-type: video/mp4\r\ndate: Sun, 23 Aug 2026 01:42:28 GMT\r\netag: \"2be603355f1f68b0ec1bf9b48f9bd99f-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01M0P4H47SZ1CF9PNB2MYSDAZA\r\ncontent-length: 11511767\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1362857,"size_decoded":1363304,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"2dd54db4e6856eb40181d555440281fb","sha1":"b613289f059a4b23a0616f2220409082cd0bfb30","sha256":"d4e0723003ef4857debdf8faa224e3761ccb3b3ab15ee33250cd4d0c04240bca","sha512":"03f99f13b71a34bf8d0cfb89ff8424f57008029d5245506bc2244296a6d94d4aad15958b21b02d0c5b13002189836d9999e42257c53ec3a1aabc171cf2849276","ssdeep":"24576:hn8rTybvHVmnSzIJ0ZKaFxKwnhX3IQ6cwJKg+0AG9vmNNULAZh68B2Cn5:F8vypmJJ0HFxKmWcw9+ZGhmrUL868MC5","tlshash":"d72533f4474e53dc917396ff690b21d8d4638f499a603f53f8bca2510298bad2de86c8","first_seen":"2026-01-09T10:11:06.451698Z","last_seen":"2026-08-23T01:43:02.566476Z","times_seen":36,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"pinkyslauncher.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"pinkyslauncher.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"pinkyslauncher.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pinkyslauncher.com/images/logo.png","fqdn":"pinkyslauncher.com","domain":"pinkyslauncher.com","tld":"com"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plushmc.com/","date":"2026-08-23T01:42:28.113Z","timestamp":1787449348113,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pinkyslauncher.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 08:04:05 GMT","end":"Fri, 16 Oct 2026 08:04:04 GMT"},"fingerprint":{"sha1":"F7:D4:F2:F4:80:78:65:45:92:A4:80:9D:9E:D8:CB:F3:5C:D6:C6:2A","sha256":"03:23:24:06:53:8A:E7:D9:13:7F:3D:DA:1C:18:8A:FC:7F:94:95:E7:EE:F9:80:48:43:EE:E4:C2:D3:DD:DA:CF"}}},"request":{"raw":"GET /images/logo.png HTTP/1.1\r\nHost: pinkyslauncher.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plushmc.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 30\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit; ttl=31535970\r\ncontent-type: image/png\r\ndate: Sun, 23 Aug 2026 01:42:28 GMT\r\netag: \"50134330e06430727d49385558b9301d-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01M0P4H4529Z7JAET08RWCBE73\r\ncontent-length: 125633\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":125633,"size_decoded":126036,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"fbc4dff27cbb5f4e036d27e6db0c85d6","sha1":"ea778f4faddae2367e661db26a363884b8a36f77","sha256":"36eee7c94d4e988d1a3a0e60f8be04e8ab71a5317be35cdf502e696ed705728e","sha512":"c0d9b7ed7c7f508117c26a9923fa492571204a3ed04dec977fa1865313fa33a9fe9de599ddf6dfcb90544a4b081517c24dd7a3a7838a35e11d5469e7a6def150","ssdeep":"3072:iFiPV1TlJjwoxCtDZBUyKcyGZ4MsA9+VNn2KlvVMcE/6dMAtZM:wiPVhlhwoSLvZ4y9uN2LTydMa+","tlshash":"20c3e1a9960acf89cb9485f17dc389435b3080c99950cbbb837e761388b736575cf1ba","first_seen":"2025-12-22T17:51:11.404739Z","last_seen":"2026-08-23T01:43:02.558942Z","times_seen":66,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":62,"dns":0,"connect":25,"send":0,"wait":23,"receive":65,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"pinkyslauncher.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"pinkyslauncher.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"pinkyslauncher.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pinkyslauncher.com/winter-images/snowflake.png","fqdn":"pinkyslauncher.com","domain":"pinkyslauncher.com","tld":"com"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plushmc.com/","date":"2026-08-23T01:42:28.130Z","timestamp":1787449348130,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pinkyslauncher.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 08:04:05 GMT","end":"Fri, 16 Oct 2026 08:04:04 GMT"},"fingerprint":{"sha1":"F7:D4:F2:F4:80:78:65:45:92:A4:80:9D:9E:D8:CB:F3:5C:D6:C6:2A","sha256":"03:23:24:06:53:8A:E7:D9:13:7F:3D:DA:1C:18:8A:FC:7F:94:95:E7:EE:F9:80:48:43:EE:E4:C2:D3:DD:DA:CF"}}},"request":{"raw":"GET /winter-images/snowflake.png HTTP/1.1\r\nHost: pinkyslauncher.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plushmc.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 30\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit; ttl=31535970\r\ncontent-type: image/png\r\ndate: Sun, 23 Aug 2026 01:42:28 GMT\r\netag: \"5fa13b6e830b5a278f6646ff9992ffff-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01M0P4H4543N4993HB0MAT5VT6\r\ncontent-length: 26917\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":26917,"size_decoded":27319,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit colormap, non-interlaced","md5":"34627e62e40c103d4b8803efb84d228f","sha1":"9c065d9c4edf5ed0efce88379705d88a93b47386","sha256":"6d5c66a160e4145d778f085fcbffc05699765af8a3a44efc523f5702f4fc685e","sha512":"fc372adf07a569705ba4bbe8e4e73c28799238cf8b25f59c6ad25701960d493bfe55fad7b79245aaec5f1e7d8715b00b8b45810f59598add11c54794c55917de","ssdeep":"768:Dgl0+3ETk+dTFcUh5mCZd2+4IsSKdslYAVrd60Ty3P:DglRT+55mgdJQSKZQrd60Tg","tlshash":"7cc2f1e39e2d14c950ba5fc457c4a9c388303c4194a6e4302d94b66f6df27dc1273ed2","first_seen":"2026-01-09T01:16:04.617958Z","last_seen":"2026-08-23T01:43:02.568316Z","times_seen":18,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":54,"dns":0,"connect":27,"send":0,"wait":88,"receive":22,"ssl":32},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"pinkyslauncher.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"pinkyslauncher.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"pinkyslauncher.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pinkyslauncher.com/winter-images/snowman.png","fqdn":"pinkyslauncher.com","domain":"pinkyslauncher.com","tld":"com"},"ip":{"addr":"63.176.8.218","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://plushmc.com/","date":"2026-08-23T01:42:28.131Z","timestamp":1787449348131,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pinkyslauncher.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 08:04:05 GMT","end":"Fri, 16 Oct 2026 08:04:04 GMT"},"fingerprint":{"sha1":"F7:D4:F2:F4:80:78:65:45:92:A4:80:9D:9E:D8:CB:F3:5C:D6:C6:2A","sha256":"03:23:24:06:53:8A:E7:D9:13:7F:3D:DA:1C:18:8A:FC:7F:94:95:E7:EE:F9:80:48:43:EE:E4:C2:D3:DD:DA:CF"}}},"request":{"raw":"GET /winter-images/snowman.png HTTP/1.1\r\nHost: pinkyslauncher.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://plushmc.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nage: 30\r\ncache-control: public,max-age=0,must-revalidate\r\ncache-status: \"Netlify Edge\"; hit; ttl=31535970\r\ncontent-type: image/png\r\ndate: Sun, 23 Aug 2026 01:42:28 GMT\r\netag: \"5ba24b741433c989fd554edf178036a9-ssl\"\r\nserver: Netlify\r\nstrict-transport-security: max-age=31536000\r\nx-nf-request-id: 01M0P4H4536RT3Y43CFG6VN16N\r\ncontent-length: 93491\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Netlify","description":"Netlify providers hosting and server-less backend services for web applications and static websites.","website":"https://www.netlify.com/","common_platform_enumeration":"","icon":"Netlify.svg","categories":["PaaS","CDN"]}],"data":{"size":93491,"size_decoded":93893,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"f685f8d77d72df61f8650fe62b26cc0b","sha1":"3c6217abee94739db69409477ef7a2eda9b8e499","sha256":"8818f334c3fb09c0516df90659fa17e29040b1cd7aeec3c3821b05f3ebbd22f0","sha512":"140859426698117364e758f44ecf593d8dabc27b2a56c05bfcb8fef95fc31a1c2f821ae8bc78ff897f11bc6bc2a05cf757ad2411ea383c39fbf4b98bef24e174","ssdeep":"1536:k+5ABd1uC0E84mpIC1Klw382FTW4/lwl3pTq8nwV+AmaUecDQyedeuIn1C:kxgsUp4e82pjtwj4SaU/DJedeuew","tlshash":"17931247ad7ac2f2f4f198687c81a237117775ac00d037e6a4af28de9b161365f97234","first_seen":"2026-01-09T01:16:04.641563Z","last_seen":"2026-08-23T01:43:02.569027Z","times_seen":18,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":54,"dns":0,"connect":26,"send":0,"wait":88,"receive":46,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"pinkyslauncher.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"pinkyslauncher.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"pinkyslauncher.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://plushmc.com/","date":"2026-08-23T01:42:28.324Z","timestamp":1787449348324,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://plushmc.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 21 Aug 2026 10:29:32 GMT\r\nexpires: Sat, 21 Aug 2027 10:29:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 141176\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":39941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-08-25T08:46:57.230549Z","times_seen":48894,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/silkscreen/v6/m8JUjfVPf62XiF7kO-i9aAhAfmyi2A.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://plushmc.com/","date":"2026-08-23T01:42:31.003Z","timestamp":1787449351003,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/silkscreen/v6/m8JUjfVPf62XiF7kO-i9aAhAfmyi2A.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://plushmc.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7524\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Aug 2026 19:15:50 GMT\r\nexpires: Thu, 19 Aug 2027 19:15:50 GMT\r\ncache-control: public, max-age=31536000\r\nage: 282401\r\nlast-modified: Mon, 08 Sep 2025 18:13:38 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7524,"size_decoded":8336,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7524, version 1.0","md5":"658004a4448ebcc98820a90d5ff555e1","sha1":"67996e4e8c294851ad11955a5786a1158b7372a3","sha256":"5741b7f01a127f40ed70281fa2f686e8fc2cfe241930a120e4d1a1cebe78f995","sha512":"0bbe93f2fc27627b972b74e94ebe5c583b98a0ad92ae262f2af89ad5a57c0e58ddc3f4c8e485b1e7564e6209fe160ea42f00e0841f78f66314eb27c4d1c8d8b7","ssdeep":"192:Z0dbKSl6YdBbcjJ0lCzo8BRTqVLxQ6rek0VD8ug2+1ISRCtx:Z0hKSlm6XuTELxBd0xv","tlshash":"04f1b03ffd9e4711fb294bb284126e3d7b8e9c264e9e60159b8a03c40c9d829029d1f6","first_seen":"2025-09-18T21:23:16.402034Z","last_seen":"2026-08-25T02:11:28.2496Z","times_seen":239,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}