{"report_id":"f21c678c-aa9a-4c56-9e30-dfc2661d3f9d","version":6,"status":"done","tags":[],"date":"2026-02-13T23:06:16Z","url":{"schema":"https","addr":"check-plasma.app/","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":""},"ip":{"addr":"104.21.73.72","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"check-plasma.app/","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"title":"Plasma - Stablecoin infrastructure for instant payments","dom":{"size":82318,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5786)","md5":"3eff1b340bca9a2a8682014f394caa96","sha1":"382de8c64377d724e1e2ed2c5ba1639ad87e28d3","sha256":"6081740dbcf835663bb113dd1d4a37c74a2454f015734137c6563b360edd3006","sha512":"4fce75445b35bc363ed73d73890838f47e81ced4a0861280113203e044a11174f40fce5d5039956e5a1cd39debfdf93566271f53156b8e4344845f4384f7056d","ssdeep":"1536:HS71AMGwTyEZrw5E0peijEf6AAouYX4Dxl/eFSBXXedUX:HS7Cf","tlshash":"6883b52c5bfb80bb254391a366256b197e45e587ca0a5905b6fe0fcc8fc2c9bdc1b05c","dom_hash":"domhash5b1b29cd68406ecd833b8eea9045d305","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"check-plasma.app/","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":""},"ip":{"addr":"104.21.73.72","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-20T23:06:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":4}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-13T23:05:54Z","timestamp":1771023954,"ip_dst":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":44064,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI","source":"{\"timestamp\":\"2026-02-13T23:05:54.309045+0000\",\"flow_id\":890109126930410,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.13\",\"src_port\":44064,\"dest_ip\":\"104.26.13.205\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2047703,\"rev\":1,\"signature\":\"ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_and_Server\"],\"confidence\":[\"High\"],\"created_at\":[\"2023_08_22\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"reviewed_at\":[\"2023_08_22\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"External_IP_Lookup\"],\"updated_at\":[\"2023_08_22\"]}},\"tls\":{\"sni\":\"api.ipify.org\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3437,\"start\":\"2026-02-13T23:05:54.290794+0000\"}}"}],"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-13","alert":"PHP webshell obfuscated by encoding of mixed hex and dec","trigger":"check-plasma.app/assets/secure.php?req=ping","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/04/18","description":"PHP webshell obfuscated by encoding of mixed hex and dec","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_obfuscated_encoding_mixed_dec_and_hex"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-13","alert":"Known PHP Webshells which contain unique strings, lousy rule for low hanging fruits. Most are catched by other rules in here but maybe these catch different versions.","trigger":"check-plasma.app/assets/secure.php?req=ping","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/01/09","description":"Known PHP Webshells which contain unique strings, lousy rule for low hanging fruits. Most are catched by other rules in here but maybe these catch different versions.","hash":"7b6471774d14510cf6fa312a496eed72b614f6fc","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_by_string_known_webshell"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"public-bsc.nownodes.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-08T22:17:48.645662Z","alert_count":0,"request_count":5,"received_data":23768,"sent_data":2409,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-02-08T22:20:44.026892Z","alert_count":0,"request_count":2,"received_data":749576,"sent_data":873,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fumbling-pill.click","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-16","domain_rank":0,"first_seen":"2026-02-12T20:37:37.689244Z","last_seen":"2026-02-12T20:37:37.689244Z","alert_count":0,"request_count":1,"received_data":625,"sent_data":447,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"public-bsc.nownodes.io","ip":{"addr":"172.66.145.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-05-20","domain_rank":0,"first_seen":"2025-10-14T19:44:58.496919Z","last_seen":"2026-02-12T20:37:38.340071Z","alert_count":2,"request_count":2,"received_data":1656,"sent_data":1025,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.ipify.org","ip":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-01-05","domain_rank":8166,"first_seen":"2014-10-06T12:38:43Z","last_seen":"2026-02-09T08:52:44.317696Z","alert_count":0,"request_count":1,"received_data":271,"sent_data":445,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"check-plasma.app","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":77,"request_count":75,"received_data":15678191,"sent_data":35685,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Webflow","description":"Webflow is Software-as-a-Service (SaaS) for website building and hosting.","website":"https://webflow.com","common_platform_enumeration":"","icon":"webflow.svg","categories":["Page builders","CMS"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-08T22:14:51.234086Z","alert_count":0,"request_count":5,"received_data":264905,"sent_data":2697,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.prod.website-files.com","ip":{"addr":"104.18.161.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-01-23","domain_rank":20159,"first_seen":"2023-11-01T22:05:38Z","last_seen":"2026-02-09T06:34:07.369281Z","alert_count":0,"request_count":2,"received_data":304255,"sent_data":1020,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"check-plasma.app/js/webfont.js","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c96a5f11d9741541d5e3c42ff6380d7","sha1":"d3fa2564c021cf730e58ffddb138cf6b57ed126e","sha256":"81016ac6be850b72df5d4faa0c3cec8e2c1b0ba0045712144a6766adfad40bee","sha512":"23c162a2e268951729b580e5035ad6ca9969cfcc5ce58a220817b912e76b38be6c29c3ca7680cb4e8198863d95a72ea65bd06ff7189b5c8475e4c1ce501aeab1","ssdeep":"384:i11kqRm4UjryX2DfatZrT80NCGz5r2zItrX:iEqRm4cy338m7d","tlshash":"7942c65d7652b26a825280f2177f060b9576fa2ab844c0bc7a89d8d46c74db8037ff7c","size":13188,"data":"","first_seen":"2023-03-07T01:03:17Z","last_seen":"2026-07-26T04:29:06.4925Z","times_seen":65917,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8f428394da936358f7d1dbc2d8a4e1ba","sha1":"99340640d87afa79ca3ab939cfecfbf1eb1e5647","sha256":"5ed47a37b6484a3d1fcdeeb4aeed507472fbf1bc42922949b9be4c05e4b4896c","sha512":"f31300870e465f1db0c3bb2bb11d37186f9a943653d9d5686484da1381a7c44825d31bdf6aab9cd78c6033bfb0339fe4b0c3109ef8d97ce5eb3b285782c901ae","ssdeep":"","tlshash":"c3a012025c0cc08316154d302e1f341bc0420fa7734308047491d8025130d68000400c","size":81,"data":"","first_seen":"2026-02-13T23:06:26.92976Z","last_seen":"2026-02-13T23:06:26.92976Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/js/script.js","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"21f2625e7cb41fe0f3fce10572e478f8","sha1":"9ac73a7860e4c36f8caabf3bc5746a9c2fe09718","sha256":"e7120b0423233da837830f4e7c3b448a2311e284fa88518b6231efe375b8890d","sha512":"77922cc2437858e1c8f94c8b1b195927f1446aa6f2abcd4fb0c5ccaae06feb76cfdeb9a55b45340a8e2493a92c1e1cdb0e2a2ef444280801e25c6fbdc0419ed3","ssdeep":"384:p4omzwNt73+ItdebtkhATATs/haRANI95eElZyxAHM1PFPGpc8tV7eJ/+o5dvzcf:p1p739+OTs/haRAS5NOCHuGpcggl+e7i","tlshash":"d6b2e968b6e4b0b503d370b8603b550bb3756929a445c0a4f268dcf66c7c98e8637fbd","size":24403,"data":"","first_seen":"2026-02-13T23:06:26.837529Z","last_seen":"2026-02-13T23:06:26.837529Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/js/jquery-3.5.1.min.dc5e7f18c8.js","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89476,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-07-26T04:05:00.848854Z","times_seen":263379,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"66e47ac826e0dcef5eccdc28248ad6f2","sha1":"d8b2c6d92a715712236b91445a74822ae99f9dda","sha256":"f78800a04e9d8f5f15f063d1929b9448c9b4710c8c23881413957d8d4c070bc6","sha512":"217e5644c3ff72134a665246b8d84029fc1110252c85c63cbc67bb2af7f818215456f51c9d27cbf7243cd0210d2ce96d238b47f2422d8b8e3cf2c5438b2c8afe","ssdeep":"","tlshash":"97d0223b22c0603c0c0b7a097b1ff90a3e4b928176902102ce2e97d06d43cee29129ae","size":209,"data":"","first_seen":"2023-03-10T13:56:02Z","last_seen":"2026-07-25T15:03:04.460499Z","times_seen":306,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-E2S1Q7F2X2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b1dc2f16bfc3c2039cb51145a74b5119","sha1":"24751a360b7e6ddb8b708ae7781974106c3fb8de","sha256":"f65f62f0657ba959239f6d5ac02912105ac5405b80539c2337adeb03ca2c71c1","sha512":"68416a298b371c1ef94a5306c2bb9e0749559024879f855e8ecefbbc5eefbf984ca8e88da5d549f352890dd4f592682b4f3caffdb485fd274be6bf363ed4ff6b","ssdeep":"6144:iAjNMmwzYPrw8wENIP8gMDSgP14j9VkV4Bq5Itz/uG:LjwzYPSmIP8G44BSa","tlshash":"0aa419ce73d674225296f478503f018ba57b24a2f48cc89af189cce42d74a9a4277f7d","size":450404,"data":"","first_seen":"2026-02-13T23:06:26.85703Z","last_seen":"2026-02-13T23:06:26.85703Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"643475105a23159ad21d6930b2fd6683","sha1":"47f4d5ff8c9f84909be206fd52da9f761fd9a02d","sha256":"790fb766b771e13541d59de95bc4c024146d4cf76e6d202854c6e71ee13809cc","sha512":"bbab3de3dcdccca3081b06fda398037522a03bf0e02479b00a21f89de3394ca7956caf8bd4cfd25808aa1808121264674259db659f043267833ad550c624506a","ssdeep":"","tlshash":"3fc0c0dc118b2cf054db3e408f3f71497022601380502e728c8b1308d120e2317dcc00","size":188,"data":"","first_seen":"2026-02-13T23:06:26.934545Z","last_seen":"2026-02-13T23:06:26.934545Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/js/webflow.77e6b788.7dc8b2d58b7afb43.js","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f6ef1b2ce57424afe03836ce8e9b028","sha1":"39ef86703f7e6f935c67e962cfddc8d24aae89a7","sha256":"344599e7e2949e7d8902265491dd2bab3aedb99cc0e3d3eeda213ece035327e7","sha512":"48a652e2a62310f0038fa7e1b1ac58a31fe36cca23de5de12c46eac500be3e36d7e871ae1a48aeed6d7f1146643565ffc2e20fe6533b3e1cda2fba2b479af590","ssdeep":"96:k7qtPI6ygCp2kkmVS/YgXv5NZeLy8WeI77Ps/7wVj5mRY05t9R/2ZNj:k7cPtygDk5c/YgXPZey37Pa7wVj5mRYH","tlshash":"d4a1a6d62a485c6a66b141d27dafceb2711e2075213fdf609205cdb43cb1e604a62ee1","size":4805,"data":"","first_seen":"2026-02-13T23:06:26.835535Z","last_seen":"2026-02-13T23:06:26.835535Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"011923505e4524ea4cd2424a67c45846","sha1":"cb711c0c2b90ed365abd3edd42095025d5afed74","sha256":"95de89b0a62d5f21f34b5fd077e1a3a1321cda03212837aa64f04d57d17e23ed","sha512":"c2507297320689febff3ff301555205d53e9627ac543ae5c0ff4dc6387ca291b872caca91a7006e787454b28597126bee361b46de9e0cdd620e2083cdf1a0dde","ssdeep":"","tlshash":"ec21022f45a5141663b31078a74fa968f01ba03fae2ddc01fd1c87186f74e2989153e9","size":1341,"data":"","first_seen":"2026-02-13T23:06:26.936058Z","last_seen":"2026-02-13T23:06:26.936058Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"79c7df1ace973963db677b4747b0d90a","sha1":"5a62ec6be258b083ab7bdcf04e5c1e1a64156f2b","sha256":"f108cb6cfc10286249f72311720d639c9dfb23f5798a124d22daaec9c66a1398","sha512":"57b54dee9d2851e93fe7d73ba2328df4f62ebd1fe306bb65a4f83e8647bf90154b6cd0fc4d8436698ecd9f7ccf6e52f036a0274e0839ff1013cb9617e42d309f","ssdeep":"","tlshash":"5011061c90f7217262e540681b4ba589b922b1536414da253f3fc39d3fc9fcc98b369e","size":924,"data":"","first_seen":"2026-02-13T23:06:26.937314Z","last_seen":"2026-02-13T23:06:26.937314Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6bd9dba651b51c44cc3769bcdc8dc2c1","sha1":"30a932f50719e690e557f8bfaa131b7ac3cf35e4","sha256":"846bb07b6381acbf1fca5a3ae2b36b778f13936ee9cf171af854eb1f990efb5c","sha512":"8cf765f50ebec023dd945bda9441e1ad7ca58bce1a3092ac0d1398f2847acdb267bd31f44e80c26bdff2277849cf2827a98b02acb7bb8bc01dce10200ba8e8b6","ssdeep":"","tlshash":"6bf0ab8b75da14346d4b90765b3c8e243122226ab0444033bcfc88392f092ae0966be8","size":441,"data":"","first_seen":"2026-02-13T23:06:26.938611Z","last_seen":"2026-02-13T23:06:26.938611Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/js/main.js","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"44d5c9ebaebe262f4839620c10aee46b","sha1":"edcb68e52ada2acc7251489d54b38165656a0e58","sha256":"25eacca2d605d74d24751da6c41e01f9aeae0bca3dbb0aedf5a1780f06c46813","sha512":"c28468ac754c67024cb01963202f44cd792ae630acebbc8415f37fbd6b3f432ff5242dc6480f300c782bc49e01473dcb224a4c346ee337308436b8ebc261d5a2","ssdeep":"24576:I9C7GNN+KGrlrPr1xrjgaAFxzWVOcwj28FhLE19GMYN+haXNBnAg4:II7IN+KGrlrPrr0aAFxzWVOcwj28FhLs","tlshash":"11554c99b2617035498361a9443f050be23b7859344ac09cf639e8ea6cbcdcd71bbf79","size":1344984,"data":"","first_seen":"2025-12-06T01:36:39.979132Z","last_seen":"2026-05-02T14:41:38.424888Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"check-plasma.app/js/webflow.achunk.82f44582d86d1ea9.js","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:52.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /js/webflow.achunk.82f44582d86d1ea9.js HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:52 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZOYBiWjWOhzD1P%2FQ%2FNGlpwoLs2jOAIXMb2PxCHzQi7YUuQx9IzXuHHBY0hPKqErKNJLJkCcPq7P%2FzjuxDRGKs5BQE00%2BTTgaH63RYQkof%2Bg%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cd7f915cb641806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T04:24:09.297648Z","times_seen":17539466,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/css/plasma-revamp.webflow.68762d4ac364502c1ae19240-63460950a.min.css","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:51.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /css/plasma-revamp.webflow.68762d4ac364502c1ae19240-63460950a.min.css HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:51 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:03 GMT\r\netag: W/\"690bde37-95ce\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3me1qNyMrzt7upzUMFpKHieOnxUzPSsBZcsxK4DKKagjcZpaVc3HoWs2P7kPkF6JbgJDxC%2BPcdM7jfy%2BOihOjiIEkbJnd%2Ft%2BR6eDR662r2c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f9130eda1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":38350,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (38350), with no line terminators","md5":"d256cbb5f33c141103f72977467bc9b2","sha1":"498fc87c66480d7edc35013f8a8dcf8afe128667","sha256":"5c924cdaa565e4c2bc3cd3079baae1707770edfa4224021f1527f6f17060b4e9","sha512":"c1a9fda711fcb6f663ad3fedfd594d3b5a35add1c13f0fe201ab584205a841102e9ecdbdcd702338eb51ac47f5c92d5720765ee7148efe1eee1df159c5f187be","ssdeep":"384:kVHYKuUjJs+54z3gcsUxEL7XxHPOOnbHCqJdPIXzGmNHFgIz7ojAVeLVu01UjJ1k:5YbbzWHnMWGvH","tlshash":"7d03b9abfb60b6bd785b303bc7e8a18c4128a005cd3217d9bd87d5514ac77e31af5688","first_seen":"2026-02-13T23:06:26.803762Z","last_seen":"2026-02-13T23:06:26.803762Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/assets/eleven.js","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:51.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /assets/eleven.js HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:03 GMT\r\netag: W/\"690bde37-363c9f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2nEoJYhsvraktyJa6toj1nNRrtpmD2UUOUnXnuNSfAtJ4ilYUNhojrKNRXEFQRA3TI29dGxUzts2LutwFktl6F7K7%2BKAER4o88CHM8YYrKw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f9130ee41806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3554463,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"f2f4817e98520974fa2231465b9622df","sha1":"bd9e7fd113b1288f1898428482fe7ad2530bd855","sha256":"f5f494b8d1bcd903f71ca39a8c92654dc5d32190c4a258ae8851d6dc84df0437","sha512":"b590679827c3d0cc535eae642b5f3e0911d03286dfb9e62cad3d70733a7457722c318612c3d8d4161ae0ff132b74602edbb2db51d038f54f12e40690c2762d31","ssdeep":"24576:/MVJykT7EfO2R6Gtd0hAbDG+HM4GGyQzJ:/MVJHT7EW2R6+d0hAXBtGGyiJ","tlshash":"fe254c9073a5b06243da14e4187b1006f279bc68744d80acf69cecfb7da9d84967bf39","first_seen":"2025-11-05T00:46:24.310652Z","last_seen":"2026-07-09T12:15:00.015484Z","times_seen":70,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":153,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/images/68762d4ac364502c1ae192b9_Logo-1.png","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:51.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /images/68762d4ac364502c1ae192b9_Logo-1.png HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 1277\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:03 GMT\r\netag: \"690bde37-4fd\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2urLw%2FEMgkliZHGNcX01LRMFw4qQH1actXbk%2BopHXYt%2FNuvEig3cHwrfQJbBfPD0nM5B9BaksT505cf81aoMnEb097T7fmhfOllQatfQ%2F8g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f9132f291806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1277,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 480 x 208, 8-bit colormap, non-interlaced","md5":"c315b32913d9fca8d1ec86896ae303ce","sha1":"b36e88a64acfaa2c948b6cfa0bb7e9eceb320c25","sha256":"077bbda9b6532c1dcc791e34c071f1cc3600b77da464ae2d95585c886959b866","sha512":"b0bb5386c9a551a25ca0c7c3c3e8555d66bdf8c086e3e2fb13dee046544a350cb1c3e2288d561940464402010b36822bdeb0ffe9f6ded9f271540bd859681265","ssdeep":"","tlshash":"de21c6d9a13a6c31e8237bf69747aa2cc8921dae56f70589420f794d7d3024380283d6","first_seen":"2025-09-25T11:47:30.083656Z","last_seen":"2026-02-13T23:06:26.81129Z","times_seen":8,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/images/68e661a9f8c3c45a0c846f71_c8bf37b79b894c67edda245042f7bf3b_SC%20Single%20Line%20Black%20%281%29.svg","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:51.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /images/68e661a9f8c3c45a0c846f71_c8bf37b79b894c67edda245042f7bf3b_SC%20Single%20Line%20Black%20%281%29.svg HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:51 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vRMMo9ZaVZQLH7CteWQCZy6feSGUCcAJtq9bfmKBa%2Fs6l5RQ9YxiwKyoqnmaQcD18%2B54BsIipCFnGs%2BtB5LdtoBbkW1Z4tS%2BCJ0AD2Uy5rE%3D\"}]}\r\netag: W/\"690bde37-438d\"\r\ncontent-encoding: br\r\ncf-ray: 9cd7f9133f561806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17293,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c8bf37b79b894c67edda245042f7bf3b","sha1":"7b22cf3af29e4e7c21c8f90fe550f8446322f290","sha256":"894f6cca5d64b15d923430fa88979826ce2a7289755fbe1290ffd13dac486625","sha512":"1d9db3ab389c80bc68b0db7bc48866e750a725394e3aece3049b129d43660176b9336f3444df9533936978ed98b33c231d9695e8a81e66c9406a4133ae537557","ssdeep":"384:ULiJnDzmyfDLxiHwJHk8R3TKOvLNuGF1Gr/706lx:U+JnDzVDAHd8R3TKOQG7e/7z","tlshash":"1372d0deb94e6c807ad5cad6c787dc91452720ece865c70ed050b241a87c9ea9fb03d3","first_seen":"2026-02-13T23:06:26.813346Z","last_seen":"2026-02-13T23:06:26.813346Z","times_seen":1,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/js/webflow.achunk.9955643573f878d3.js","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:52.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /js/webflow.achunk.9955643573f878d3.js HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:52 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BYFFeAOvNcDcnqm9ILNF9QggKFWUeCaUYM6HjilgODoPTN4y%2Fn38mLdbaga%2Fz7OIbAU%2F0DHXFEhGGTNjLAYxJp4uqunulFiIPuMJIlZK3Gk%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cd7f915ab321806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T04:24:09.297648Z","times_seen":17539466,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/js/webflow.achunk.626e930763cc8d44.js","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:52.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /js/webflow.achunk.626e930763cc8d44.js HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:52 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P3qjnNov7T7TDU%2FgZFCI0hOFY0oC9Lep27m%2FLf3KuaCwgOw68MinZL9DzizjEKNleU594mTYc2WaXcBmR3jF%2Fr7hOLc9WeOVJioMaDr8pis%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cd7f915bb371806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T04:24:09.297648Z","times_seen":17539466,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/js/webflow.achunk.ed560f9103ced093.js","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:52.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /js/webflow.achunk.ed560f9103ced093.js HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:52 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hlciG5X35c5Edr%2BxOB2osVnHzScP9wXI8lt4ihvvect5iO0bvfT9g0j3BzG09gjJRvKy4p5ws8%2BuISsoiw1JvAXodNwrcSUazrnP4d8wg4Q%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cd7f915bb381806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T04:24:09.297648Z","times_seen":17539466,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/js/webflow.achunk.b4435221be879eb3.js","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:52.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /js/webflow.achunk.b4435221be879eb3.js HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:52 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qdK3ks7BBoODmD3Znrxw1DxLna%2ByRGjV9ivWkYFmmrcN9WH3tMiPB%2FlzJHBAONHXhuo%2B%2Fb2yCO5N2IzkINwrI1dO5NnXCrLQztdq3kWmC0g%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cd7f915cb631806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T04:24:09.297648Z","times_seen":17539466,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/images/68762d4ac364502c1ae19271_Logo-9.png","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:51.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /images/68762d4ac364502c1ae19271_Logo-9.png HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 1156\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:03 GMT\r\netag: \"690bde37-484\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9c4ygjMqURyJ7k2MmGZwvx4AK%2B12y7Y1E6wDAmSWn4shiK7BKf2DHm8wmG87UoHrpVxftwphtkLwnrVWXIAOqYUML0xiv4oqf7I7gcbJ2ik%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f9132f351806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1156,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 520 x 208, 8-bit colormap, non-interlaced","md5":"fec5ae8832de15660a502d400eee2509","sha1":"d5c827dacff2954e2efbb104223d1b34bb0ff3a0","sha256":"da06061211f3fb47bf698189b3a2cb8295088b1032221c287f6aafd2522237d9","sha512":"e354a5d3ed224f7f921e6a5cc79972235dfbb910063d1147360442b24735e3c8ff41037a37299b93905201f4f0359113fd63577c2ae0d89b68c38da30abf4d17","ssdeep":"","tlshash":"3421a55c8f73fa6ac50a22b0c0e4385a1eb1731a25fc2cc7f01c87699da461a9054b6f","first_seen":"2025-09-25T11:47:30.153624Z","last_seen":"2026-02-13T23:06:26.814809Z","times_seen":8,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/images/68762d4ac364502c1ae192bd_Logo-11.png","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:51.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /images/68762d4ac364502c1ae192bd_Logo-11.png HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 1326\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:03 GMT\r\netag: \"690bde37-52e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e%2B61SGYKpj3yKLKSvSF1nSl4JOJUcGtGeAAifARQ4rXegMtD09REBC29Ac7TkQlecG5ydCuicZE%2BwN8E6t4xuZ0Vt7itOA4wK3C3b32GNKU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f9132f3a1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1326,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 208, 8-bit colormap, non-interlaced","md5":"bfde9c5081be39638f49540f17aa5e58","sha1":"c4e486e89b4924150a2184d99ddb7c1a10844a75","sha256":"d94e9eeaae6ad637b096c49a1793da8e992924472bae7a24800cb6bbe6c84ea5","sha512":"ff7e0b57775939895f01c5c4fb99165b6b7f6eff17b915b5310c768a4014cfcbd00342eead3d652977f6e4f10267fa816f324abd0a327566daeae5163ea6431a","ssdeep":"","tlshash":"ba21b7efa5308cbce4a2f0b57415431aa5d15a02e96011f0eb51cc7811e6e14c496745","first_seen":"2025-09-25T11:47:30.156775Z","last_seen":"2026-02-13T23:06:26.815466Z","times_seen":8,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Vollkorn:400,400italic,700,700italic","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:52.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css?family=Vollkorn:400,400italic,700,700italic HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 13 Feb 2026 23:05:52 GMT\r\ndate: Fri, 13 Feb 2026 23:05:52 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8166,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"da296fab788169b0ea141c78d21df9ff","sha1":"5f29c8b955cb4b4b1abca2354d34862b73933305","sha256":"b5bb09fefed3585b7949a9a61b2a7cae297bb54036092a2004309729f09cda46","sha512":"32c48c13feea56f6cb227bdd75fc5594d7d92de130c02000ccae5b6b2ff6fb1b1dd3b3857d9c99ce754b8196c2768e0cd60e2cb572d0978562bec44df2e34741","ssdeep":"192:OkKekcklM33kAkj4kDpKepcplM33pApj4pjvkcxI3naQiivkBMI3uDQrc:OfeTz3d9YYeuG3WqONUz4","tlshash":"fcf18d92042ba1407ac31cc633cf7c369e8fa11471468979abfe1d9dfca9d36126471e","first_seen":"2025-09-14T05:20:09.915743Z","last_seen":"2026-07-14T06:10:54.262458Z","times_seen":72,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":125,"dns":1,"connect":8,"send":0,"wait":25,"receive":0,"ssl":132},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/js/webflow.achunk.ad6dcd2fc75b294c.js","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:52.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /js/webflow.achunk.ad6dcd2fc75b294c.js HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:52 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Zj62lgtdiqJ4CGZKLuSJBpfF9p%2F4IltB2Of6JlLp2N9Y3Unir241aoaleUZ3gqM2k28m8pH07BB%2B2XAfqDNh7BRqBvc%2BWlPw%2Fh9YkMk7L0%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cd7f915ab291806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T04:24:09.297648Z","times_seen":17539466,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/images/68762d4ac364502c1ae1929e_Frame%201597880416.svg","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:51.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /images/68762d4ac364502c1ae1929e_Frame%201597880416.svg HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:51 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5k3E1cHctHsdPFVmYwKKRt9oB7R%2FWxAg7f7RfyzaIN2BYTmXUp2%2FYQ%2F3412%2F6ZgMEZYzdE88x%2FERA0ng%2FfLU2%2B5J%2Fyd548iOmLRp7wPB10w%3D\"}]}\r\netag: W/\"690bde37-7cd\"\r\ncontent-encoding: br\r\ncf-ray: 9cd7f9131f021806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1997,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b79d7bce218ed9fea042d23740427627","sha1":"ad1a2a8b32187d9ad0144d8f7cfb20cf8bfac10f","sha256":"49f9a34ac7a227f23cc0e69eb8408a3ea0434fd84e5a5b61669d72869271e512","sha512":"a5e563bb1c1a70775dcad2917b58a982c117950c0f42ee05525bde082b05fcfbc54d280af8ea355d5f3aa5bc3c8279c96c027a9ad75e181c4b0f089d7e7fa06e","ssdeep":"","tlshash":"7241f084427be3f4b662e0fe497756cabe6e54e06349d0b9c3503d8295031b664e21ef","first_seen":"2025-09-25T11:47:30.144594Z","last_seen":"2026-05-02T14:41:38.396223Z","times_seen":28,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/images/68762d4ac364502c1ae192de_USDtb.avif","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:51.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /images/68762d4ac364502c1ae192de_USDtb.avif HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1062\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:03 GMT\r\netag: \"690bde37-426\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cpcf0zwM8NTK1vF5L1ZLrIWcNQI5KgJzL1%2BiYVIhZeWVsh8OWh2cJgPugTUR5eLGTJeEw21lv%2FAoW4ysboBmXsYNxH3sTw6AJDPC3a%2Fr54k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f9131f101806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1062,"size_decoded":0,"mime_type":"application/octet-stream","magic":"ISO Media, AVIF Image","md5":"ebc218123e64a5b18cbc028f56418671","sha1":"dd27265bb70098b0dae258bc07ee5ae6e5605efb","sha256":"cec0ba85adcd4f37c51d759cc93f4ca3250c57bc544d6fe78e4d35fb43fb1ab1","sha512":"fd320a27d94f12d60a4852d9e9f372722cfa38d55e6a90e190cbd862dc619107abca0ee99c0b565cfdd5dd3d271e2e49ebd99da4966850c2eb7684342016af8f","ssdeep":"","tlshash":"1e11941167618d50c40c037e6186d32a27a1f3a607a71ac67cc37824be35ae7ed24d27","first_seen":"2025-09-25T11:47:30.117473Z","last_seen":"2026-05-02T14:41:38.382186Z","times_seen":27,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/images/68762d4ac364502c1ae192a6_Logo-10.png","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:51.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /images/68762d4ac364502c1ae192a6_Logo-10.png HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 1040\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:03 GMT\r\netag: \"690bde37-410\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u8Q%2BKFGixU%2FS71086qOwLfCzZ5EHPYBbrLU0lVinMU4Ylgb%2Fgl87bLmtajmvEiMBUQ46ljocHOMPcnSooyAaH1Qhx2iltOkZEDVxKI7cptM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f9132f381806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1040,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 208, 8-bit colormap, non-interlaced","md5":"de69873e547f729aa48ac209a3e5203c","sha1":"8e0b21388871a9ddbe946e2b4487522fc60b2a54","sha256":"dd0ce216cc27cd7d92eb23fbcd279ae52bc14de548e98470546d47aaec8c61e0","sha512":"4430888034a8917626cc17fe3ce29e12635b0a058d701e03b40bdbb98f5e309b5334d7d4a9c2cb8f435d5976596e4a89d91b6f29da1a00f376189cecb64c3ac2","ssdeep":"","tlshash":"6d11947a0c136a90dc96a837063e371be7478ad73d5638b1c182057ad04762b68a4b4b","first_seen":"2025-09-25T11:47:30.116246Z","last_seen":"2026-02-13T23:06:26.818391Z","times_seen":8,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/images/68762d4ac364502c1ae192bc_Logo-5.png","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:51.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /images/68762d4ac364502c1ae192bc_Logo-5.png HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 1326\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:03 GMT\r\netag: \"690bde37-52e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R4nucqaCqZEhqzGqtS%2FTB2u8j7hmS4Icczv6SWlXVXkCLvHL%2FbKbErandYF15LuMOzDrm%2FVjazIrDPo1VVGiyc7lxW4ys2eXMWonc63MxjM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f9133f521806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1326,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 208, 8-bit colormap, non-interlaced","md5":"3277c52a97b2267ab7a65531dc9ec2cf","sha1":"a7a9f91c3cf848b9dc6a9dcfcfd391de2df062e3","sha256":"15d21494b3d0206b071af311afdc8d90a45db0d095e5b5386faa98b80629634e","sha512":"0ffd68535c95b8e45efb9238045b42603189d26a25ea64c2d95961f264a243c7849b1d8e03aa0d47718a2df022cad8b5958f5d9d5acaf39da33b644e4dcc8ab7","ssdeep":"","tlshash":"c721b7efb5308cbce5a2f0b57415435aa5d15d02ed6011f0eb51fcbc15f6e108492745","first_seen":"2025-09-25T11:47:30.111189Z","last_seen":"2026-02-13T23:06:26.821217Z","times_seen":8,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/js/webflow.achunk.2343c70da181b95c.js","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:52.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /js/webflow.achunk.2343c70da181b95c.js HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:52 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ExWGvBiQFUnxQdE9dKZEK9ruZcC9saeOEHbAO218%2BgiMJn5BKheXa4%2BEjtjKtwFMuvJylvHiJfon3RreotKcgSRqsWG7iIl93JffI5A%2BK5A%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cd7f915bb451806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T04:24:09.297648Z","times_seen":17539466,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/vollkorn/v30/0yb7GDoxxrvAnPhYGxksWE8eqQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:52.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/vollkorn/v30/0yb7GDoxxrvAnPhYGxksWE8eqQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://check-plasma.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 47528\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 00:48:03 GMT\r\nexpires: Sat, 13 Feb 2027 00:48:03 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 17:07:45 GMT\r\ncontent-type: font/woff2\r\nage: 80269\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":47528,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 47528, version 1.0","md5":"7a9b2136d0f26f870e22e8a0484762df","sha1":"6ecf6e9bcba9eb6d185499ac593c4382ecd9e122","sha256":"2b21f0fe01d929e246f513850bb1e2658eb77d9ab80c68a53a460725d66a5059","sha512":"21bc5c75935b7fe4e20e6e2a19ffcbb4b868e5dc75a756d82a2128d9072541d7ca9f719f2ac9d0571eba1185484ec7160d51700d8d28b5c6d3285149d66858ca","ssdeep":"768:q9H4lLBRHv8LPcExPGeNaNxoM2lencnhBY5wNtYp2L3P1sdOOcMq6ZXWLQVG8K/e:q9yLXPIhPNNaNxo5ecnTtA2+8qnWL8KG","tlshash":"c22302601fa7c5c1ef0abac261585fabcef81c742655c3915fba08d0b222f9a33c51d5","first_seen":"2025-09-12T10:12:12.411125Z","last_seen":"2026-07-24T19:28:41.993081Z","times_seen":656,"resource_available":false,"data":null}},"time_used":436,"timings":{"blocked":200,"dns":3,"connect":23,"send":0,"wait":23,"receive":7,"ssl":139},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/images/689dfbedcd6a33a92b3a6e55_Plasma_logo_256x256.png","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:53.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /images/689dfbedcd6a33a92b3a6e55_Plasma_logo_256x256.png HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nCookie: _ga_E2S1Q7F2X2=GS2.1.s1771023952$o1$g0$t1771023952$j60$l0$h0; _ga=GA1.1.762194008.1771023953\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 13465\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:03 GMT\r\netag: \"690bde37-3499\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 90\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ViZLiOfdCNRgwglZELXIP20%2Be3wlK3dxT8mkIEEUofbDqLV09Zc8Is8hBX53IXot7%2BvgGC95eqdpSCBgxkpG%2BGMHWBTRRri5nX9QKhSfon4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f922585b1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13465,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"c0e8d1c0b4fc89bc7a76e2663159ba26","sha1":"3e41f7d1a309f25e985215ca818dc2d20e58c168","sha256":"57064f82c8c55bbed68cf21497ac72de4866e579b35470a00c95b24730bfe9f9","sha512":"440df9cb6c5169244340c27fa9606fa733f4ad442cb3299e5a104501f296c7f495f0be184c3035cad5dea189a15f5a08f3b87845dd60395ef3dbc0b30be7f27d","ssdeep":"384:UnaTd7bX2VcVC0d9jsFqPjn5uFhWv5hyoB:NdbX2Qj+q75uFhghyoB","tlshash":"0052cf228e0d8c9c0e0ea4dc2d8d27c6c957e2a359801c24ab0fa816f47a99d58df0ed","first_seen":"2025-09-25T11:47:30.098536Z","last_seen":"2026-05-02T14:41:38.387456Z","times_seen":28,"resource_available":false,"data":null}},"time_used":555,"timings":{"blocked":541,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/images/68762d4ac364502c1ae192d8_Uranium.avif","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:51.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /images/68762d4ac364502c1ae192d8_Uranium.avif HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 906\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:03 GMT\r\netag: \"690bde37-38a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PAfVLDO%2BwtmNWhnnoWovm5UQJphgXh7VvlwsFuGZtixAA3LOhp2r7sKmb0YMZ2A52sLhaui3jDq0h6C9kS1ok4%2BRJaptJDhVAI6Hk%2B%2Fgw3s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f9131f0d1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":906,"size_decoded":0,"mime_type":"application/octet-stream","magic":"ISO Media, AVIF Image","md5":"1b382685fb3a7377800904f744f53887","sha1":"0785b6073b3c3b41766bb343c7ecdfb5a7bae3ce","sha256":"52ca88a729dfdcc846f1aca05d2b8210c78749683d983cb549d06807d4f9516d","sha512":"f592a6facd42c76a59b336f1250aeefdedc5b3a972a12f9239d8ffcfd54768fb71408b2da4524d8a6f5076f678a5ffe81bf7d43412903b1b170917b3d5ca36ad","ssdeep":"","tlshash":"bc1146113bf94c0ad09c03738c8c972526e4527093faae8eb9493415dd78b73d934e78","first_seen":"2025-09-25T11:47:30.138783Z","last_seen":"2026-05-02T14:41:38.392543Z","times_seen":27,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/images/68762d4ac364502c1ae192bb_Logo-3.png","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:51.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /images/68762d4ac364502c1ae192bb_Logo-3.png HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 1156\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:03 GMT\r\netag: \"690bde37-484\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pq7T3UZftB98FC9fRTe38NSzXX9vqAccM99NJXYFH%2FG4GbSf8TIvzwMOUKGyd1duGNWlYYDPD%2BWyfRy9b3UjYU1m9H8Izh4mstpld%2BRUfeI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f9132f371806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1156,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 520 x 208, 8-bit colormap, non-interlaced","md5":"f49f65cdf530e08598948e279c5b4b12","sha1":"ef1f37ffae63cea545bfeec8e1daeeda6edf7feb","sha256":"9b6942e03ee61ef7356c12d285847b21abcc60fffbfad9871353a502e801a50e","sha512":"874aba523dba6a2120510761baf2c4975f0af3a04b7814f5a7c57dbec28b142aefae0b09bfdd7c9c51138318bb3f1a1f2760cf664a0809f1ce4c613896e1065f","ssdeep":"","tlshash":"9621b54c8f73ea6ac506227080e438560da17f1a14ec2cc7f00cb76d58b421a8054b5b","first_seen":"2025-09-25T11:47:30.155633Z","last_seen":"2026-02-13T23:06:26.826156Z","times_seen":8,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/js/webflow.achunk.65add74e46fe5245.js","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:52.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /js/webflow.achunk.65add74e46fe5245.js HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:52 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VE6BA6nLOqrWeIOAO5KJptMAidHRosEl%2BqJr8jqR7RNwI74E9xNaJB8v1klzlZDJaGdLQSsvprH%2FJcTz8wXQyCMaXobwentDpkAI3Ube4Vc%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cd7f915ab251806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T04:24:09.297648Z","times_seen":17539466,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/vollkorn/v30/0yb9GDoxxrvAnPhYGxkpaE0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:52.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/vollkorn/v30/0yb9GDoxxrvAnPhYGxkpaE0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://check-plasma.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 46356\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 12 Feb 2026 16:33:36 GMT\r\nexpires: Fri, 12 Feb 2027 16:33:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 109936\r\nlast-modified: Wed, 10 Sep 2025 17:06:09 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":46356,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 46356, version 1.0","md5":"2b391a84a151389641cb774eab08048c","sha1":"c279d9f8b9d0a45e8fd617b4e02266a886234ed8","sha256":"3d9ff812bd542e52bb7f0c204f3a21152e22aead4572ff09722c1b38f30d7567","sha512":"30fe1e8512a207aadb9e432ceded4084274fad458f83efc2bb6cfb0f1cf19bac57fb05c58f767ed3e2c095e57577306f75f861bf3842d8d0fd6638fb062a0d41","ssdeep":"768:Id8XdYq6VtwsBUKFxCCQN9EGfETyGH2MlXPFoBL5cUmkKWt2kDnjzG3j2fQmKkO:I8diVtwsB/fCDP82MlXPaL5c7Wt2kDeP","tlshash":"392302e8504c0d5acb9970f4e89ea20851c40bbf4777cef07a9b313374983e78275662","first_seen":"2025-09-12T10:12:12.403765Z","last_seen":"2026-07-25T23:41:46.622622Z","times_seen":2053,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":147,"dns":1,"connect":21,"send":0,"wait":21,"receive":33,"ssl":129},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-5NWTG4QK","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:52.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:20 GMT","end":"Mon, 20 Apr 2026 08:39:19 GMT"},"fingerprint":{"sha1":"60:64:B6:72:E4:67:A4:EC:78:B2:F2:B8:3E:17:7A:A6:A8:CE:74:4C","sha256":"3E:71:C0:44:31:9B:1A:8A:23:FF:D9:4F:B9:3F:89:6D:7C:66:33:BE:14:26:CB:01:F2:79:BB:FE:F3:3A:71:98"}}},"request":{"raw":"GET /gtm.js?id=GTM-5NWTG4QK HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 13 Feb 2026 23:05:52 GMT\r\nexpires: Fri, 13 Feb 2026 23:05:52 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Fri, 13 Feb 2026 22:10:27 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 104236\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":297938,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4319)","md5":"68752c84b53370a64af128471f88f7e9","sha1":"82d1876a522f56bc5706a1db79085d4f45436498","sha256":"d1c617263aa8db64219f0c70b2bc76d47df22e6fd6c156601ffb777c34e1c918","sha512":"51d2eda582a67bb2e2c34224fb6900dd89a4b210fb5c3a4b808a0237911a303c20973ed8518025787a78c8260d99199ddf0a31bfece0dd2a4c4220f5c2ae018a","ssdeep":"6144:DjNMm4bfpw8wENN8gMuSgP14j9Vk74B4lzr:dj4bfgmN85o4B0X","tlshash":"415407cdb7d6742243a3a478403f014bb23b7992e88cc894f186d9d52d74a6a8277f7d","first_seen":"2026-02-13T23:06:26.829Z","last_seen":"2026-02-13T23:06:26.829Z","times_seen":1,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/settings.json","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:53.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /settings.json HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://check-plasma.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_E2S1Q7F2X2=GS2.1.s1771023952$o1$g0$t1771023952$j60$l0$h0; _ga=GA1.1.762194008.1771023953\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:54 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:02 GMT\r\netag: W/\"690bde36-351\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 90\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FrDOnWk3V8U6KERYn4WHgeKlhlS%2BR5%2BcYdff4GerVeITvAv4NlQC4EmxErQsbgOi6glHzFKSEFBmD3bTo4JtHF8l0Wk2C66ffmnTAH8%2FXsg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f92258591806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":849,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"02bd041ed8b4dd5b668df890127e32dc","sha1":"04663e231319d75fc44d8dff9768dd0d1eb636aa","sha256":"a5d7dd5d2870582524f48aea85e8acfedc78023fa34b08a46dadfd55eedebf8d","sha512":"14816583aca5f79ee7937691bf9c7d31105a337c26f58873d2b1218d13b3a380f7cdc4ba42c13ca622fe15726442f580e80318a01311f47420482328ebe03c7f","ssdeep":"","tlshash":"5901c2499d51486bd5ca1528b55eb20509157d6743d43d506f1b50186b3c76f0f31bcd","first_seen":"2026-02-13T23:06:26.830051Z","last_seen":"2026-02-13T23:06:26.830051Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1044,"timings":{"blocked":1030,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fumbling-pill.click/api/ping","fqdn":"fumbling-pill.click","domain":"fumbling-pill.click","tld":"click"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:54.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fumbling-pill.click","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 16 Jan 2026 21:09:01 GMT","end":"Thu, 16 Apr 2026 22:07:44 GMT"},"fingerprint":{"sha1":"10:4C:C8:56:AD:32:70:5F:53:E2:0B:1A:90:78:05:37:E0:30:15:50","sha256":"E0:0D:BE:05:A5:2B:6D:65:24:F1:7D:AB:FB:6E:9A:3E:C5:CA:05:3E:14:40:36:58:C3:83:D7:6A:98:17:17:2F"}}},"request":{"raw":"GET /api/ping HTTP/1.1\r\nHost: fumbling-pill.click\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://check-plasma.app/\r\nOrigin: https://check-plasma.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:54 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l3FilZQQuI%2BqXgfjpbv%2Fpklk6RdmqLfUKKaUlYYll0Un7GsDK7bfgtapLKJjoF4%2BX%2FWmx1oG3sSpQr4AZJFtZnnZIFwA0Ybs1Y2yjsZdM%2F52TZs%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cd7f92458fb4b93-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"594d96ea0628a6a87187b8e17a7fa4b0","sha1":"5fbf4e5362196240e62d4e192bd93777898755b2","sha256":"cb100e693b55b36a08dc2b04eb312835069a4f2fc406ff374b21313b1f56b5cd","sha512":"c92fac11849dbd07dd610982d2d2e49f7aa59ec6048782145992bed639b1a518c539d9603bea6b79e4f29aa745e301923edaa9d96e1dec3ce27a8a2f4c2f2f4c","ssdeep":"","tlshash":"d96000330c0c0330030c0cc0300fcf030cc0c0c00000fcc000000300c300c000c00300","first_seen":"2025-10-03T14:25:47.505502Z","last_seen":"2026-07-21T08:06:30.221351Z","times_seen":835,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":31,"dns":1,"connect":8,"send":0,"wait":204,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/images/68e3c5c36ff8e6d2bc5145ca_b026887cfde9a261f8955f071e21af17_DAYLIGHT%20profile%20icon%20Universal%201000x1000%202.svg","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:51.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /images/68e3c5c36ff8e6d2bc5145ca_b026887cfde9a261f8955f071e21af17_DAYLIGHT%20profile%20icon%20Universal%201000x1000%202.svg HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:51 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=paWHmd0tVD7ZyVpN8PFHgkfxqXIzehodCVKA%2FWupTNsG5qDClruY09h5AZdVtFTp%2FbatxUPjd4hLpOZ6Rq2JGWxcLjmt1ZUbIFyTlMB%2F2CU%3D\"}]}\r\netag: W/\"690bde37-8eb\"\r\ncontent-encoding: br\r\ncf-ray: 9cd7f9132f171806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2283,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b026887cfde9a261f8955f071e21af17","sha1":"81ec09af3a80d8e9f0ecbb464b6e71d400fcd615","sha256":"630a189456d61f4835eee5d47798dcc553793985021f617625c903ab911ab5e6","sha512":"f681a081d38954580adc5fb0d513fadef68631200f115d6e733c9146b4b319cd8cd8c0666a5d2fda9c3d79d31fefc02d03705162e91266955e952b66bf44bfb6","ssdeep":"","tlshash":"f9414050f3ece3d2d140daf807b9b4b92b2b15f27421c5388fe6ad34e87445e48a98d8","first_seen":"2025-12-06T01:36:39.86932Z","last_seen":"2026-05-02T14:41:38.303803Z","times_seen":21,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/images/68762d4ac364502c1ae192db_lvlUSD.avif","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:51.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /images/68762d4ac364502c1ae192db_lvlUSD.avif HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 778\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:03 GMT\r\netag: \"690bde37-30a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SItxtKlU2auqFv%2FsykM3FaN%2Bvj14ag%2FAAQnj1ermN38K5H%2BBYNJgtoeyb1WvH%2BluK2fkdPbayn5ZpOjxzHdn4tr1AdKYjr%2B1kF%2Fc%2BMAZjUI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f9132f1c1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":778,"size_decoded":0,"mime_type":"application/octet-stream","magic":"ISO Media, AVIF Image","md5":"fc6345ff41fdc5a5c310011d987b23c5","sha1":"d37062a3040e35a32adfa09d4b25861facd4d2f0","sha256":"b0e39b727aa72e1c4116698eb30e0a300d70b89fe272cfec65eff9b2ecbd46e1","sha512":"007ad0a6bcd45effd85731eca0ec5fde52bd6970ae562974f6066aeae33da0fecef27f737de5139e1ebe60447c2e6adcbeb36b73e95214fe950a4e05ecdf4d0f","ssdeep":"","tlshash":"ed01445227e10d00e05c073d0549d32b3660563567a73fa77c423a548c74763cb15d29","first_seen":"2025-09-25T11:47:30.093734Z","last_seen":"2026-05-02T14:41:38.375268Z","times_seen":27,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/images/68e4fdc92db17ac8d84092d2_1394a993fcc4e875594310ce2c73c096_SC%20Single%20Line%20White.svg","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:51.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /images/68e4fdc92db17ac8d84092d2_1394a993fcc4e875594310ce2c73c096_SC%20Single%20Line%20White.svg HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:51 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NieP%2Bf9cko31OFjnxA79EuKf%2Fb275mfJCZtyNwOOGHOJ1vhPxwsMdG8Aqh1RthWxLFuoLii773bZkYfSoXxHiS0X0XPMZT%2BxGI293%2BiZCF4%3D\"}]}\r\netag: W/\"690bde37-349d\"\r\ncontent-encoding: br\r\ncf-ray: 9cd7f9133f5c1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13469,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1394a993fcc4e875594310ce2c73c096","sha1":"45f98e10a1389acc6afb65f3df40a7a5a56e7f97","sha256":"47cce00391d02f3eaba42ec2abda35a656bd06cbd9904a56d0d20b9124af326d","sha512":"05d9e565db8721ee491c19ddfe2152053b5e15fa70b636c390df0579d4eb264c0ae81c159f5ceca108b9574a9f922d1afde359fbc7a90ae2c372b79719c7d72c","ssdeep":"192:vQQsoO00qLbZTNWMd8C7VBWjLK4iQSaBnPqjBXtvQg2pHzx2htl7tJWqe:IKObqPZTNWMd8q03g8U1Get4p","tlshash":"1152c0bddadd9a8044ef51c77287c0420f6efa11dcdb0295e9ce7668b393109b14a0db","first_seen":"2026-02-13T23:06:26.833662Z","last_seen":"2026-02-13T23:06:26.833662Z","times_seen":1,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/js/webflow.77e6b788.7dc8b2d58b7afb43.js","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:51.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /js/webflow.77e6b788.7dc8b2d58b7afb43.js HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:02 GMT\r\netag: W/\"690bde36-12c5\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q44ecxNJdv1Gfti5AYgXc3nTk3c238I6sVIkVQXRar615S7HlkSnir5iQRTQxBo1BA7P%2ByQKoTALWC0WyOtRD71TollgvlwlkHQtHh1Iygs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f9133f661806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4805,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4805), with no line terminators","md5":"2f6ef1b2ce57424afe03836ce8e9b028","sha1":"39ef86703f7e6f935c67e962cfddc8d24aae89a7","sha256":"344599e7e2949e7d8902265491dd2bab3aedb99cc0e3d3eeda213ece035327e7","sha512":"48a652e2a62310f0038fa7e1b1ac58a31fe36cca23de5de12c46eac500be3e36d7e871ae1a48aeed6d7f1146643565ffc2e20fe6533b3e1cda2fba2b479af590","ssdeep":"96:k7qtPI6ygCp2kkmVS/YgXv5NZeLy8WeI77Ps/7wVj5mRY05t9R/2ZNj:k7cPtygDk5c/YgXPZey37Pa7wVj5mRYH","tlshash":"d4a1a6d62a485c6a66b141d27dafceb2711e2075213fdf609205cdb43cb1e604a62ee1","first_seen":"2026-02-13T23:06:26.835535Z","last_seen":"2026-02-13T23:06:26.835535Z","times_seen":1,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/js/webflow.achunk.dc2cb6388414c317.js","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:52.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /js/webflow.achunk.dc2cb6388414c317.js HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:52 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R8vy2g%2BqRWs%2BQtjLiEAT%2B4MeeiVguj1KvBMPt8IyF2RCXy3nN%2Bwd6j0UVhm1dLZolYssrJx3fj0JyVSeorIRCwjZazSYTt1V0%2F8Z9y10uco%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cd7f915cb661806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T04:24:09.297648Z","times_seen":17539466,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/vollkorn/v30/0yb7GDoxxrvAnPhYGxksWE8eqQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:52.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/vollkorn/v30/0yb7GDoxxrvAnPhYGxksWE8eqQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://check-plasma.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 47528\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 13 Feb 2026 00:48:03 GMT\r\nexpires: Sat, 13 Feb 2027 00:48:03 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 17:07:45 GMT\r\ncontent-type: font/woff2\r\nage: 80269\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":47528,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 47528, version 1.0","md5":"7a9b2136d0f26f870e22e8a0484762df","sha1":"6ecf6e9bcba9eb6d185499ac593c4382ecd9e122","sha256":"2b21f0fe01d929e246f513850bb1e2658eb77d9ab80c68a53a460725d66a5059","sha512":"21bc5c75935b7fe4e20e6e2a19ffcbb4b868e5dc75a756d82a2128d9072541d7ca9f719f2ac9d0571eba1185484ec7160d51700d8d28b5c6d3285149d66858ca","ssdeep":"768:q9H4lLBRHv8LPcExPGeNaNxoM2lencnhBY5wNtYp2L3P1sdOOcMq6ZXWLQVG8K/e:q9yLXPIhPNNaNxo5ecnTtA2+8qnWL8KG","tlshash":"c22302601fa7c5c1ef0abac261585fabcef81c742655c3915fba08d0b222f9a33c51d5","first_seen":"2025-09-12T10:12:12.411125Z","last_seen":"2026-07-24T19:28:41.993081Z","times_seen":656,"resource_available":false,"data":null}},"time_used":470,"timings":{"blocked":219,"dns":0,"connect":23,"send":0,"wait":21,"receive":9,"ssl":192},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"public-bsc.nownodes.io/","fqdn":"public-bsc.nownodes.io","domain":"nownodes.io","tld":"io"},"ip":{"addr":"172.66.145.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:54.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nownodes.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 23:24:15 GMT","end":"Sun, 12 Apr 2026 00:24:07 GMT"},"fingerprint":{"sha1":"EC:BA:9B:AB:CB:AC:F0:50:15:55:17:89:D4:5F:52:04:A6:2E:C8:1F","sha256":"43:C6:97:66:EC:F0:C7:EB:3D:64:36:C1:2D:53:6A:54:A0:BC:D0:0A:21:A3:CD:D9:75:A0:F7:5E:15:04:A5:18"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: public-bsc.nownodes.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://check-plasma.app/\r\nOrigin: https://check-plasma.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Fri, 13 Feb 2026 23:05:54 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Authorization,DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,api-key\r\naccess-control-max-age: 1728000\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9cd7f922e8e232fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T04:24:09.297648Z","times_seen":17539466,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":37,"dns":1,"connect":1,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"public-bsc.nownodes.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/js/script.js","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:51.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /js/script.js HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24403,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (24403), with no line terminators","md5":"21f2625e7cb41fe0f3fce10572e478f8","sha1":"9ac73a7860e4c36f8caabf3bc5746a9c2fe09718","sha256":"e7120b0423233da837830f4e7c3b448a2311e284fa88518b6231efe375b8890d","sha512":"77922cc2437858e1c8f94c8b1b195927f1446aa6f2abcd4fb0c5ccaae06feb76cfdeb9a55b45340a8e2493a92c1e1cdb0e2a2ef444280801e25c6fbdc0419ed3","ssdeep":"384:p4omzwNt73+ItdebtkhATATs/haRANI95eElZyxAHM1PFPGpc8tV7eJ/+o5dvzcf:p1p739+OTs/haRAS5NOCHuGpcggl+e7i","tlshash":"d6b2e968b6e4b0b503d370b8603b550bb3756929a445c0a4f268dcf66c7c98e8637fbd","first_seen":"2026-02-13T23:06:26.837529Z","last_seen":"2026-02-13T23:06:26.837529Z","times_seen":1,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/images/68762d4ac364502c1ae1928a_Frame%201597880475.svg","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:51.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /images/68762d4ac364502c1ae1928a_Frame%201597880475.svg HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:51 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X0vXdyipTGhuVyIKtGtO9A1ng0b4TN%2FUT%2BDeoK%2F8YAI%2Bkjbsi2q6p00L87NCc86rVeNUZXLXxGfzgyISSz7TjKGph13xCTEAMa0UfH8O1V0%3D\"}]}\r\netag: W/\"690bde37-701\"\r\ncontent-encoding: br\r\ncf-ray: 9cd7f9131efd1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1793,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7bd8622478c6dfa073bf74bd317a665c","sha1":"7172924a84e147b25cbba76c6e6d1fbcf01bd53c","sha256":"c13010b49089af09329d482a547ba2207fc8ed9225a0f203cf60dd8a8933635a","sha512":"0ce8c1cc8d3a513591d0b4c46e5bc7eef564ec9b66a49eba9c0f58f382f6ce32cfe7c25a5187b54e6e0efabcb7f97a09ffca5c85dcd545bdf23829570940c764","ssdeep":"","tlshash":"113101a4737ed378c435a5fac92a12e5fc0d54ea225c61b2c7d13c0ae502079dd7b2c8","first_seen":"2025-09-25T11:47:30.143048Z","last_seen":"2026-05-02T14:41:38.3795Z","times_seen":28,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/images/68762d4ac364502c1ae192c6_Neutrl%20USD.avif","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:51.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /images/68762d4ac364502c1ae192c6_Neutrl%20USD.avif HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1005\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:03 GMT\r\netag: \"690bde37-3ed\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ab0YKL8RlsODBgg3DG6Q7A3ZOZFm7dWR4Mx9%2F2tVwlPZaVXoLNsrCJTG4QO8EBFD%2Bp3iGET6d2ENt0aSB58XsxqMGv8LkbEon8isbZuHtRY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f9132f1f1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1005,"size_decoded":0,"mime_type":"application/octet-stream","magic":"ISO Media, AVIF Image","md5":"4a16034a4cb855d702212291d91cf358","sha1":"9a43181858cb52a3c8b639009e8827b42008747d","sha256":"8d570da545a7ace5bc11540563e253ccad6e333a81f789af1078f09300defed1","sha512":"3b4e0a6efb2a314ed852e85f05e2022ae625487587ba3057c08cbdf7c8fb7550e760aa59ae0c5b2bc5ca604188604d78410a7405f52c0abca277254578b8b888","ssdeep":"","tlshash":"e91144e063718d1aea4c873b0084a73223b0c67cc1d66ec68cc775a52a3cbb1ce24d75","first_seen":"2025-09-25T11:47:30.163965Z","last_seen":"2026-05-02T14:41:38.383097Z","times_seen":26,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/images/68762d4ac364502c1ae19281_investors-bg.png","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:52.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /images/68762d4ac364502c1ae19281_investors-bg.png HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/css/plasma-revamp.webflow.68762d4ac364502c1ae19240-63460950a.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 165\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:03 GMT\r\netag: \"690bde37-a5\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TsMGXtE%2BoM8oPpPotAHD9mq62Lgve01yrG08Dfh9HQw5JB%2BL5Tqw7dr1cxEL6fAWkZoW7Xc%2B6TbuT4q3m3G5PZREeluSx90t1hgglDsIdyw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f914e9d21806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":165,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 172 x 556, 1-bit colormap, non-interlaced","md5":"a7e6e37c5ae11d6f2f55ef4a63343a5e","sha1":"0e93ad580d334b46f143b0cacfa3b27ece1dc706","sha256":"bead1da674804eae829d60913b0bec94910470076e8dd632065b8b8f6cbe7a78","sha512":"32d5fbb242e6a46ed1b6852fd951be1b646f815a8a99f2222fde111cf6f75625975fd8045159995e354913bda36ae254fc60d1a52dd8f63a9621e8066d9eb067","ssdeep":"","tlshash":"bac08ceb5b7e8c35d1a8421bd27c0403c73642749bca028b5066ccf26e204848684d82","first_seen":"2025-09-25T11:47:30.100167Z","last_seen":"2026-05-02T14:41:38.389202Z","times_seen":27,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/js/webflow.achunk.496d56dd8c063ec0.js","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:52.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /js/webflow.achunk.496d56dd8c063ec0.js HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:52 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CVuml9Wo%2B%2B8tyKnpTIx%2Bom3u%2F03WeV1RzqtH6X4T%2F%2B3k%2BYO4n7cuX0V%2FnEg0aj2tOZiqzL5k8M8hSQgXOHAnU1rUdV8YpWDehxv1cB2Q8gY%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cd7f915ab2f1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T04:24:09.297648Z","times_seen":17539466,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/assets/modal1and2/wallet_connect.png","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:54.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /assets/modal1and2/wallet_connect.png HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nCookie: _ga_E2S1Q7F2X2=GS2.1.s1771023952$o1$g0$t1771023952$j60$l0$h0; _ga=GA1.1.762194008.1771023953\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 2032\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:03 GMT\r\netag: \"690bde37-7f0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 90\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FYF4%2FWZXhLXq%2BsmPM20eazrFVLv6hoR8enyc4pTws5uqq49Ht5lXPKYofRlxuBgz%2Fj0l5h%2FT4abwSTvC9TXi%2Fub5vKSq5p9d3jfe4LDkfb4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f922a8c11806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2032,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 136 x 84, 8-bit/color RGBA, non-interlaced","md5":"0260261695464c62c4dc4b69be6e4b91","sha1":"97dbc54cef588e9b2c15312f830784d53ba55f73","sha256":"7e06b76629235ff6ccedc59b3e5419ffac46616388c6810d5e4ef6097669bcd2","sha512":"ac0e4a981f4542357d1d250fc2136997da2422a0e247df2703799fba5491896b4354d5a432a9671c8b57622c7cfa863ccf3f5a7a4a003aecb0cb17a9f14bae09","ssdeep":"","tlshash":"f4410a5aad5941687d3ecfb24f5bb3daa040a09c030f942d1cd2f4253dcde2cba82567","first_seen":"2025-05-28T10:21:28.941282Z","last_seen":"2026-03-11T00:02:21.80752Z","times_seen":103,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/css/plasma-revamp.webflow.shared.55b1c9bf0.min.css","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:51.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /css/plasma-revamp.webflow.shared.55b1c9bf0.min.css HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:51 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:03 GMT\r\netag: W/\"690bde37-7920\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dd3u5e82I3es32%2BcuIjokP08UpBGTpB%2FlZJYHIJteZms%2FFWrn90f2Ui6crRJbsBQa9gKbJDfi6pdcAgBBYXkKVjG7Z1fHuuzacaSPN9fOCs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f9130ed41806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31008,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (30996), with no line terminators","md5":"e880f0404a3224422c6c210a751146a6","sha1":"0531fbb4263e0d40fb33d6495cae6e273ad96ebc","sha256":"70489835e0f53cafd9e34c076c34114b692550fe86ca8090da3bbf69065c0a89","sha512":"41336709c81fbad411c6ba7888704c6cdaeea4395317ab6b764decace7407de323d5e64fdd2135a62f1b4506befb60572abbed5e7d812b73d6dc62c21fef3f27","ssdeep":"384:FfpkOWjh7BXiZhIpm1h2iJnYkGCtMt7/Bn5xppNEEe:Ff7A1SZ+UHzYkGCW/BnNQ","tlshash":"d6d2a63196982188f0278923a9d0f76c3d2e5157f7628f9de842b62bc1cf4c52a77f58","first_seen":"2026-02-13T23:06:26.843194Z","last_seen":"2026-02-13T23:06:26.843194Z","times_seen":1,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/images/68b5880172d5570ff7cc6d84_55db5f71eac46161063a3a6f0f8fcca4_crvUSD.avif","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:51.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /images/68b5880172d5570ff7cc6d84_55db5f71eac46161063a3a6f0f8fcca4_crvUSD.avif HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1909\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:03 GMT\r\netag: \"690bde37-775\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FFwjS6iz8ErITcWVWZKHDEfPuTfe10gcBgCXWxOyigwDWDNdbUXAG29xJAqlsaJgI3nkJ9oWbirlSA0a2Nxt%2Bo5ZRlctnV6pjfUz09dq7o0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f9132f1b1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1909,"size_decoded":0,"mime_type":"application/octet-stream","magic":"ISO Media, AVIF Image","md5":"7baad99de34c2828bfd9200c2d70173b","sha1":"7a78be07a5b8e5835ac6ef19a2a8db9495a04a9b","sha256":"0ff578f3b1b6ddb6cc9d3b5d3e709723b469f94e91a73d043dcba0f30457986c","sha512":"371a79cab81d5cd5aa8c91926004a9df0975dda294a0b2b821424a9c3fe1819a646911e68b2d6f8440b372bc14662d18947fc474d2aaae729ab88f7ff5520f4a","ssdeep":"","tlshash":"eb412b30c367ab70c58b4331e02eb16c1d102c3812b5f38fada7b9345d611208d8da93","first_seen":"2025-09-25T11:47:30.158841Z","last_seen":"2026-05-02T14:41:38.388253Z","times_seen":24,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/fonts/68d63bcf43e01e6ee2bde0f2_PPMori-Semibold.woff2","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:52.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /fonts/68d63bcf43e01e6ee2bde0f2_PPMori-Semibold.woff2 HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/css/plasma-revamp.webflow.shared.55b1c9bf0.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:52 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 50932\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:03 GMT\r\netag: \"690bde37-c6f4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2XFtqMYdF38CeS%2BFpiLVp%2FMW9tbZXvuwT8GCxdq0j5bEBVdi9QaZ%2FcexpPGwg0ywUoDmh0RrJtlfwuIUFHFo2ZqD3VwWFUee1zi80uXZw6M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f914e9da1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50932,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 50932, version 1.0","md5":"35195a6bdcbf1ae716b1a67b0d66ada3","sha1":"af308f6e728a0306532a435f5dd39c2340e317c2","sha256":"46014ceac93c4f4b105b71c22a0da65b1b7c717d5f902ea424bf46fd2b241589","sha512":"d591f06ef494d69fcd43ce2cbe2bb286142159e68d785269d995b3bb47c9ec284f63eaefd736906b2e72c76ac2c8c9898e7111d7851e225a9dc24e99e9a1605e","ssdeep":"1536:TP3n4iMt8NyojdtHrrl593pcXSwDCnuJKnJdhutTAy:r1Mwfdrl593plBRJjmsy","tlshash":"c6330211985c82378422fa4bb835c1827661ee0dd2e713d0b2e1fd4eeed95f23b57066","first_seen":"2025-10-01T18:46:36.172819Z","last_seen":"2026-02-13T23:06:26.845963Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/fonts/68d63bcf051e1b0ca79c07d7_PPMori-Regular.woff2","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:52.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /fonts/68d63bcf051e1b0ca79c07d7_PPMori-Regular.woff2 HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/css/plasma-revamp.webflow.shared.55b1c9bf0.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:52 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 48920\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:03 GMT\r\netag: \"690bde37-bf18\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZQMr%2FxlUa89H6heo%2Bak31LUUeEp%2BQtduv%2F58pHmIr00U2dOVORNu9bCxGNrYRGRP8yifICMwOS0g%2Bewj3uAqqCs8xOhQaqfpaYqGJUsyV%2FA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f914e9dc1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48920,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 48920, version 1.0","md5":"d2784b738955f7176006fb54f9661603","sha1":"d436c9da9c39e31e75cb04ac337bd1c9558120b2","sha256":"e870a222e3343ef2081aeecdb402ddea13bad73a7d60c116602872cf04b2097e","sha512":"68dbf0571137066d9dc353b8cfa6c6b0e73ea0f70e964572ed27ed12f71a61c5c08e897ff4174dc1f5e4b084f219d8d208f407d8aadba4dd3542993500317841","ssdeep":"768:jwMlUwTXqlloGTxF8G9mG8cNfPtyPNOjmvt7LHfj9HuNz3AU+uXf6xV8e/Kad/kD:jvUwjqXpRyh/HfpU3AMCxV8qKad/kErg","tlshash":"8723026e152376dc4f221796cf29d6b68fd80dea27808f075cae123a06272d26d5b123","first_seen":"2025-10-01T18:46:36.215013Z","last_seen":"2026-05-02T14:41:38.384817Z","times_seen":22,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/js/webflow.achunk.0a46a3eef4d87fb7.js","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:52.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /js/webflow.achunk.0a46a3eef4d87fb7.js HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:52 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jV6qbKU%2FCrJalQNK2Dr6hwsfpDJ2HlDSiP2u%2BTaU7Ta5wTI1jAzqnTIllwwv4SQkf3CLiodp9OOzb7seonp20%2FKJ3%2Bkjx6liMI6ZGTUK0l4%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cd7f915cb601806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T04:24:09.297648Z","times_seen":17539466,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Fira+Code:wght@300..700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:53.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Fira+Code:wght@300..700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 13 Feb 2026 23:05:53 GMT\r\ndate: Fri, 13 Feb 2026 23:05:53 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2425,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"364d80757a1c7c81dccbf8d6caeb7ae7","sha1":"abf8e3b38eb2295c6378231fb2ecabae5ecd4b2f","sha256":"17babf90f4bae4a92ef7f4f24552b88b41c391b89328f46faa49286f5c2c2c6a","sha512":"6a0c6519a03917cedd40ecfe91e6cb8d30a42a61c005244bf8c09934a12132ba0fe963dd6e5c77a9baa19944cadb274ecf81e1780697acc5f3e22ae85b02c131","ssdeep":"","tlshash":"1c41aaa601a79400afa30cc177cebe779e1e2198b041c6b95efd08989ce7d32435472e","first_seen":"2025-09-17T03:18:47.282954Z","last_seen":"2026-07-26T04:21:50.766175Z","times_seen":902,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.ipify.org/?format=json","fqdn":"api.ipify.org","domain":"ipify.org","tld":"org"},"ip":{"addr":"104.26.13.205","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:53.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ipify.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 01 Jan 2026 12:15:50 GMT","end":"Wed, 01 Apr 2026 13:15:39 GMT"},"fingerprint":{"sha1":"E8:04:3F:4D:91:E2:52:D3:E0:EA:F7:1A:C8:8C:94:50:7C:2E:FF:FF","sha256":"A1:8E:F1:BF:52:25:E4:EE:2D:91:8B:1E:0B:E7:A1:C3:B9:7D:DF:7D:D1:57:11:6A:14:CF:F2:A6:DF:D1:B0:18"}}},"request":{"raw":"GET /?format=json HTTP/1.1\r\nHost: api.ipify.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://check-plasma.app/\r\nOrigin: https://check-plasma.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:54 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nvary: Origin\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9cd7f92288ca0d2b-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7d69c71af0f191e9a72db6153f8018d1","sha1":"f67c5f2887bc05654b47f76e9621e53a4091aed1","sha256":"5bac6e06cf0e1ad38c55f9f9d12122272bf4b8157877629fe68cd33fe2133c65","sha512":"fdf43a8f3d843fe9008949d6709c8e2a5cd640f6101522319745f0a829f21dc8f4bd4d70ff3e2f6e1fd53ca0d2dd872bf3588c593a403071102ab28763cbdba5","ssdeep":"","tlshash":"b8700022000000208c80800eca0a032223a0000ac20a00088e800b2288a0b380282032","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-07T07:51:18.251001Z","times_seen":93313,"resource_available":false,"data":null}},"time_used":1216,"timings":{"blocked":1062,"dns":5,"connect":8,"send":0,"wait":119,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/images/68762d4ac364502c1ae192c3_Argentine%20Pesos.avif","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:51.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /images/68762d4ac364502c1ae192c3_Argentine%20Pesos.avif HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 852\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:03 GMT\r\netag: \"690bde37-354\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yBJcu0mmAP7zC%2Fpp6qvDrmRzIdqWbjGz3pzDsSCpslYQe9HxBRrdyC7a%2BWvPntHK2CmGS3AqMcSKd1p%2Bj1Ri%2B3PBrt2s6g4WxLT89xbbwXc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f9132f201806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":852,"size_decoded":0,"mime_type":"application/octet-stream","magic":"ISO Media, AVIF Image","md5":"8c5bb3f558f20e47614b81a20f5bc5e9","sha1":"35b3f438c8bc408ad9b3fbb323d887dc4a60ed22","sha256":"1e93087cf875fcd2afd1edaf9eae3aa4db9af90831623b831c776bd9b3cf43d7","sha512":"5116fe1115501d825463cb425a13780f1a65056a74639ca5a72a231c39e0a7532a90f8503c9979c4e4074243717049ec09126a2eb0df68200ef96a78f3a02e2d","ssdeep":"","tlshash":"2c01205427f10e17c81c02b4ee2cf71d323423745633a6679c42baaaca34b62de6ed48","first_seen":"2025-09-25T11:47:30.109391Z","last_seen":"2026-05-02T14:41:38.377587Z","times_seen":27,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.prod.website-files.com/686294612d064c19739f718e/6876260a681afcbedc81838d_first-frame%201.jpg","fqdn":"cdn.prod.website-files.com","domain":"website-files.com","tld":"com"},"ip":{"addr":"104.18.161.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:51.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prod.website-files.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 00:51:58 GMT","end":"Thu, 07 May 2026 01:51:37 GMT"},"fingerprint":{"sha1":"57:A1:73:C0:08:07:F2:DD:56:2A:DD:FF:51:D4:A5:62:53:C7:9A:8E","sha256":"E9:8A:00:BD:F9:8C:57:70:7F:31:ED:E2:BE:3D:E8:0B:D1:09:B4:07:B7:19:9F:0A:04:46:22:1B:EA:3D:8D:24"}}},"request":{"raw":"GET /686294612d064c19739f718e/6876260a681afcbedc81838d_first-frame%201.jpg HTTP/1.1\r\nHost: cdn.prod.website-files.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:51 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 301560\r\ncf-ray: 9cd7f9133868120a-OSL\r\ncache-control: max-age=31536000, must-revalidate\r\ncf-bgj: h2pri\r\netag: \"f2ecce4bacf7dbfd2537ce4149f5de45\"\r\nlast-modified: Tue, 15 Jul 2025 09:57:31 GMT\r\nx-amz-id-2: y+oilXBNotT02EfJrIISzEWEgWilMkcoEs8sKmOIB08PA+y93/JbpGTVxBU3biH+AjS1QT7Feb0=\r\nx-amz-request-id: F911T39C2WRCRTFG\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: YMiTmumYrhS0FE9g8jF02n3NRyS_0ndb\r\ncf-cache-status: HIT\r\nage: 4612548\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":301560,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3","md5":"f2ecce4bacf7dbfd2537ce4149f5de45","sha1":"8064bf172b5721d47de34220c583ba73e0e1e911","sha256":"61652f174eb79996ecfa6740b8b12f21ac1bbba9f10b883f48efd60a9e554b47","sha512":"af944a4d0a9b734bc74cebd18198eb3ca697d361f0c49aa4c5eee3fd934583e48a329df107c58343d3e2df281a8468a1e14a952be44c289923e02863e585ed96","ssdeep":"6144:QC0qm9JIGa3TyxYhVIefCeugofQJtdnj+mTVSBroU5oM/:QC0qx93TMYhVRfCOx5IoUv/","tlshash":"405423bdbedb171db8e22af3a940ffa90f48d0695fb91491210745c43a010d8a675fda","first_seen":"2025-09-25T11:47:30.122161Z","last_seen":"2026-05-02T14:41:38.365938Z","times_seen":28,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":19,"receive":23,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/images/68762d4ac364502c1ae192a7_Logo-2.png","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:51.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /images/68762d4ac364502c1ae192a7_Logo-2.png HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 1558\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:03 GMT\r\netag: \"690bde37-616\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2Rq8%2BbcTEKlY2BjPSxLwLRAuHGvJW2wfwAFE2dQWxxFrxp1szm09HHlY0FuFa2UZK4nYz9BrJLC0yEdGi4rss3vcghDghHqDGrkJR1Jx6go%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f9132f2f1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1558,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 440 x 208, 8-bit colormap, non-interlaced","md5":"26552567ff6fc516a1898a0e01c74d31","sha1":"0adb3ec9058399440051c88e6c5e0bbc6fb6d484","sha256":"fcda281b372a6e2924e90ddbef2238dbc6f70872525cea5cef13047774adabfe","sha512":"ad6aa8ff9197702664c69cbd2a7c8aac0c9756107cf044231c8fde1c7189cd4b09fa81ad4cf57b4cb645ab62322ac722ed9496207043f09564099e2534c1516b","ssdeep":"","tlshash":"7c31e927f4d4090dc583217a57406acf98ba0c419d80cea7d881f88f7675fa9c5f7b45","first_seen":"2025-09-25T11:47:30.125611Z","last_seen":"2026-02-13T23:06:26.855076Z","times_seen":8,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/js/webflow.achunk.bec7a721722e4644.js","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:52.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /js/webflow.achunk.bec7a721722e4644.js HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:52 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OJVXY8Nu5xwsUbGUtHiYTYhZiKZf97tyIAu1SD8TUDCkP6fufVIZiPcHEC4ZfXDl2qGOogqIegl4okDwkd68K3AKKDkLmKNToQlrckdv6dc%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cd7f915bb3a1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T04:24:09.297648Z","times_seen":17539466,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/js/webfont.js","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:51.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /js/webfont.js HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:02 GMT\r\netag: W/\"690bde36-3384\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fo%2F7%2FtP6hH3frg8f1q86EzpZT%2BVtNRK73BLqzo3W%2FcQxMGqzP9U8VblKm7KrC2AsqsZW2NZ5hntsVjdgeqii2cJQi3FHBmPyK6EiUiv8ke8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f9130ee01806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13188,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2134)","md5":"7c96a5f11d9741541d5e3c42ff6380d7","sha1":"d3fa2564c021cf730e58ffddb138cf6b57ed126e","sha256":"81016ac6be850b72df5d4faa0c3cec8e2c1b0ba0045712144a6766adfad40bee","sha512":"23c162a2e268951729b580e5035ad6ca9969cfcc5ce58a220817b912e76b38be6c29c3ca7680cb4e8198863d95a72ea65bd06ff7189b5c8475e4c1ce501aeab1","ssdeep":"384:i11kqRm4UjryX2DfatZrT80NCGz5r2zItrX:iEqRm4cy338m7d","tlshash":"7942c65d7652b26a825280f2177f060b9576fa2ab844c0bc7a89d8d46c74db8037ff7c","first_seen":"2023-03-07T01:03:17Z","last_seen":"2026-07-26T04:29:06.4925Z","times_seen":65917,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-E2S1Q7F2X2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:51.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:39:20 GMT","end":"Mon, 20 Apr 2026 08:39:19 GMT"},"fingerprint":{"sha1":"60:64:B6:72:E4:67:A4:EC:78:B2:F2:B8:3E:17:7A:A6:A8:CE:74:4C","sha256":"3E:71:C0:44:31:9B:1A:8A:23:FF:D9:4F:B9:3F:89:6D:7C:66:33:BE:14:26:CB:01:F2:79:BB:FE:F3:3A:71:98"}}},"request":{"raw":"GET /gtag/js?id=G-E2S1Q7F2X2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 13 Feb 2026 23:05:52 GMT\r\nexpires: Fri, 13 Feb 2026 23:05:52 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 149166\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":450404,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"b1dc2f16bfc3c2039cb51145a74b5119","sha1":"24751a360b7e6ddb8b708ae7781974106c3fb8de","sha256":"f65f62f0657ba959239f6d5ac02912105ac5405b80539c2337adeb03ca2c71c1","sha512":"68416a298b371c1ef94a5306c2bb9e0749559024879f855e8ecefbbc5eefbf984ca8e88da5d549f352890dd4f592682b4f3caffdb485fd274be6bf363ed4ff6b","ssdeep":"6144:iAjNMmwzYPrw8wENIP8gMDSgP14j9VkV4Bq5Itz/uG:LjwzYPSmIP8G44BSa","tlshash":"0aa419ce73d674225296f478503f018ba57b24a2f48cc89af189cce42d74a9a4277f7d","first_seen":"2026-02-13T23:06:26.85703Z","last_seen":"2026-02-13T23:06:26.85703Z","times_seen":1,"resource_available":true,"data":null}},"time_used":578,"timings":{"blocked":248,"dns":0,"connect":8,"send":0,"wait":22,"receive":29,"ssl":268},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/images/68762d4ac364502c1ae1928b_sNUSD%20-%20Option%205.svg","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:51.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /images/68762d4ac364502c1ae1928b_sNUSD%20-%20Option%205.svg HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:51 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KpV4ATlwy%2F1y%2FVelpbiEil3y3sp41wyUlhJZbLlnGFEzZWo8HQZjuqwiZvOHkhHL8%2FB2%2FOdNH%2Fi1cQZodDkSCOz1Mpdcq3EqPL7VlS7S4Xs%3D\"}]}\r\netag: W/\"690bde37-47d\"\r\ncontent-encoding: br\r\ncf-ray: 9cd7f9131ef91806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1149,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"84965fdd4c4c75250683fe3d17c13f1a","sha1":"17b797de9f6532a8dde02922b2e98a91b23ea636","sha256":"47aec41d50e33ae22b7fa7db74eea69c4ec2fb3a529226a07c3742ffdd526e95","sha512":"50d7f2352f0ccc893843d47fbcfebf421c0212529718913441e33cb87ff677ba249a318cbd45ae4b6cb3391a9da8d90565f85edb78919b9ff8d81e4880e08bc7","ssdeep":"","tlshash":"be21ceab4761d7c0f29173bdde261ae1de1e09546345a025c3843e04a8427f9b9d24ef","first_seen":"2025-09-25T11:47:30.13633Z","last_seen":"2026-05-02T14:41:38.405237Z","times_seen":28,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/images/68762d4ac364502c1ae192dd_USD.ai.avif","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:51.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /images/68762d4ac364502c1ae192dd_USD.ai.avif HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 793\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:03 GMT\r\netag: \"690bde37-319\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JXP2fu93TzWZw9Cjk5iTZdnX7ZrD%2FTh1b9CjPILes49MT2eoRA%2FSB%2FevsSndBBHtS%2B%2F8Lh0O%2FVLi0lrJdL9SwW20X78lN4njOMvPjd71Ph8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f9131f0a1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":793,"size_decoded":0,"mime_type":"application/octet-stream","magic":"ISO Media, AVIF Image","md5":"f6036182735e057096786be95ffc39a4","sha1":"f52caf6050dbb4e56adbf0eafeca62f06a50f431","sha256":"0d8fb96d44b5093b9e79c9b7e9ff2bbaeb2708502aa32636db4a28ff6e6d43e0","sha512":"49437991ca0dc5447590fd64b3778c3af9ab4769ac6a42d01e42b07c654df5f5b3529926e3af8aa557c0176a67525ffb530a6e2e050727eb107763fc7dd2a523","ssdeep":"","tlshash":"29014e1137e21c0ae80c03350945af0a32b04431d6ab37cb9c42bab88e683b7ce26d38","first_seen":"2025-09-25T11:47:30.106241Z","last_seen":"2026-05-02T14:41:38.358243Z","times_seen":27,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/images/68762d4ac364502c1ae192c7_USDS.avif","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:51.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /images/68762d4ac364502c1ae192c7_USDS.avif HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1007\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:03 GMT\r\netag: \"690bde37-3ef\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=98ehtVIBjv8M8uO7SKx1dB0uZM3YuqjJbtjxCXgEtEfZsce3tPj4qmyGvgGPXBDyGX7s5QKw%2BzRNEwSBpeC9OM3nQpuMtGg5%2B6qJI3YbrIw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f9131f0c1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1007,"size_decoded":0,"mime_type":"application/octet-stream","magic":"ISO Media, AVIF Image","md5":"3bcf7a3798ed95aab792240576c80541","sha1":"c9dffefe42b65ebc6bd497b1c5578e5a2b919cad","sha256":"4249fdc07410cda0efca5f65e52c204a4cf8b7d2b59dbaeddbaa4d652a7d522d","sha512":"fbc1a60a2aea92d9557c34460fd3406ef82deb4fec60ec21ceadddb22b263007c38622603d4ecb27fb0fb0a5a5f55c170dd81dd5d6586701f3ce3ab01bdc7f94","ssdeep":"","tlshash":"a211849433ea0c32e52c02368288e3273771e07c13775b8a78977a018d643b7c612db8","first_seen":"2025-09-25T11:47:30.107643Z","last_seen":"2026-05-02T14:41:38.408746Z","times_seen":27,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/fonts/68d63bcf349df9d9bacd913e_PPMori-Medium.woff2","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:52.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /fonts/68d63bcf349df9d9bacd913e_PPMori-Medium.woff2 HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/css/plasma-revamp.webflow.shared.55b1c9bf0.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:52 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 50544\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:03 GMT\r\netag: \"690bde37-c570\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YOgRTIok62Dp5%2F%2FDHW32u0SA0hSIQI2mWY11R56BRZjW9LE4pxVIcO1D6Y3ZpfD%2FpzB7JG3UL04MT%2FrAvZyha60bl0VWG%2F7hQRc7%2FMgpcvU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f914e9de1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50544,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 50544, version 1.0","md5":"b5eb897256316d30720b8a7e8da6988b","sha1":"dc842eefb84f073a67ea135385960eb25d670300","sha256":"37774852fd21194bb239c37b4bcda0ec458609abde2cb48a48aeb637419cf857","sha512":"12dba3a4474eeeba121c40fbf359ffcef58d6a0fc4004f2a8af607b7d5b8aca49355b817ad17f555cd58424ea49948a7f87651f59f5a9326012b156adfaee709","ssdeep":"1536:4kGhrm7aBLQqBbftv7mhQdfA+McMJGyHq3UJo+:mlK4Qq9fdah4dMNJG0hp","tlshash":"4f33122ebd70c88698cdfeb93b2165a3d6fe990573b3da423b013656baf121314c7118","first_seen":"2025-12-06T01:36:39.969664Z","last_seen":"2026-05-02T14:41:38.417261Z","times_seen":21,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/settings.json","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:53.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /settings.json HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://check-plasma.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_E2S1Q7F2X2=GS2.1.s1771023952$o1$g0$t1771023952$j60$l0$h0; _ga=GA1.1.762194008.1771023953\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:53 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:02 GMT\r\netag: W/\"690bde36-351\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MTSyIoD%2Fg6J11N5vlWHrt7KoX6b%2BRb6BwoeieN2AFJqraLoZA0shbjubb8kjoaHp%2BzHiyImTskqObnBV3qpeM2C%2Bk36iLaIH4SvVFrOlDZs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f91aecad1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":849,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"02bd041ed8b4dd5b668df890127e32dc","sha1":"04663e231319d75fc44d8dff9768dd0d1eb636aa","sha256":"a5d7dd5d2870582524f48aea85e8acfedc78023fa34b08a46dadfd55eedebf8d","sha512":"14816583aca5f79ee7937691bf9c7d31105a337c26f58873d2b1218d13b3a380f7cdc4ba42c13ca622fe15726442f580e80318a01311f47420482328ebe03c7f","ssdeep":"","tlshash":"5901c2499d51486bd5ca1528b55eb20509157d6743d43d506f1b50186b3c76f0f31bcd","first_seen":"2026-02-13T23:06:26.830051Z","last_seen":"2026-02-13T23:06:26.830051Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/images/68762d4ac364502c1ae192df_USDO.avif","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:51.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /images/68762d4ac364502c1ae192df_USDO.avif HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1023\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:03 GMT\r\netag: \"690bde37-3ff\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y4L0Hy%2Bzs5p7yDj8BhnqA1H0S0NdJeVIaJtVO4DcIF7336tF1aQIhZI%2BuAx9UelOHe%2Bxa%2BB4w5bQwuskNizl400j%2FGKvfxTuDjsaGu4XBiY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f9132f1d1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1023,"size_decoded":0,"mime_type":"application/octet-stream","magic":"ISO Media, AVIF Image","md5":"a41a1b3bf5ce80ee970aa15e82c6c50b","sha1":"dd57c21b90610b1b83ea53d51ca95f361cb147cc","sha256":"b37407cf9a7073a277745a4db48f5a8f96eb8d34e98c824fdac6407a6843052d","sha512":"8942906a0f4d5305c10467bc2c025207719d0af36629e56b9798c2d2a6aaaa79812079eb8707e56cb593c42693cb3e9229f4f34b688dd7c727f711b462316895","ssdeep":"","tlshash":"5911889632b00c07e01c1331c58db717b322eaa0619777966c837b14df34bd2c912c64","first_seen":"2025-09-25T11:47:30.11863Z","last_seen":"2026-05-02T14:41:38.411311Z","times_seen":27,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/images/68763d431da933ad1e647a4e_Logo-1.avif","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:51.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /images/68763d431da933ad1e647a4e_Logo-1.avif HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1330\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:03 GMT\r\netag: \"690bde37-532\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mfiiIWie3wdVUG%2BPiJu3cxHbputezq1vaDkOHtFO%2B6GePIEte5xderQYgN10v%2FiMEdqVb1L3l4iDc6d9UR2x5kmeyjKH%2BdN90KFzZExvKjk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f9132f241806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1330,"size_decoded":0,"mime_type":"application/octet-stream","magic":"ISO Media, AVIF Image","md5":"bce91cf10775769df761b93391bccf63","sha1":"94ed63069b41bcf2d36e8fa0690cf69b62d26ece","sha256":"dbd011fe317137246a6b65d5fe0065e9a49e860a7496741ea396c692eff4385e","sha512":"f35269b87722743aeccc36c625ce94940b19e09a8b421c49dd0cd2b65238191317caf1e403bbc011d65429db830f1c769644e1c7b9e50a335506a0833ce02d46","ssdeep":"","tlshash":"b821e7a136b92886eeadc33090491b7a7ab462585be337c07bc1b8000c2d2b4cd01db8","first_seen":"2025-09-25T11:47:30.08222Z","last_seen":"2026-02-13T23:06:26.877951Z","times_seen":7,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/js/webflow.achunk.db80639074bc0296.js","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:52.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /js/webflow.achunk.db80639074bc0296.js HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:52 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=juK71dc3frizsJHp9fl23GYanqtHXnHnGTKEgHvqgloQMY7Hi%2BFE77N95Mp4osww0ajLuL24jL8luYconSul1n%2BkkBu4XeVFSd%2F3wFB9sMM%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cd7f915ab2b1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T04:24:09.297648Z","times_seen":17539466,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/assets/secure.php?req=ping","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:53.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /assets/secure.php?req=ping HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://check-plasma.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_E2S1Q7F2X2=GS2.1.s1771023952$o1$g0$t1771023952$j60$l0$h0; _ga=GA1.1.762194008.1771023953\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:54 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 13263\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:03 GMT\r\netag: \"690bde37-33cf\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\naccept-ranges: bytes\r\nage: 90\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AntfffjfNpBiZsZXVv0i6JIMf%2FG8OU4o2IcVlAW3ndr6UOyzNWdiZj9r%2BBdA1U4RD53ajVpojTODsvqJN9j9mcQmIL%2FOxsHAhKX5K8KpG3k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f92258561806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13263,"size_decoded":0,"mime_type":"application/octet-stream","magic":"PHP script, ASCII text, with very long lines (13257)","md5":"1c925167dc939ba7920a7b978a42b65d","sha1":"9b4d27462d3d897552a996e85fde3fbf24283df2","sha256":"0da07b458e6aeb7e396730ce0272d86319a458189810252b1a99ca689f765dac","sha512":"f09322f748a40ff5aa579399a7a7fef8eeca5c81c193eab15cea18d0c3ae30ad34719cd9aad64674575ef05cb185087dd43ab9a9a38340ce1295255a34188101","ssdeep":"384:CLpx+D3MQZuRAxe+0A0C2A6VR0NBfAqRq:CLpxQMnRQt0C2A6VR0NdAqRq","tlshash":"735230702582559b789e0dc7afd32a8e71b042e74e0f7a8f8e3839d9249c259c14dfe4","first_seen":"2025-11-08T08:53:34.56198Z","last_seen":"2026-07-09T12:15:00.023632Z","times_seen":119,"resource_available":false,"data":null}},"time_used":1049,"timings":{"blocked":1032,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-13","alert":"PHP webshell obfuscated by encoding of mixed hex and dec","trigger":"check-plasma.app/assets/secure.php?req=ping","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/04/18","description":"PHP webshell obfuscated by encoding of mixed hex and dec","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_obfuscated_encoding_mixed_dec_and_hex"}},{"sensor_name":"infosec_yara","sensor_type":"yara","title":"Nextron YARA rules","description":"Public Nextron YARA rules","scan_date":"2026-02-13","alert":"Known PHP Webshells which contain unique strings, lousy rule for low hanging fruits. Most are catched by other rules in here but maybe these catch different versions.","trigger":"check-plasma.app/assets/secure.php?req=ping","verdict":"malware","severity":"medium","comment":"","link":"https://github.com/Neo23x0/signature-base","meta":{"author":"Arnim Rupp","date":"2021/01/09","description":"Known PHP Webshells which contain unique strings, lousy rule for low hanging fruits. Most are catched by other rules in here but maybe these catch different versions.","hash":"7b6471774d14510cf6fa312a496eed72b614f6fc","license":"Detection Rule License 1.1 https://github.com/Neo23x0/signature-base/blob/master/LICENSE","rule":"webshell_php_by_string_known_webshell"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:54.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://check-plasma.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 09 Feb 2026 18:20:43 GMT\r\nexpires: Tue, 09 Feb 2027 18:20:43 GMT\r\ncache-control: public, max-age=31536000\r\nage: 362711\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72964,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72964, version 1.0","md5":"91247c94dcda6ff52b445d71d6bbfb81","sha1":"ad2f62363ed047b430b91f32afa31df51fcd7c5e","sha256":"6a3c3e024b31eeacbf1f19c3c7be78612d91c623186f64035a50038241dad4f9","sha512":"a12dcac84e9f9ae02df3aabe29d76994281cd1005edca471194605cfcd6a0456eec872fd28c63c72ae124804d0b47d8377048caae49c40b0a18b5d6be4d6213f","ssdeep":"768:zbw+rLBkMxbCkupj4Y69/Yr71+j9pWiKahMM6+AWEqXB0oGuNGku+QCcIKE205C7:zbw+iwuS/iZWeaO1zP1/9Esvf8fXnm1","tlshash":"8f6302244e3c50c2a54d33aa286940f6f6e79c75b2b79ba4a69c589cd410f329cdfdc4","first_seen":"2025-05-29T18:51:13.223047Z","last_seen":"2026-07-26T04:12:41.244008Z","times_seen":30726,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"public-bsc.nownodes.io/","fqdn":"public-bsc.nownodes.io","domain":"nownodes.io","tld":"io"},"ip":{"addr":"172.66.145.77","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:54.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nownodes.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 11 Jan 2026 23:24:15 GMT","end":"Sun, 12 Apr 2026 00:24:07 GMT"},"fingerprint":{"sha1":"EC:BA:9B:AB:CB:AC:F0:50:15:55:17:89:D4:5F:52:04:A6:2E:C8:1F","sha256":"43:C6:97:66:EC:F0:C7:EB:3D:64:36:C1:2D:53:6A:54:A0:BC:D0:0A:21:A3:CD:D9:75:A0:F7:5E:15:04:A5:18"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: public-bsc.nownodes.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://check-plasma.app/\r\nContent-Type: application/json\r\nContent-Length: 136\r\nOrigin: https://check-plasma.app\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":136,"data":"{\"jsonrpc\":\"2.0\",\"method\":\"eth_call\",\"params\":[{\"to\":\"0x6981E9EA7023a8407E4B08ad97f186A5CBDaFCf5\",\"data\":\"0x3bc5de30\"},\"latest\"],\"id\":1}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:54 GMT\r\ncontent-type: application/json\r\ncontent-length: 199\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: Origin, accept-encoding\r\nstrict-transport-security: max-age=15768000\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9cd7f9236b4a32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":871,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"78698c296273102ae6fe1630b8906d1b","sha1":"d13d210467a803af90cdb290724836e4af265187","sha256":"87a8e967afd6fc9433921ca31606f2651e1a331f1402e53ef1acf0e1c4ace23b","sha512":"65137da9fa20348c174fef8c581f26a1bf6b19ac61b8379c3c73de9fdb38b48cef9d42446faaf3f47e7a87862692fea389fb3d719357c2ff34b650e978e428c6","ssdeep":"","tlshash":"a5118cf005abaea0d0f5c8c9a2887a4b22133e43c8d02e428e0c8dc820cc8427235713","first_seen":"2026-02-12T20:37:44.918011Z","last_seen":"2026-03-07T01:27:40.951425Z","times_seen":9,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"public-bsc.nownodes.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/js/main.js","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:51.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:02 GMT\r\netag: W/\"690bde36-1485d8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o6o%2FewNa9i7emmQIdwVDHe2WW7228wiXfpUUY6wbWxN%2BiW8tXQvgm66mF5LZcoEc7LT%2BglYaBt4JU58X6EKMs27Yf6aN%2BKR9tEENs2x0PIs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f9130ee31806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1344984,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"cf47b78f0789df5008d5172227192f1d","sha1":"710e9a28dce67db0f535b88de39745453619fc32","sha256":"47a5a35d3afe2f1be16f667bc3c0ba58fba5ac42796297bacfdc23a60a9408c8","sha512":"9f66ba87a7ba20283e1a7c18f141e163ed87a251c3211893f857f68c0638594bdef5d373ab0b902e619ac9e41d2296796d8f2aab2e40bd83b48a371f222624f1","ssdeep":"24576:I9C7GNN+KGrlrPr1xrjgaAFxzWVOcwj28FhLF:II7IN+KGrlrPrr0aAFxzWVOcwj28FhLF","tlshash":"d2253d9972617035498360a9413f050ba23b785a7446c09cb638f8eb6cbcddd71bbfb9","first_seen":"2025-09-25T11:47:30.103776Z","last_seen":"2026-05-02T14:41:38.404445Z","times_seen":23,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/images/68762d4ac364502c1ae1928d_Frame%201597880471.svg","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:51.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /images/68762d4ac364502c1ae1928d_Frame%201597880471.svg HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:51 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VKTsnX%2B5TgdnJjEPyOpcRE1LWqmwnvRSN9VkattsdsSwlnHD4%2B1WK5awE2zVUT57AOyn2OhGUrKAO7lWBHxZ%2Fry5YVcX1NFdM0zKLcbPafw%3D\"}]}\r\netag: W/\"690bde37-5f0\"\r\ncontent-encoding: br\r\ncf-ray: 9cd7f9131efc1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1520,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"51efe4baa4d6e57864d811945000e523","sha1":"28d83b093f9f9e0c5b6f864e97a9eed2c44a9a00","sha256":"ee3befd701c2984849c23030080b84b3fbb4b676da9a4084290d046638511fa2","sha512":"84ea753fe14152b3c73ab2898ac67ff0c1492e3a4d948a7404f41bcc6d928b365e11679ea516be1bc31e1898794b77fc92157ad0dfc268338c5ba48e4e7f1991","ssdeep":"","tlshash":"fc3112e505669308f443b37ecb3c20d5db9da8c447c88cba53263a773e46269f9640c4","first_seen":"2025-09-25T11:47:30.114188Z","last_seen":"2026-05-02T14:41:38.357241Z","times_seen":28,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/images/68762d4ac364502c1ae192c5_AUSD.avif","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:51.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /images/68762d4ac364502c1ae192c5_AUSD.avif HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 805\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:03 GMT\r\netag: \"690bde37-325\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BUUVt7ZiO1Si6fV9bxvhqMzZ0BQDIMI2sLJ1mUXZ%2BlpohkYtk643Ox%2BsxxflsgMbmanHBWWTi4J0A41QQf1oTX831DP1gd1B5cLaIx5lOfQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f9131f081806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":805,"size_decoded":0,"mime_type":"application/octet-stream","magic":"ISO Media, AVIF Image","md5":"7683ef029e4fa82d1ce17aff55559d43","sha1":"df5afddb3b78e01d47a7e045ff0eedc7608d7fd8","sha256":"fc9fe50fa74e254a737c0e96cc37b866c4fb315622c97fe4827814db9278e161","sha512":"687249d85b37d0fbab0a8bae3457aa1e2b1c9af994250611382476cbb662925dcae4cb32cfc8e4540614f835706d5ccf189cf64abede97f969511ed6bb1d76d0","ssdeep":"","tlshash":"c901600023601d5ad84c123a225cc32933324aa9c237eb9f2ec238498f243bacd22e34","first_seen":"2025-09-25T11:47:30.137646Z","last_seen":"2026-05-02T14:41:38.368467Z","times_seen":27,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/images/687a434a103de5a173e515d1_rUSD.svg","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:51.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /images/687a434a103de5a173e515d1_rUSD.svg HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:51 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hFCj%2Bw6LcOHNS4qltuJUuBGTDh9I5qapCaKOt%2BGC7oawf67i8XFYjPuJ4agFVxLjMyzOXnJyQigD61p%2FZ51J7lsAdBXj7C%2Bi6eO7pF7gUHQ%3D\"}]}\r\netag: W/\"690bde37-175\"\r\ncontent-encoding: br\r\ncf-ray: 9cd7f9132f231806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":373,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"78a674abf34aa84bae231b2f677c84e0","sha1":"6630bc1ff057f0f97c378c68991b7fae7826cbaf","sha256":"d139ea962033cd7b26bfae315ac91ad6ed7f64369c4317109cdee2aebbf25012","sha512":"de41c52de10586f44628bd9bc74c1b867d29e106322b4c1a85e108730c42a36eb3fbe91ec75b45f0634698e4af8e35b58c6509fce093763e13d749a6b01bea0a","ssdeep":"","tlshash":"7ae0dfe82118e500a246dd39c36922eeb0f2f0ecd34c0464d760381228546e62a8c6ed","first_seen":"2025-09-25T11:47:30.120881Z","last_seen":"2026-05-02T14:41:38.30939Z","times_seen":28,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/images/68762d4ac364502c1ae192a8_Logo-7.png","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:51.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /images/68762d4ac364502c1ae192a8_Logo-7.png HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 1279\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:03 GMT\r\netag: \"690bde37-4ff\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3AHv72OG4gMp8hCgmEhQZ5kqm43fQNk4QFUzsFAizw%2BSJcuow3rKz0T3TgNCBuOoDTtnLYSvM2fSrOTZ%2FVPGk%2B0FkafMNGZqZJDWD0FK3A8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f9132f281806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1279,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 480 x 208, 8-bit colormap, non-interlaced","md5":"30ca1120352beb0cdd78526732b8d3a3","sha1":"8250022b30b2d5daa3d0c5ae4369e4f8cbb00331","sha256":"98c1f512c44d148afeb090a47647f8fa473cdd8f0d65c628eb955af1a6966b13","sha512":"56c10d3be56e33088c370132e63ccfbaf244663927d42174086d324af01effaef81497e360e43a250a7273a20c933d1edf6dd8b4341182d1f51e3d1fbf794251","ssdeep":"","tlshash":"a72174d6db600009d8ad91fab362c17bfef13e42e21408fb0e85966803cad0670f6b45","first_seen":"2025-09-25T11:47:30.088306Z","last_seen":"2026-02-13T23:06:26.890251Z","times_seen":8,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/images/68762d4ac364502c1ae192b7_Logo-4.png","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:51.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /images/68762d4ac364502c1ae192b7_Logo-4.png HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 1038\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:03 GMT\r\netag: \"690bde37-40e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ru8AdG5ee9ht8ugSRejlZM0X2dTl%2BbJyo2Z5F%2Fg97511M1h6Q138pHTLlA60G2h%2B%2BkWrNUscTYPqFI%2BmFw%2FDrts51PdD6iC2WAlWZHTJHjQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f9132f391806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1038,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 208, 8-bit colormap, non-interlaced","md5":"7c0de0b9443c40da94251aac88ecd080","sha1":"ae3b8e356c050c3ccd87686e315b8a0c1488ea50","sha256":"0111295ddb2c3315486f27b56f1430ada2cc9f6a6d56380b42647182a093dc29","sha512":"bed55e8424a5b21afc05bf9047db888af9de56fcf1e29f53db89d25266b00d5dcfcad0a6548e3b764c0570d6fdfc1a0e983a5df412882847f120b7bbbe62fb8e","ssdeep":"","tlshash":"3411c8204b95c8fdc22adeb9333430108dd20d3a6d829a67e009fd3cc53980f56a87f6","first_seen":"2025-09-25T11:47:30.129662Z","last_seen":"2026-02-13T23:06:26.891558Z","times_seen":8,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/js/jquery-3.5.1.min.dc5e7f18c8.js","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:51.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /js/jquery-3.5.1.min.dc5e7f18c8.js HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:51 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:02 GMT\r\netag: W/\"690bde36-15d84\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4A72NBhrk9CCudzzXcioUimZTxpT5Szh5jsnkvQxvFTTZjvg4uo4g38ypON1tsn%2BUPjpOTCzjs8nkyUtK%2FflIXeCR7RWi3qsKCQqXrbrQ8I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f9133f621806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89476,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-07-26T04:05:00.848854Z","times_seen":263379,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/media/hero-footage-v2.webm","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:52.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /media/hero-footage-v2.webm HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Fri, 13 Feb 2026 23:05:52 GMT\r\ncontent-type: video/webm\r\ncontent-length: 10142266\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:02 GMT\r\netag: \"690bde36-9ac23a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 89\r\ncontent-range: bytes 0-10142265/10142266\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n9Uo%2BnP%2FbikkrPUgUkASxZUuQTj3CaIbwY4s9LYZuoE8lMe6RHsoyFJxYU7P%2BRDppqiT8Lc%2BsfXIvz1AGvQFWAkE3QxYuFc1ycfPaMNM55U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f9154a641806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10142266,"size_decoded":0,"mime_type":"video/webm","magic":"WebM","md5":"1b047f05a4470e517094abc98db20990","sha1":"aaf682ace9df9cf041f3ee7ed9551c0fffc5240b","sha256":"26e2e9db2f65717500f64ec5cf68a7c7254c34471791d59c7df32f15b55258d1","sha512":"78f5286d5b3272ddbfa6e34efa105975214fda7799c9afa07ac343b856bd3392ab6be37ad508112baa5193a3aa5eb70346c84137335bf96fbd9746c2da254fcd","ssdeep":"12288:HuwKfkNjnPQQpadDtu2UEcmfp5ff2riCzct49bibLIRKoCTpL/IJkrW/g9XzamOM:HT1F8Ju2ge6iCzc++tpjIyagMmOfgEI","tlshash":"6e2523dd61b33d5a4f7e2ebfec078a36428c2539b959f0b15bb99d91080c25d500eb72","first_seen":"2025-09-25T11:47:30.161716Z","last_seen":"2026-06-04T14:50:35.256752Z","times_seen":26,"resource_available":false,"data":null}},"time_used":2085,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2069,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-13T23:05:51.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:51 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1wiwDyuukSGWGxlK%2B7D8sibjgbxT26MjWQwC7N4WV43%2FWMSNfauXOXxgxnZ2SJS9KaGEY1lRuB8BV9NbLpBZ6cdHtv1hoOcjLKyyP8UgEi8%3D\"}]}\r\nage: 96108\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9cd7f911afc1de91-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Webflow","description":"Webflow is Software-as-a-Service (SaaS) for website building and hosting.","website":"https://webflow.com","common_platform_enumeration":"","icon":"webflow.svg","categories":["Page builders","CMS"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":85478,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5754)","md5":"29275f29962be5ef36a3c9180140c612","sha1":"9a48c97c950708f44b4b8e9d4f88590b5ae54e37","sha256":"5931dcc05d234e8bb099189ad523b890c8318281510cf026d3acce5da65d1040","sha512":"0d96bb19c82889dad8acfe65b1da82912644174e6789cd2987a19805c3b70f15cd6805e74606eac584b050b3c9a95b682928830b8a86817c9b66e5c4be17024f","ssdeep":"1536:EwzTuoMGwTYEFrYdQsp2i1ydoqqYaQBWDddZgnqZXX6/Ud:EWTLV","tlshash":"ac83b62c5bfb80fb254391a366766a097e45d587ca0a5909b7fd0fc88f82c9bdc1b05c","first_seen":"2026-02-13T23:06:26.898995Z","last_seen":"2026-02-13T23:06:26.898995Z","times_seen":1,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":29,"dns":0,"connect":8,"send":0,"wait":21,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/images/68762d4ac364502c1ae192d9_Axis.avif","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:51.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /images/68762d4ac364502c1ae192d9_Axis.avif HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1021\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:03 GMT\r\netag: \"690bde37-3fd\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YJphqYK9wnljQTCdpANxkAjjZvhsL3HqzCAQVlE%2FJwFTDPCrrrL37W91nUooRj4pGO%2BHzM9BacqqguMYhPsQ2OBBtrJuqepbCoNKgQuK4Zw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f9131f041806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1021,"size_decoded":0,"mime_type":"application/octet-stream","magic":"ISO Media, AVIF Image","md5":"5a34dd8f8cd483a1c3b19e7918df4620","sha1":"32c8e68247e34c09c9af5806719abbda72d6957b","sha256":"24fca96d1cc9cd395dc333c53b25fa8d16c8a2529eb8e22926ff07d68cfadd5e","sha512":"4e4815057c8c5ff6b76dc60141a8509c1c1de50cf87213ffd684c2f6b20f98c297125c1537227e3cbc1afe0dc363afb359c77141cdc13065e739ddca33707e41","ssdeep":"","tlshash":"c111508973204d67d04d02b909ac5a333370aa15c27ffbeb9d8472044fa4beb8062d25","first_seen":"2025-09-25T11:47:30.141238Z","last_seen":"2026-05-02T14:41:38.307341Z","times_seen":27,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/images/68763d4317b1f915646a7502_Logo.avif","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:51.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /images/68763d4317b1f915646a7502_Logo.avif HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1646\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:03 GMT\r\netag: \"690bde37-66e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zN5fILlCrxYwC67cOIwiNKpqcVDw8qPgrQ5808MHDOoMp69T0ow8Di%2FSsPvcduvIaP7AuOF7qefThd3yGPukE0yk2WIGyFhHUDQKY%2BOVBSg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f9132f261806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1646,"size_decoded":0,"mime_type":"application/octet-stream","magic":"ISO Media, AVIF Image","md5":"edb42b21df46809fb6e8be176800f2ee","sha1":"129c0f5f91bf2985b214212638ab40e806ad2eb5","sha256":"143bf58d3a18434891403d6097d91263a68f54372c38c6c64ff88886c0587780","sha512":"ec1790d1122c3845779c651ba297a993d230a26870138b01462cd00a8bac77c985571563a363c859162dc670ad34189e14fff87e3cd70e0b0fd4b0605950650a","ssdeep":"","tlshash":"89310ab276b91d9adeadc331c0840b713664a28ca6f3bbd43e81741208166ac9902c7c","first_seen":"2025-09-25T11:47:30.131392Z","last_seen":"2026-02-13T23:06:26.904015Z","times_seen":7,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/js/webflow.achunk.64873797e35e968c.js","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:52.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /js/webflow.achunk.64873797e35e968c.js HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:52 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KWE%2FQrokbgdM5iSHdKbBWKuggaUNJ27WwwPpSeI0BSAGHBED%2Fy%2F0fKAw3kFEcodyYzYt%2BN%2Bl2qCUjkLWURcfbYIlPWkkbMeN%2B%2BmVT2XD59o%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cd7f915ab181806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T04:24:09.297648Z","times_seen":17539466,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/images/68762d4ac364502c1ae19349_tether-big-card.svg","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:52.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /images/68762d4ac364502c1ae19349_tether-big-card.svg HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:52 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XhPx58Jql6XHGDIdXrNWQu71YHOZYFUwr7oTfjwpbZO1Yb9maUkqfLkTjf5eSiJyVgqvu4DfwQTCXFFZiEj6tahFl0bReMcsA%2F1zzGN6irU%3D\"}]}\r\netag: W/\"690bde37-3d5\"\r\ncontent-encoding: br\r\ncf-ray: 9cd7f9154a691806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":981,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4144e6fc8369f9ac856b82ec5c55faa6","sha1":"2ad8c46c04b1f167bf997e51f7f71f4b43b7b123","sha256":"b799fd8169720b0412537095dc1ab28f883de402b7b0cd5286b74250e826dcdf","sha512":"e4326f7d81770681ff840bb77427d874538fbd324054477511cb6f07be0ddf5125fd64057824b16f0722d98b3b1f8f6a6813ea9896524b4ae767c1b6b8642079","ssdeep":"","tlshash":"6e111cee63c45ce09806c9bfef8614cc131390b18da00bbbc2494b5a34a7509283aa88","first_seen":"2025-09-25T11:47:30.1547Z","last_seen":"2026-02-13T23:06:26.905547Z","times_seen":9,"resource_available":false,"data":null}},"time_used":640,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":639,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/js/webflow.achunk.5959ac50b3c857f1.js","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:52.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /js/webflow.achunk.5959ac50b3c857f1.js HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:52 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J8yfVX6slcwrPVVJACHzqOlZ%2FK8oy1oIOgrH2J9idRCfTucGcxFc%2Bmw%2BpvQr%2FHe1XUO%2BYl6hiBLWQ1D8n64nRCEzrBZnJEh3vfrZ%2FRQIHb8%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cd7f915ab2c1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T04:24:09.297648Z","times_seen":17539466,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/js/webflow.achunk.9e68bd6df188e4b1.js","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:52.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /js/webflow.achunk.9e68bd6df188e4b1.js HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:52 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BJ4eJZ2agG6bUv0S4sq1a2ZOIS8uVTcRZgEOTvsqCsihvJ64WQqQIKmf8N1PDhtPw3oYeOva1OFp04PJ84oYhTyRS7d4xnWg8aOJ%2BgIWYdk%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cd7f915bb481806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T04:24:09.297648Z","times_seen":17539466,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/js/webflow.achunk.88fa96a0bf0adf9a.js","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:52.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /js/webflow.achunk.88fa96a0bf0adf9a.js HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:52 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RtHhV0OxrrNNMkYCwmp2VpKH6XFDQ1e3Ss7EHdP4MIZbRZQV0gNNKL%2FK1nKNLdDtImTODsYKDnUMa91MIBtRJHVGCoCR0nF%2BHWmFGrDOeWk%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cd7f915cb681806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T04:24:09.297648Z","times_seen":17539466,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/css/main.css","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:51.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /css/main.css HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:51 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:03 GMT\r\netag: W/\"690bde37-24a4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Af7U3QGLRwoMYjgRLlXMjfwaPkbbWyjjzpwSHszlRik0DoJJNq5d4XqMx%2BsmKPa2dQFfhwOlk0QKo3LTDrbX9JFmAWw7phuSgA%2BnYIYAat4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f9130ee81806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9380,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9380), with no line terminators","md5":"55e64c4466fa66e34f356dee1590d3eb","sha1":"a5b892f1e740ac19013f122638055cc02a42f93b","sha256":"d3aa4be7b26dccd1fa61a00bb631db89b8e2f960cba86918b3a31d0fa440da46","sha512":"79999dbc0cf1dc488f6d1f20b333fbd8c8be34ee484c8c8a5a2e7b2aaa5365bbe8601f9763414b289302955ee0bf65f4cf94df532c58ef1dc5c2a108647a2ef4","ssdeep":"192:tqIUEj17fRt8SZjq5O+EaTy43eC9TPF3h:tqQAqjq5O+Vy43eydR","tlshash":"6012d7ed533591fe0407442b19d4a3449434e2c2df6a0bdd7677ba8cc2c63eb626aa1f","first_seen":"2026-02-13T23:06:26.907194Z","last_seen":"2026-02-13T23:06:26.907194Z","times_seen":1,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/images/68762d4ac364502c1ae1929f_Frame%201597880415.svg","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:51.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /images/68762d4ac364502c1ae1929f_Frame%201597880415.svg HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:51 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3wVEDNpaB%2BrZ5h%2FziyxLi57qMHZrhPD9934EZKloccENg79HwLDXk3mxE2%2BTP6ZLLZp34%2BN5O3YS%2FZxg7LL8AiOp0bjxgxfBnvsQNTF32lA%3D\"}]}\r\netag: W/\"690bde37-390\"\r\ncontent-encoding: br\r\ncf-ray: 9cd7f9130eef1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":912,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ef49adf107f5903169093ed1e1c99015","sha1":"3b6561f61c71f38747df7cd5a5aeb0e877f307ce","sha256":"99f3c8ac894edff3bf8b0356ca4f7b8714b21c9323b0fa9928437e6983e7084a","sha512":"b85eccd5abb1c9c65390f070fff65893311a9585df0d608fa542eca187da9eb88ae3630f7e07cb217d9bb1f53f2d286882322056a9d001fc90aed8be802c944c","ssdeep":"","tlshash":"e611c0f02208c329cd045729839e64d8067ef2d4714e1179fbd2bb562f1a4ae78b52ee","first_seen":"2025-09-25T11:47:30.092415Z","last_seen":"2026-05-02T14:41:38.302185Z","times_seen":28,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/vollkorn/v30/0yb9GDoxxrvAnPhYGxkpaE0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:52.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/vollkorn/v30/0yb9GDoxxrvAnPhYGxkpaE0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://check-plasma.app\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 46356\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 12 Feb 2026 16:33:36 GMT\r\nexpires: Fri, 12 Feb 2027 16:33:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 109936\r\nlast-modified: Wed, 10 Sep 2025 17:06:09 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":46356,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 46356, version 1.0","md5":"2b391a84a151389641cb774eab08048c","sha1":"c279d9f8b9d0a45e8fd617b4e02266a886234ed8","sha256":"3d9ff812bd542e52bb7f0c204f3a21152e22aead4572ff09722c1b38f30d7567","sha512":"30fe1e8512a207aadb9e432ceded4084274fad458f83efc2bb6cfb0f1cf19bac57fb05c58f767ed3e2c095e57577306f75f861bf3842d8d0fd6638fb062a0d41","ssdeep":"768:Id8XdYq6VtwsBUKFxCCQN9EGfETyGH2MlXPFoBL5cUmkKWt2kDnjzG3j2fQmKkO:I8diVtwsB/fCDP82MlXPaL5c7Wt2kDeP","tlshash":"392302e8504c0d5acb9970f4e89ea20851c40bbf4777cef07a9b313374983e78275662","first_seen":"2025-09-12T10:12:12.403765Z","last_seen":"2026-07-25T23:41:46.622622Z","times_seen":2053,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":145,"dns":1,"connect":22,"send":0,"wait":53,"receive":11,"ssl":128},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:53.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 13 Feb 2026 23:05:53 GMT\r\ndate: Fri, 13 Feb 2026 23:05:53 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4887,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3fd96ba77783845730c343cf00ac7a93","sha1":"bc4f7f4f71aeae387232155c55c4f031c5f3f769","sha256":"27b95b2fcbc857ba25f7e5a707c5c4c06c5cf93415519b7669c19f4045edca37","sha512":"20b137cf9c61842c7bad62dd6c36125833022552379ad97324dbee2c2e9cb0303b17a9aee813ea2bcdbb68541c8c6edbfecfcfb2858cf27c2cff480d756d80cd","ssdeep":"96:aYg4aMzqYg4aybFZHYg4agkYg4aUJ3vYg4aERYg4aYGJc+uTYg4aR6NDO4a3qO4L:vywfydyGy63gy/yFVyR73xpmj3U8fHN","tlshash":"37a1ed91006f9104ea431dd627cf7e32ad8e51956082e27d6ffd2dca6cdbd23122874c","first_seen":"2025-09-10T21:50:06.177565Z","last_seen":"2026-07-26T03:44:43.038886Z","times_seen":20119,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Press+Start+2P\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:53.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Press+Start+2P\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 13 Feb 2026 23:05:53 GMT\r\ndate: Fri, 13 Feb 2026 23:05:53 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1860,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"b7cad844ac5ba76f2eaa0a5f19927973","sha1":"0f619ace2a91abd4ba25e81b02b34e50708501aa","sha256":"c432858c887f02896894b1e44507b18fa1d22287d3bac0c1da9883849c63a118","sha512":"1056d64979f32cc0013a2564c64a6142439088d81b298c3da42cbd73ac308a5e0622cb5fee52c560d6e993e35eaaaea05d10226b42c65379b22a5c4252d1e632","ssdeep":"","tlshash":"043167e6052b94409b931cd373cf7e36de0e2125649184699efe1c84acbaca60391b5e","first_seen":"2025-09-17T02:54:26.564123Z","last_seen":"2026-07-26T02:16:08.26832Z","times_seen":1461,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/assets/styles2.css","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:53.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /assets/styles2.css HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://check-plasma.app/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_E2S1Q7F2X2=GS2.1.s1771023952$o1$g0$t1771023952$j60$l0$h0; _ga=GA1.1.762194008.1771023953\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:54 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:03 GMT\r\netag: W/\"690bde37-514f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 90\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KGjRl9M9vh0l9kaDD2O3eQAMZKmcvS%2Bay1TEvYekToWW%2FIH%2Fzc6rtKhN4CErCI0huQ1gGHi6aS93IobgUcNpVbQuSCLCrXSZae2hPj1EDpY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f922585a1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20815,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"26a98be97c73ea443515cf62f698e0f4","sha1":"5ffde5d1a86eed9e06d518413577a1f9edd758a1","sha256":"8d872130fb28672c251f0eb6993cf5f4f193a9c4b8bfebb7b1906c1e836e4dc6","sha512":"488d74b767ebc83bff259a6a505038030dc3f815355dfc74effde90bb8744a348995cf19327753357b72383b06f1efb4154cb2ea25f0ba79d3ae05517d983082","ssdeep":"384:5IZwMnVFsSOfphgPXZ73GI0+AswSgCqZGoBmEOg9F1CRy5Nxt8LQqeSS4lOH:5IZwMnVFsSOfphgPXZ73GI0dsBw9F1Co","tlshash":"41924211b6b1c5b13c33967d27eea64c7338a043d918deadb7c422209f893b95d92b64","first_seen":"2025-09-05T22:41:39.471006Z","last_seen":"2026-03-11T00:02:21.806625Z","times_seen":37,"resource_available":false,"data":null}},"time_used":1045,"timings":{"blocked":1029,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/images/68762d4ac364502c1ae192c8_Indonesian%20Rupiah.avif","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:51.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /images/68762d4ac364502c1ae192c8_Indonesian%20Rupiah.avif HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:51 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 819\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:03 GMT\r\netag: \"690bde37-333\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FtVzHs8u4Rt%2B99Z9cewSuEoSwVTNqljeHbQXYC1kcZ%2BCLVhN6dR8RMfYDkQ6u5Z2T3%2Fr16W%2Fo9pWU9x84rVBSruhMG5aFbVoehg3qw9teKA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f9132f211806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":819,"size_decoded":0,"mime_type":"application/octet-stream","magic":"ISO Media, AVIF Image","md5":"1aebdfd584614feae1b4764e363d9725","sha1":"bcc6688fb25cde80451bf5c9716f7b603374d3a9","sha256":"b8926865ec7b1c5816e9788a10c3ddb84472c3d3373ee4f8df251eafb42d89b5","sha512":"d2de4850521e80ab2a1daf715a0bafb9bd1ea39d69b6df5ce5e69780d10360544bbc02a8411ed123e5f2d7e48ef1911bc95cc33f8ebcfc7b5809b8e96a76c075","ssdeep":"","tlshash":"5401d01343d14f06e86c027869e85b1263526dbd52621b832d8232149f747f7cd57d25","first_seen":"2025-09-25T11:47:30.087096Z","last_seen":"2026-05-02T14:41:38.395294Z","times_seen":27,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/images/6867b31f7daac3673ded8f2a_button-arrow.svg","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:52.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /images/6867b31f7daac3673ded8f2a_button-arrow.svg HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/css/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:52 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j4PWofObr8PtaF8XyTmA7si9vP%2FBpEj4R85aGfFBnRqscTCOe6Yhwazck8sYtcgC53TweYt3gH92g0pLvF31MBVyVBn6upm3iRFbAljic7Y%3D\"}]}\r\netag: W/\"690bde37-dd\"\r\ncontent-encoding: br\r\ncf-ray: 9cd7f914e9e11806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":221,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b4d8645d354669dad3b3d326dc444da3","sha1":"45114939282e615b7908b2be020ce78e499a572c","sha256":"cccee9f6862613963639e62ae228aa658a59f2118cab91fdc2d31d567d9ded8e","sha512":"bc56b83944f041920376ad173195d2e172ea3379584b9d88c9825116dc2fae06ff21a0746f3cc8b51161171d352eeda529bbd76d3794a492aedb4ad44cf07589","ssdeep":"","tlshash":"77d0a7215815e721540285303118742584ad94a4a59c08f4d3412242f9aaec7fca1edd","first_seen":"2025-09-25T11:47:30.145659Z","last_seen":"2026-05-02T14:41:38.338709Z","times_seen":23,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/js/webflow.achunk.22b66e874d42861f.js","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:52.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /js/webflow.achunk.22b66e874d42861f.js HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:52 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gE%2Bm55Yjimg6esSXvAo0%2F8s9nay1CG%2FcyaLo7ZoWAaBf9uordlSEwIVEYySxabe0lc5kbmtSObRkXgCDyqiezxXnxUYAeoPSJLvrNIdgBAs%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cd7f915ab131806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T04:24:09.297648Z","times_seen":17539466,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Pixelify+Sans:wght@400..700\u0026family=Press+Start+2P\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:53.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Pixelify+Sans:wght@400..700\u0026family=Press+Start+2P\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 13 Feb 2026 23:05:53 GMT\r\ndate: Fri, 13 Feb 2026 23:05:53 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3080,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"d4e6d79c776bf8fc41c61de47e83d957","sha1":"8bc1ade7d4f4e91f3caa6d459dc1c6e3c0b05528","sha256":"fdaed61fd01a57851820b356beb641c643c8b4e699faddae0b72fa64c5d20bad","sha512":"7044230275f8f8d2e4725a69add094387aea08d50c588f7026b9c1aa00f4e576abae59e8bc05b3eb58f8601bcdee55a9ca9508200e51f6121b8a577bac04c82b","ssdeep":"","tlshash":"1851ddd5052bd040eb931cc233cf7e36ee0f21266495d8699efe18d4acbad664351b4e","first_seen":"2025-09-17T03:18:47.287526Z","last_seen":"2026-07-17T04:43:25.674971Z","times_seen":757,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.prod.website-files.com/68762d4ac364502c1ae1924b/68a48eae628be8bf1eb6b0a6_Plasma_logo_black_32x32.png","fqdn":"cdn.prod.website-files.com","domain":"website-files.com","tld":"com"},"ip":{"addr":"104.18.161.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:53.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"prod.website-files.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Feb 2026 00:51:58 GMT","end":"Thu, 07 May 2026 01:51:37 GMT"},"fingerprint":{"sha1":"57:A1:73:C0:08:07:F2:DD:56:2A:DD:FF:51:D4:A5:62:53:C7:9A:8E","sha256":"E9:8A:00:BD:F9:8C:57:70:7F:31:ED:E2:BE:3D:E8:0B:D1:09:B4:07:B7:19:9F:0A:04:46:22:1B:EA:3D:8D:24"}}},"request":{"raw":"GET /68762d4ac364502c1ae1924b/68a48eae628be8bf1eb6b0a6_Plasma_logo_black_32x32.png HTTP/1.1\r\nHost: cdn.prod.website-files.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 1321\r\ncf-ray: 9cd7f9225f761525-OSL\r\nx-amz-id-2: zi3qqdq7DuqeaS0Dw3fy5B/LrUw5x4ibw/IS2ZM6i7RkFygukGFOT0Ztj05sYTNNRvbT0OJyc2o=\r\nx-amz-request-id: 1B0NA877Q5X2FAC4\r\nlast-modified: Tue, 19 Aug 2025 14:48:15 GMT\r\netag: \"07ad07164264fcc29b8946543e946e59\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31536000, must-revalidate\r\nx-amz-version-id: sVnEHaisLBFYkyItAMbaFJhvnaaJmZrT\r\ncf-cache-status: HIT\r\nage: 91\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1321,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"07ad07164264fcc29b8946543e946e59","sha1":"00e46e3d1c06da156f8d445549d6ae33d447abc4","sha256":"8469548c1f49fcb601285e66ffc7b7cadd73cbc74c8d0f909c005e6439d00ca4","sha512":"897fc79a2ee50dfb965d68b82d5202a1457b9b68652bccdd01cad138a07a34322c6ff76208bae1899ca93e3fd911dfe4a8568f7694ae0ee0ee5e9cb1fc2b1ab0","ssdeep":"","tlshash":"2421b6edae30a37a49548dda86cf67363a8e8a521c5c1ea5c504b97302159d3005c58a","first_seen":"2025-09-25T11:47:30.113038Z","last_seen":"2026-05-02T14:41:38.413882Z","times_seen":26,"resource_available":false,"data":null}},"time_used":556,"timings":{"blocked":540,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/images/68762d4ac364502c1ae1929c_Frame%201597880469.svg","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:51.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /images/68762d4ac364502c1ae1929c_Frame%201597880469.svg HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:51 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P%2BWNTc4ZdlqXRtOZrO224hB51%2BxAqcp7e9qUg9D9Wd8sc4Wa%2BxkfyFesQslLO1I0engdehDwnVha%2F6hbaP%2FioAJAboJiGeAzW9M4DvtYIvQ%3D\"}]}\r\netag: W/\"690bde37-d76\"\r\ncontent-encoding: br\r\ncf-ray: 9cd7f9132f181806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3446,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f3ac5cca389ca71a89156e6fd8fb6f52","sha1":"d1a3fe25d38ffb2d9715d2e3cd4e4e73b69a5321","sha256":"b48dc9215a9aa366136e539344924970b0a21838b6e6d4fc0eec25f2528d407b","sha512":"8a9affad986c088c1f13390ede574d2c81ade523d6d237b14c62230d2042e767a687b257b1170206e55b841ce852519a22583cbe2f08e08e20af7a4768ee29b3","ssdeep":"","tlshash":"a76150d42b7963a8f422f2e64c6716d8fc6b20c93ac48876c3747d05e01e0b6a6a50d8","first_seen":"2025-09-25T11:47:30.085811Z","last_seen":"2026-05-02T14:41:38.403624Z","times_seen":28,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"check-plasma.app/images/68762d4ac364502c1ae1927f_Logo-8.png","fqdn":"check-plasma.app","domain":"check-plasma.app","tld":"app"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://check-plasma.app/","date":"2026-02-13T23:05:51.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"check-plasma.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:46:04 GMT","end":"Sat, 04 Apr 2026 00:44:35 GMT"},"fingerprint":{"sha1":"A1:6A:B7:D1:77:FC:92:18:13:EC:E4:23:D1:16:CE:E3:3C:13:0F:54","sha256":"1B:B3:43:1E:66:D4:A3:DE:63:93:C9:80:8F:D8:05:7A:35:EC:66:C2:40:FF:F7:76:FB:77:74:2D:E5:23:17:84"}}},"request":{"raw":"GET /images/68762d4ac364502c1ae1927f_Logo-8.png HTTP/1.1\r\nHost: check-plasma.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://check-plasma.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 13 Feb 2026 23:05:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 1558\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 23:31:03 GMT\r\netag: \"690bde37-616\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 89\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fyX5o%2FkwhBwdl7o%2Fai2bfKR1%2BAOjYZKDLHtKQTDKtGNqbZWe0C4CvPbihKiCnHnrmW2Kw8lp2es3%2Bjp0jyrNmLr4O0COVK4vFwjr0ZQZRQ0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cd7f9132f2b1806-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1558,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 440 x 208, 8-bit colormap, non-interlaced","md5":"4551280aecd430a61ed6e634185270ae","sha1":"1c74108f8e9b51339bee4fd143e55084457ef365","sha256":"4f55075987b472927cab0fa04e65c4640630c1cce4339dd7c388af8916cd6fed","sha512":"b150de11bc1f2aaf36f36195e2c11f38a6929b3fa5ec8eb471278599c33ac5acd79c5e818003ab5e9ab51c6caf44d70a49f843e484b53842840bfbb7eb28dd4b","ssdeep":"","tlshash":"9931e933f494090dc583257a57406acf98ba08419d80cea7e842c48f7636fa9c5f7b45","first_seen":"2025-09-25T11:47:30.09484Z","last_seen":"2026-02-13T23:06:26.92664Z","times_seen":8,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"check-plasma.app","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}