{"report_id":"f443e921-a275-4222-8ccf-1f29dd4f667b","version":6,"status":"done","tags":[],"date":"2026-03-18T15:41:26Z","url":{"schema":"https","addr":"popbasedplasma.xyz/","fqdn":"popbasedplasma.xyz","domain":"popbasedplasma.xyz","tld":"xyz"},"ip":{"addr":"104.21.18.236","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"popbasedplasma.xyz/","fqdn":"popbasedplasma.xyz","domain":"popbasedplasma.xyz","tld":"xyz"},"title":"Node Server Switch Wallet Rectifier - Rectification, Synchronization, and Validation","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T05:57:32.675234Z","times_seen":17850164,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"popbasedplasma.xyz/","fqdn":"popbasedplasma.xyz","domain":"popbasedplasma.xyz","tld":"xyz"},"ip":{"addr":"104.21.18.236","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-22T15:41:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"popbasedplasma.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"popbasedplasma.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"popbasedplasma.xyz","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-18T15:41:28.749752Z","last_seen":"2026-03-18T15:41:28.749752Z","alert_count":56,"request_count":28,"received_data":4987382,"sent_data":12909,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]}]},{"fqdn":"resources.cryptocompare.com","ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-11-03","domain_rank":2801210,"first_seen":"2022-04-28T14:01:13Z","last_seen":"2026-03-18T05:13:23.983376Z","alert_count":0,"request_count":26,"received_data":537239,"sent_data":11973,"comment":"","tags":null,"fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.cryptocompare.com","ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-11-03","domain_rank":265475,"first_seen":"2015-07-15T18:30:01Z","last_seen":"2026-03-18T05:13:23.37512Z","alert_count":0,"request_count":19,"received_data":229092,"sent_data":8671,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"images.cryptocompare.com","ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-11-03","domain_rank":1874031,"first_seen":"2017-04-15T08:42:54Z","last_seen":"2026-03-17T06:34:35.261105Z","alert_count":0,"request_count":1,"received_data":43814,"sent_data":463,"comment":"","tags":null,"fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"widgets.cryptocompare.com/serve/v1/coin/feed?fsym=BTC\u0026tsym=USD\u0026app=google.com","fqdn":"widgets.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d82b0c67d87fc3008e98ea107b3f8631","sha1":"4427e2b0c22f8a9d39fb4a1767f340664de2c853","sha256":"9edbf18fc84e0fa053bc058b187f504a89d0e0627b11dd23776fa54ad97eb673","sha512":"386d181aaeaa835897cc2b1b99a090111a7b89db3b3beecdf3f4ddbd4540d351250cadd62f6522e6846415700cf4ec320af33d74a888f42bf593f8d1194f672a","ssdeep":"1536:CN/0bBYR/QpATdxExW1RYDAQ19AJvMW1rU/oDEc4y8XwbMdZ7p96lPOvCocGFzG+:Ct0bBOIncA+f0KfA2hp4pN","tlshash":"33343b547ae1302592b390d4a92f8b0fa2373225964316ecf6bd88d2eb5cc49317777e","size":238213,"data":"","first_seen":"2026-03-18T15:41:37.495573Z","last_seen":"2026-03-18T15:41:37.495573Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"popbasedplasma.xyz/","fqdn":"popbasedplasma.xyz","domain":"popbasedplasma.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0f74aa1e460dcd8d09caad052af668c8","sha1":"6a064d2b25ab1d140e1e401f462837b83b1767fc","sha256":"fef995df244c82346f7ac78a5c61bf23b22e5db6c71a3f4145dffe2f3b4b2a33","sha512":"03dde4f97a2ba55feac4be216a0b821fb9624d6109a2eae2f0bc7840600102042896b4279ed498de6a59f2d4d010df3bdefa48ae89d50256f71967c7dba56b59","ssdeep":"","tlshash":"7001fe0a9c9763f1ba5650494b3be42029f9125b2106d410b88dd45d0f30dcd186dce8","size":716,"data":"","first_seen":"2023-12-11T11:19:06Z","last_seen":"2026-03-30T04:27:11.466769Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"popbasedplasma.xyz/assets/vendor/bootstrap/js/bootstrap.bundle.min.js","fqdn":"popbasedplasma.xyz","domain":"popbasedplasma.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ccd9d390d31af98110f74f842ea9b32","sha1":"a85e681624c91a106a514c31eacf80de817b2cc3","sha256":"f5210fa3e7f0245a4c51eb7f280092c0ef99fdd28c45e17dab8cc5854fdf4fd3","sha512":"a5ac783258178c710f7c2c1c24b4218a063bf8df2bb7a6d5bd62c5c9432ec5286fd7bd17e774d1cc63e63e4666181864fa38a447c581338ca5ec0f563071eabe","ssdeep":"1536:pppbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZY:T36WJr9ixi","tlshash":"a873c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","size":78129,"data":"","first_seen":"2023-03-07T01:06:26Z","last_seen":"2026-08-12T05:32:21.172529Z","times_seen":18937,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"popbasedplasma.xyz/assets/js/custom.js","fqdn":"popbasedplasma.xyz","domain":"popbasedplasma.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"80b53a130a2f1bf9f72260276cf50082","sha1":"7922ea94dae585fa9755feac6602bc31786e8496","sha256":"e2219273275ac1c45924fbdad512a77e3a600c6b229531e480eb42b44d732699","sha512":"4f6ef93de7e25d2356f7aa10e544d7519bc6e52b5962d00f5da1581cd5c14d4d29e05c1967a63edfb0fc5e3cb0138a59b9352a8e979cf9fa8400eb10a4abb849","ssdeep":"","tlshash":"9cf0e29cb853595a993a73fc5757b088f631549380651005b84c4ea8fbf0929836bd74","size":497,"data":"","first_seen":"2025-08-11T22:43:24.770317Z","last_seen":"2026-03-18T15:41:37.453339Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"popbasedplasma.xyz/7317166c-a284-4ce9-8b25-792db3e3deef","fqdn":"popbasedplasma.xyz","domain":"popbasedplasma.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f11bcdc7b7757c117a8de0db3a4c25b8","sha1":"962e4d08a960106c829d0f9d492d7b891927adab","sha256":"b60b89c0c92cf57329c8590a2c5540cece4def64e4e7bf04f2d39b8ffa3b2748","sha512":"7461553dadb09db423bda8c47a58f8cdade82aa710a0f4415cde912e7a88cd4471ea86aa58a2e5097c90e2cb45ac410104019c56a04c35955e827f0bb0796040","ssdeep":"6144:vkWGL6BSn5NGCk3zi0mCw8wLPNU2HZjGfty3:cjkSnv1k20mCwFnHRGfty3","tlshash":"1044810609ac4f7986ec22e015f72cc401794e0ad9dc3cbfb9ada1579e25bd6e0c279d","size":259964,"data":"","first_seen":"2025-07-13T03:04:16.940864Z","last_seen":"2026-08-10T18:12:06.649103Z","times_seen":5109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"popbasedplasma.xyz/","fqdn":"popbasedplasma.xyz","domain":"popbasedplasma.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"770cf6f165a4af74158cfd25d7d19750","sha1":"eb800382f7efdc1eb916a619d396df9a57df5775","sha256":"6ad87acbb45723aeede693ffbb0828d26bc37c4771c796e7becb48a6400947ba","sha512":"f3e025d0f13c0a93145c3d11de8983b7ca8ed76ffd05eb88bfb0375d4f41cebff295bce7e5f1cb400f43b9f62ba40780eba09a7fc3dc0457390597f1c7ca33fb","ssdeep":"","tlshash":"28019e0e9ca7a7f0a593900e4b7fe02436d6115f2519d050bc8ce85d0f60ede1d6e9dc","size":714,"data":"","first_seen":"2024-01-21T17:25:31Z","last_seen":"2026-04-30T23:38:18.280099Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"popbasedplasma.xyz/assets/vendor/jquery/jquery.min.js","fqdn":"popbasedplasma.xyz","domain":"popbasedplasma.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c14a783dfeb3d238ccd3edd840d82ee","sha1":"ad886e472b3557f3dc7dfa2bc43468ab8d1cef5b","sha256":"80f04717f32ea0320c5e8618fbacedd1fee3a8775ad8292140a6113551d4b5b0","sha512":"fa3e021ca60a9adbe570c6565c7370727904c4396c23a4c519daf258d05fae3e17bfb7607a0ab6dfe2b7150a4ec1b6a95e6d49675291be5f6a4e5679ad78d858","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vN:DIh8GgP3hujzwbhd3XvSiDQ47GK/","tlshash":"6f9309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89500,"data":"","first_seen":"2023-03-07T01:06:20Z","last_seen":"2026-08-11T23:10:44.209941Z","times_seen":21583,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"popbasedplasma.xyz/assets/vendor/qrcodejs/qrcode.min.js","fqdn":"popbasedplasma.xyz","domain":"popbasedplasma.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"517b55d3688ce9ef1085a3d9632bcb97","sha1":"2d06c1f823f34c19981c6ae0b0eb0f5861c5e14b","sha256":"c541ef06327885a8415bca8df6071e14189b4855336def4f36db54bde8484f36","sha512":"08d80845e706a3b9e985b799d3849cd7791ad3ba5aa9d793bb4591d4833890d7299810144874905f416c94d8530da74be0ee520066a91ade05a1da8bf0ccb498","ssdeep":"384:WRQ2kvcAAdTRhQLThP2yO9/9G84U5xOiKQYHHHsglDep9m1yfB8dKLMyA+LyUyy9:xThP2V/9N4U/gQYPXa8CAPLyrZ","tlshash":"8c92c7e4f36542f6915e6cd4283f104b64a0a4636c1490acbfb5c1e6a9f8fe0647af74","size":19927,"data":"","first_seen":"2023-03-07T01:14:56Z","last_seen":"2026-08-12T05:52:01.53043Z","times_seen":66304,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"popbasedplasma.xyz/assets/vendor/slick/slick.min.js","fqdn":"popbasedplasma.xyz","domain":"popbasedplasma.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5a61c749e44e47159af8a6579dda121","sha1":"3b41b3bc956685015a347a2238e71db29dfa0dbb","sha256":"0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740","sha512":"5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH","tlshash":"e513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","size":42863,"data":"","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-08-12T05:57:22.045755Z","times_seen":111055,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"popbasedplasma.xyz/format-3.26.2.min.js","fqdn":"popbasedplasma.xyz","domain":"popbasedplasma.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"552fb5bbcd2421905f7a1fdfc65258a0","sha1":"24528d2a025ffcd19e56450fac77380f424aa3a5","sha256":"770c924de13342e51c46ff590e41d5d61f4c5571136070322472f773e9579909","sha512":"3357e0b8a679af79251b20217b4ecfd5239cf067aa1a66cfae59021c55a835dec14eb37a579a928c62ae8d55fa4b33779ce418a58a3903f0270640ea44a5d615","ssdeep":"768:TOroAcuavhfZEGF3kaJCwbR5VMJq4y80xEwwucVewpcRWhD8GR7gkc63irce:PvhhEG3lRDdrv5wD4K2","tlshash":"e563fbd6581bc9d08e1121dde833e625e4a41d67cd6ef273aa2cded0784df26848327b","size":67582,"data":"","first_seen":"2026-03-18T15:41:37.449245Z","last_seen":"2026-03-18T15:41:37.449245Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"popbasedplasma.xyz/assets/js/custom.js","fqdn":"popbasedplasma.xyz","domain":"popbasedplasma.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"80b53a130a2f1bf9f72260276cf50082","sha1":"7922ea94dae585fa9755feac6602bc31786e8496","sha256":"e2219273275ac1c45924fbdad512a77e3a600c6b229531e480eb42b44d732699","sha512":"4f6ef93de7e25d2356f7aa10e544d7519bc6e52b5962d00f5da1581cd5c14d4d29e05c1967a63edfb0fc5e3cb0138a59b9352a8e979cf9fa8400eb10a4abb849","ssdeep":"","tlshash":"9cf0e29cb853595a993a73fc5757b088f631549380651005b84c4ea8fbf0929836bd74","size":497,"data":"","first_seen":"2025-08-11T22:43:24.770317Z","last_seen":"2026-03-18T15:41:37.453339Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.cryptocompare.com/serve/v3/coin/header?fsyms=BTC,ETH,BNB,XRP,MATIC,DOGE,ADA,DAI,DOT,TRX,LTC,SHIB,SOL,UNI,AVAX,LINK,XMR,ATOM,ETC\u0026tsyms=USD,EUR,CNY,GBP\u0026app=google.com","fqdn":"widgets.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f55c34eef8052ae061dfc44cdde05ab7","sha1":"ec9b97e5ff947c8b5a33dec17d2d95a3761f8519","sha256":"95a23b85ed60824ddc3310e7ed8064319a3d39ef970315e4afc3213584bb2243","sha512":"b7d500444637de04f7544995f1ef0066009f381586ab208ff49007fc138eccad3fd7787cbebc5634369d07af45f4f33d3cd6a54d55a2d67679b2e2a1d6eca9c2","ssdeep":"3072:HoFXK9E6K9XoW9cyt97ytBAFBB5xFBp2+BZRc+apc+Gss+ILj+TlEqTEkqkN0q59:7d","tlshash":"96a34527e7ac6c3954be008cd939479618ee03f1c760a691b6ee4d9f23cdc86b1394b5","size":101445,"data":"","first_seen":"2026-03-18T15:41:37.499536Z","last_seen":"2026-03-18T15:41:37.499536Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"popbasedplasma.xyz/assets/vendor/bootstrap/css/bootstrap.min.css","fqdn":"popbasedplasma.xyz","domain":"popbasedplasma.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:03.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"popbasedplasma.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 10:42:10 GMT","end":"Sat, 13 Jun 2026 10:42:09 GMT"},"fingerprint":{"sha1":"11:E3:02:7F:35:B9:07:60:4C:C3:84:E3:B6:A3:0A:22:FA:D7:6D:AB","sha256":"99:20:1F:A8:73:B1:AD:8D:91:AB:5F:7D:4C:30:4C:AF:2F:FE:26:98:81:7E:B5:00:7D:24:AF:FD:83:A4:C1:D7"}}},"request":{"raw":"GET /assets/vendor/bootstrap/css/bootstrap.min.css HTTP/1.1\r\nHost: popbasedplasma.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:04 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 15 Mar 2026 10:57:33 GMT\r\netag: W/\"28053-19cf124e8f0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GXclaH9z1A7ltTxCRIGihcRLkIa6ktTTC48GMV7yfDny4%2FhS9itd7mLSfNw%2FJe2q8DumpPaz0WH%2FbbsYN8eFFQhXyLIr0m3nJvusFjtk%2Bbwvgg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de556e1bbdfe0de-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":163923,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (65306)","md5":"4c6db92832c6e3c176d3ffdee8f6568a","sha1":"7ac0f94833f4010be378a432c97eb3f866e158e2","sha256":"7263bea914d043e7d4362a73568b4485f1540bcd80d037ad9adb0a9959651653","sha512":"733bcef1e164197df2de7841fe41345432a01ad4c228e5a2bf8fee00e6fbe0fdd88521c855a98f3d494e61bb218cf4de0d3c657aaa4ec57837b2258e2ec7b0f9","ssdeep":"1536:4t04S8if0W8DsEBpy0cuJBH2rIWE5WdVUpz600I4fM:4t04qdVUpz600I4fM","tlshash":"41f3b4dbf581341dd4a7c259a4d1bffd052f8585e3025aabb0277bb88b892c70963e4c","first_seen":"2025-08-29T23:14:00.272717Z","last_seen":"2026-03-18T15:41:37.428913Z","times_seen":3,"resource_available":false,"data":null}},"time_used":518,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":490,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"popbasedplasma.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"popbasedplasma.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"popbasedplasma.xyz/assets/vendor/icons/icofont.min.css","fqdn":"popbasedplasma.xyz","domain":"popbasedplasma.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:03.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"popbasedplasma.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 10:42:10 GMT","end":"Sat, 13 Jun 2026 10:42:09 GMT"},"fingerprint":{"sha1":"11:E3:02:7F:35:B9:07:60:4C:C3:84:E3:B6:A3:0A:22:FA:D7:6D:AB","sha256":"99:20:1F:A8:73:B1:AD:8D:91:AB:5F:7D:4C:30:4C:AF:2F:FE:26:98:81:7E:B5:00:7D:24:AF:FD:83:A4:C1:D7"}}},"request":{"raw":"GET /assets/vendor/icons/icofont.min.css HTTP/1.1\r\nHost: popbasedplasma.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:04 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 15 Mar 2026 10:57:33 GMT\r\netag: W/\"16830-19cf124e901\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mjzrh2KOYUuPdqO5N4BOC1qGG%2B3TAbs6NKWt0L66%2FuO6GvtgkTCLhdxhLVEdoAugbiNq0Yylcszs3BiFa1NmtzK%2BRSG%2BI48%2BKy1BERWMlkfcwQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de556e1bbe1e0de-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92208,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65364)","md5":"a985b1b9bf77b978860d9b02b5501564","sha1":"cd9936348917fb31ad2f810103f6e963645bb87f","sha256":"c9cd47be9e55f558981cdccceec330631bc286922af943385f6827c217526c45","sha512":"d0fa9683890e8a972b75a03fce6b3cd5788342060d2ca0bddd5c7fe368556cfc82697de8722da0f6391264fe474fed5d84fea554de080fdabef9fce5b1cd3832","ssdeep":"1536:2VN69xXFF7NJ0H3ZuRW5x3IE3+7IIQinB:2y9xXFKuR03IsSIIQyB","tlshash":"4493c6a4d78a55cd7b32cc0aa385a628ec96fd33c5e10e21f01f951d18f7626a3c5b78","first_seen":"2024-02-16T16:19:51Z","last_seen":"2026-08-07T00:19:51.481287Z","times_seen":22,"resource_available":false,"data":null}},"time_used":580,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":563,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"popbasedplasma.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"popbasedplasma.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"popbasedplasma.xyz/assets/vendor/jquery/jquery.min.js","fqdn":"popbasedplasma.xyz","domain":"popbasedplasma.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:03.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"popbasedplasma.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 10:42:10 GMT","end":"Sat, 13 Jun 2026 10:42:09 GMT"},"fingerprint":{"sha1":"11:E3:02:7F:35:B9:07:60:4C:C3:84:E3:B6:A3:0A:22:FA:D7:6D:AB","sha256":"99:20:1F:A8:73:B1:AD:8D:91:AB:5F:7D:4C:30:4C:AF:2F:FE:26:98:81:7E:B5:00:7D:24:AF:FD:83:A4:C1:D7"}}},"request":{"raw":"GET /assets/vendor/jquery/jquery.min.js HTTP/1.1\r\nHost: popbasedplasma.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:04 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 15 Mar 2026 10:57:33 GMT\r\netag: W/\"15d9c-19cf124e904\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IYJkYT43aUVNzlecSuANQ5IHfwtLVxAxVryJKrFR%2BqeWEaOpGysHa12e8SR2cqFb%2BdwGwgI%2BNGXo91Lt3K%2FdTerntg6WuJH6c0oIR%2FVl7WyAnw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de556e1cc2ee0de-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":89500,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"7c14a783dfeb3d238ccd3edd840d82ee","sha1":"ad886e472b3557f3dc7dfa2bc43468ab8d1cef5b","sha256":"80f04717f32ea0320c5e8618fbacedd1fee3a8775ad8292140a6113551d4b5b0","sha512":"fa3e021ca60a9adbe570c6565c7370727904c4396c23a4c519daf258d05fae3e17bfb7607a0ab6dfe2b7150a4ec1b6a95e6d49675291be5f6a4e5679ad78d858","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1vN:DIh8GgP3hujzwbhd3XvSiDQ47GK/","tlshash":"6f9309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:06:20Z","last_seen":"2026-08-11T23:10:44.209941Z","times_seen":21583,"resource_available":true,"data":null}},"time_used":591,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":565,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"popbasedplasma.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"popbasedplasma.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"resources.cryptocompare.com/news/103/59371770.jpeg","fqdn":"resources.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:04.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 12:36:03 GMT","end":"Sun, 24 May 2026 13:35:55 GMT"},"fingerprint":{"sha1":"FD:66:48:50:CD:A6:40:95:0E:9E:61:EB:74:35:DA:08:64:12:6C:3B","sha256":"D1:66:CC:CC:EE:59:3E:89:A8:89:77:B3:09:BB:49:2A:EE:4C:9A:41:70:24:C4:33:C1:16:07:BB:FE:B2:DF:70"}}},"request":{"raw":"GET /news/103/59371770.jpeg HTTP/1.1\r\nHost: resources.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13667\r\ncf-ray: 9de556ea1abe783d-OSL\r\nlast-modified: Wed, 18 Mar 2026 15:37:31 GMT\r\netag: 0x8DE85044499568A\r\nx-ms-request-id: 29d69b48-b01e-006b-71ed-b6d5d7000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20260318T153857Z-r15c679d9d5xmt4zhC1FRAgrc40000000eag000000009cbf\r\nx-fd-int-roxy-purgeid: 52414258\r\nx-cache: TCP_MISS\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13667,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 300x300, components 3","md5":"c5864910886d3c1aa6b901be9c5ca303","sha1":"1c09222e27b70091b05606bf124be19a5b814801","sha256":"d6d288ed13d7338b75afd42591b3bb88417077005a1543f53ea1a0589d797ccf","sha512":"3322cd6a3b1fc4dae7fc68ea31e5ebd7ef69ed71d426464f37ffe65b4d65e74d6e8f33448ec7da2642dff2d2a8fcffe0abccebb1b5cd76ef1536f79d7babe627","ssdeep":"192:AjaAIqXiYOPQiTeo1IGehaSsPbrIqSD6yLyPXNKTd2x7t0NuWRvk8GvHEK7HDbH0:AWhqW2hHsjd3PXNKJPs8GvHE+velxD","tlshash":"a052c0a7fb251118f3ffd9b989d821d4f12060d01f90ec5e185b2257ab28211a5de7dc","first_seen":"2026-03-18T15:41:37.432384Z","last_seen":"2026-03-18T15:41:37.432384Z","times_seen":1,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":39,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptocompare.com/media/38553096/xrp.png","fqdn":"www.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:05.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 12:36:03 GMT","end":"Sun, 24 May 2026 13:35:55 GMT"},"fingerprint":{"sha1":"FD:66:48:50:CD:A6:40:95:0E:9E:61:EB:74:35:DA:08:64:12:6C:3B","sha256":"D1:66:CC:CC:EE:59:3E:89:A8:89:77:B3:09:BB:49:2A:EE:4C:9A:41:70:24:C4:33:C1:16:07:BB:FE:B2:DF:70"}}},"request":{"raw":"GET /media/38553096/xrp.png HTTP/1.1\r\nHost: www.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 2607\r\ncf-ray: 9de556edf835783d-OSL\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 18 Mar 2027 15:41:05 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncryptocompare-vm: 2\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: frame-ancestors 'self'\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Sat, 21 Feb 2026 07:00:22 GMT\r\nage: 2191242\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2607,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit colormap, non-interlaced","md5":"2b649abbd4cafa7b3353d625618c755e","sha1":"106482fafa4cf2d98a12565f8535b94af69dec03","sha256":"eb49cbf5771508008a9324018d2673d00d2d05d21199509a200f8a7b5990d05d","sha512":"f548f071d6ee6224fa3637177e47de71cea85d53f052817fdf9a580bf5ce1869ce88fbe33f4763c31dea447826936035c4457d44fd2f1fe21ca446a776825e9e","ssdeep":"","tlshash":"86511ac3d3769288ed2d2d1c35da4322e7c7dd98c0bd113abb063ea151b4c049906e77","first_seen":"2023-11-14T08:33:40Z","last_seen":"2026-07-26T12:47:21.10229Z","times_seen":183,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptocompare.com/media/37747734/sol.png","fqdn":"www.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:05.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 12:36:03 GMT","end":"Sun, 24 May 2026 13:35:55 GMT"},"fingerprint":{"sha1":"FD:66:48:50:CD:A6:40:95:0E:9E:61:EB:74:35:DA:08:64:12:6C:3B","sha256":"D1:66:CC:CC:EE:59:3E:89:A8:89:77:B3:09:BB:49:2A:EE:4C:9A:41:70:24:C4:33:C1:16:07:BB:FE:B2:DF:70"}}},"request":{"raw":"GET /media/37747734/sol.png HTTP/1.1\r\nHost: www.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 12814\r\ncf-ray: 9de556ee088a783d-OSL\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 18 Mar 2027 15:41:05 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncryptocompare-vm: 1\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: frame-ancestors 'self'\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Fri, 20 Feb 2026 03:10:13 GMT\r\nage: 2291452\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12814,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"1697babae9d5595a0941cad9ca3595c2","sha1":"508b47d59519804adbe0187e636035e7ee9d1108","sha256":"b5c0c43522bcfb393919719af641329ccb8e87c85d172e18766e6c4feec8b4c4","sha512":"830099e3ca27d0a56d74f0a093f1ee569ed405f4005d1404aeabbdcd1abe92bbb8d626cf6b46d84fc866be74d1d426fbc5afe58ebe11d0dac1b3471968db3f87","ssdeep":"192:chpS/cKe8GqKekY6WiTo1HjxPu+7+DdaebkIKLD4AHerH1EQunz2f2bnC2hZRcRZ:yWzGqKekKB5xPlqdaiqoAS2Quq+zCHGW","tlshash":"1d42c0faf196b8dedfe095fdba95cb92f880ef230196a42310e624170d76c84da4150a","first_seen":"2023-08-22T22:03:47Z","last_seen":"2026-07-26T12:47:21.143855Z","times_seen":187,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"popbasedplasma.xyz/assets/vendor/slick/slick-theme.min.css","fqdn":"popbasedplasma.xyz","domain":"popbasedplasma.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:03.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"popbasedplasma.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 10:42:10 GMT","end":"Sat, 13 Jun 2026 10:42:09 GMT"},"fingerprint":{"sha1":"11:E3:02:7F:35:B9:07:60:4C:C3:84:E3:B6:A3:0A:22:FA:D7:6D:AB","sha256":"99:20:1F:A8:73:B1:AD:8D:91:AB:5F:7D:4C:30:4C:AF:2F:FE:26:98:81:7E:B5:00:7D:24:AF:FD:83:A4:C1:D7"}}},"request":{"raw":"GET /assets/vendor/slick/slick-theme.min.css HTTP/1.1\r\nHost: popbasedplasma.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:04 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 15 Mar 2026 10:57:33 GMT\r\netag: W/\"94a-19cf124e914\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AUbPILjssXiE9lHQTW7dEb%2FaNsMWf1lgmn9dlyOwERp44kWacghg9yrCQPIiWAiRdvEToEsbup2JNjaAlYl2yp0He8lHlz5AQRnsCoJSAvSo%2FQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de556e1cbe8e0de-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":2378,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (2356), with no line terminators","md5":"10a4e974d6be9993fa9231aa0a7cb80d","sha1":"cbbfa7409d2fb161ca70a53f252da27273e1afe1","sha256":"f5f61b310d1cd2140794d64cb7e5f92ff6a6d25cad064324eb48a9cb75b66dc2","sha512":"4dc8eb1d3da46095b3d38083efacd2a3950db2ade7cc3b8208caf770840a3ef53c1bdbc9f342cb87fec2e9af46279cad8b1a79e640b52e30a98eeb4c522996a8","ssdeep":"","tlshash":"8c41426851a1b5ca4167d920bbd3829530c37917b67329f9f62f132cc1cd0a82fedb56","first_seen":"2024-02-16T16:19:51Z","last_seen":"2026-08-07T00:19:51.491496Z","times_seen":22,"resource_available":false,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":375,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"popbasedplasma.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"popbasedplasma.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptocompare.com/media/37746339/doge.png","fqdn":"www.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:05.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 12:36:03 GMT","end":"Sun, 24 May 2026 13:35:55 GMT"},"fingerprint":{"sha1":"FD:66:48:50:CD:A6:40:95:0E:9E:61:EB:74:35:DA:08:64:12:6C:3B","sha256":"D1:66:CC:CC:EE:59:3E:89:A8:89:77:B3:09:BB:49:2A:EE:4C:9A:41:70:24:C4:33:C1:16:07:BB:FE:B2:DF:70"}}},"request":{"raw":"GET /media/37746339/doge.png HTTP/1.1\r\nHost: www.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 31186\r\ncf-ray: 9de556ee084e783d-OSL\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 18 Mar 2027 15:41:05 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncryptocompare-vm: 2\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: frame-ancestors 'self'\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Mon, 02 Mar 2026 20:26:50 GMT\r\nage: 1365255\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31186,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"a68df71ef2e145f46c6661f04d0b3141","sha1":"7420162e0d4fad9a44c17d73513d4484e6a2f79a","sha256":"b1f2983a51643c665d8b39fdc4475d480a078be132f7c84785a487a666e49791","sha512":"be3899710139b879624858a79f34387526ad4d6aff4715d9a33ee2f2a6d55902e1dfb2f7fc7cdb031b6eaba15c3ea6e5144c4f1f53aad71864ea78e739cb2897","ssdeep":"768:pvNE8+m1unYOpuJO/V8WekYIjUGMpQ5MbwmaXiXRo1DG:pVd+LsrWeAjUVQSblaXiB4G","tlshash":"85e2e118bec35c521366feb3fa8584de9673ad98836110a4cd8d8f1a53142e79c6c78f","first_seen":"2023-12-11T11:19:07Z","last_seen":"2026-07-26T12:47:21.155128Z","times_seen":173,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptocompare.com/media/37746235/ada.png","fqdn":"www.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:05.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 12:36:03 GMT","end":"Sun, 24 May 2026 13:35:55 GMT"},"fingerprint":{"sha1":"FD:66:48:50:CD:A6:40:95:0E:9E:61:EB:74:35:DA:08:64:12:6C:3B","sha256":"D1:66:CC:CC:EE:59:3E:89:A8:89:77:B3:09:BB:49:2A:EE:4C:9A:41:70:24:C4:33:C1:16:07:BB:FE:B2:DF:70"}}},"request":{"raw":"GET /media/37746235/ada.png HTTP/1.1\r\nHost: www.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 10005\r\ncf-ray: 9de556ee0853783d-OSL\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 18 Mar 2027 15:41:05 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncryptocompare-vm: 2\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: frame-ancestors 'self'\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Fri, 20 Feb 2026 15:15:29 GMT\r\nage: 2247936\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10005,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"6e182dc54cdf8b7d4d41cec3adc0afa3","sha1":"a4217c59c032aeba4c5e885a02ffe26c7d846099","sha256":"0fcfdba29645c43c43173a1d777802c2c123590d9fa4fbcd7f0bc0f60ea3784a","sha512":"7ab419806d55e0d0c7c6a6250e4eeb8293f9c150bc7c6a1ebd5f819d12015f3f10aa00e1e41c18addada1f4664e75534b4a7b11c051121e4968f6c3e458f45cb","ssdeep":"192:Tdg47FhknAIj+7SPt4uddzhko3J2Ll/fYOCPGolAshlkd8XSPfMzp/WZhlWB9aBQ:pVYnAU+7giuddKo52LJCPZfhlq8iPfMX","tlshash":"e0228d076918ac10448dba8f39ee6653337f07d06fb051185e5a9882e751affe0e9983","first_seen":"2023-08-22T22:03:47Z","last_seen":"2026-07-26T12:47:21.120781Z","times_seen":176,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptocompare.com/media/37746242/link.png","fqdn":"www.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:05.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 12:36:03 GMT","end":"Sun, 24 May 2026 13:35:55 GMT"},"fingerprint":{"sha1":"FD:66:48:50:CD:A6:40:95:0E:9E:61:EB:74:35:DA:08:64:12:6C:3B","sha256":"D1:66:CC:CC:EE:59:3E:89:A8:89:77:B3:09:BB:49:2A:EE:4C:9A:41:70:24:C4:33:C1:16:07:BB:FE:B2:DF:70"}}},"request":{"raw":"GET /media/37746242/link.png HTTP/1.1\r\nHost: www.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 6545\r\ncf-ray: 9de556ee18b1783d-OSL\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 18 Mar 2027 15:41:05 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncryptocompare-vm: 1\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: frame-ancestors 'self'\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Tue, 03 Mar 2026 16:32:32 GMT\r\nage: 1292913\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6545,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"6740b8e67937c9004a79d7b41e70f75b","sha1":"e4af9cbdb09291a7beba36f8b6f2c77324e73440","sha256":"ada1a8f278b781725b13cbe0e4175881ce9bed0aef5bc4afebdd115b083a062a","sha512":"60d5956ef2ed7496089cf11f905cf615db35117ef99c4beb426bd0f1699d195178713a1faa026dc9fed404eef46704ca640ac648992d02fe16600ec5f7d0494a","ssdeep":"192:Tdg67F8kn9reIuG8iWiGOTh6ptGIWzRj5:prNnYjGJDGOOfWD","tlshash":"ded13b26ba6dace0c58f860076ece6130bb3438848c7e5507c895b1765933b7d88aac3","first_seen":"2023-12-11T11:19:07Z","last_seen":"2026-07-26T12:47:21.076966Z","times_seen":170,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"popbasedplasma.xyz/assets/css/style.css","fqdn":"popbasedplasma.xyz","domain":"popbasedplasma.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:03.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"popbasedplasma.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 10:42:10 GMT","end":"Sat, 13 Jun 2026 10:42:09 GMT"},"fingerprint":{"sha1":"11:E3:02:7F:35:B9:07:60:4C:C3:84:E3:B6:A3:0A:22:FA:D7:6D:AB","sha256":"99:20:1F:A8:73:B1:AD:8D:91:AB:5F:7D:4C:30:4C:AF:2F:FE:26:98:81:7E:B5:00:7D:24:AF:FD:83:A4:C1:D7"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: popbasedplasma.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:04 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 15 Mar 2026 10:57:33 GMT\r\netag: W/\"2c6c-19cf124e891\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m4oh7cfAVjcVgtH9%2BYhmwWT76cV8PVPpfaM4ghUAAuA2oD4iRb9xfUAeRwE2zf17oWelBZOpVeu9rw1SG2FXbNkBk0kV6iqi%2B%2BGnJhPInXe4mQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de556e1cbece0de-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11372,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"b09cae7270d3385f9eb24a2942e413ec","sha1":"820bc35a018fbe10ff76d16f25f925c960b68cee","sha256":"39b7ee8d133c776fa369696c65f8c83955336e0f129f92829d8b6c4ee762328e","sha512":"dfd0a350e73c12dc21ad1afcfcba08c32024ec002326a216b5632935ba7d5e2395c546ef0372e24a6300e79d7d0ded89944324e409547d4c7ec29c6f36cb21b7","ssdeep":"192:H09crQm2/Ya6kMKJiiqHel97yp6bEvaffEc2ns:He6pAiix9nrKs","tlshash":"1a32fd21e603154b3233aaa8af2157e6fb9a5423c702013d7bed73944ff55648a25fcd","first_seen":"2025-08-29T23:14:00.371877Z","last_seen":"2026-03-18T15:41:37.4365Z","times_seen":3,"resource_available":false,"data":null}},"time_used":515,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":515,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"popbasedplasma.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"popbasedplasma.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"resources.cryptocompare.com/news/69/59370583.jpeg","fqdn":"resources.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:04.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 12:36:03 GMT","end":"Sun, 24 May 2026 13:35:55 GMT"},"fingerprint":{"sha1":"FD:66:48:50:CD:A6:40:95:0E:9E:61:EB:74:35:DA:08:64:12:6C:3B","sha256":"D1:66:CC:CC:EE:59:3E:89:A8:89:77:B3:09:BB:49:2A:EE:4C:9A:41:70:24:C4:33:C1:16:07:BB:FE:B2:DF:70"}}},"request":{"raw":"GET /news/69/59370583.jpeg HTTP/1.1\r\nHost: resources.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17041\r\ncf-ray: 9de556ea1ab6783d-OSL\r\nlast-modified: Wed, 18 Mar 2026 15:09:33 GMT\r\netag: 0x8DE85005C8839D3\r\nx-ms-request-id: 07966df8-301e-0007-2ce9-b63e40000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20260318T150940Z-r154b86556947w2nhC1CPH42ds00000027m000000000bxeg\r\nx-fd-int-roxy-purgeid: 52414258\r\nx-cache: TCP_MISS\r\naccept-ranges: bytes\r\nage: 1884\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17041,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 300x300, components 3","md5":"bb3741954c9e5d0a864e479613079e39","sha1":"f28364f55da52366cfb1547e218ce194d6035091","sha256":"5f57e83b6dc2372a19de8d658446baa998d658a728f0e27f0aca721e29aa3859","sha512":"5ea203d1d331d619f4d9f738c070eaa3a76a8dc32a8b36377b9f7fc918f3fb8fec48829589ec40190a7ca9921c93540b39de246a1876ba26c97d16687d0cb1ee","ssdeep":"384:aqB5w1gNwuwS04XVp9ZcRwvaQNqGXxTi7kRl1b/9gFpSQZ:aWmWNc4XV/ZcKvdqmxTi7uP9KZ","tlshash":"f972cf4af195f1eca0eaf8b06d7e23027dd8e57156f6652c4f4172a30e70af06253923","first_seen":"2026-03-18T15:41:37.437464Z","last_seen":"2026-03-18T15:41:37.437464Z","times_seen":1,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":40,"dns":0,"connect":0,"send":0,"wait":69,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptocompare.com/media/40485170/bnb.png","fqdn":"www.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:05.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 12:36:03 GMT","end":"Sun, 24 May 2026 13:35:55 GMT"},"fingerprint":{"sha1":"FD:66:48:50:CD:A6:40:95:0E:9E:61:EB:74:35:DA:08:64:12:6C:3B","sha256":"D1:66:CC:CC:EE:59:3E:89:A8:89:77:B3:09:BB:49:2A:EE:4C:9A:41:70:24:C4:33:C1:16:07:BB:FE:B2:DF:70"}}},"request":{"raw":"GET /media/40485170/bnb.png HTTP/1.1\r\nHost: www.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 19936\r\ncf-ray: 9de556edf832783d-OSL\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 18 Mar 2027 15:41:05 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncryptocompare-vm: 1\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: frame-ancestors 'self'\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Sun, 22 Feb 2026 05:46:34 GMT\r\nage: 2109271\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19936,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"ba8e24f47a44b9d30e9c548c7e34cd82","sha1":"0a93c37645a996b4beaffe5de27b3afbccc70b73","sha256":"c377c67091e7e2f07c22ee68c660fdef01adbf572e685d02d0bcb44e6ee1b170","sha512":"aa5b33231e7b97f591eba97a62a41013b09b04cd229a131754890c82091d38de8035942c4ea18b125b4d7e6bacd3af6830bc793019efc40f59615c671ace1c81","ssdeep":"384:sF/NJ+8SO9eViKc+Y0gauMqYcj+mD1mFoIvR48FsTDRwtC9KHrxa:sF/e8x8GM4jLD1mFrvR4fTDRwtYKHrxa","tlshash":"2a92d151fb88d205ea3721d86fad654a3ef61c5cfa558cc2c5fd02a78c10b7c45c9ac6","first_seen":"2023-08-22T22:03:47Z","last_seen":"2026-07-26T12:47:21.089093Z","times_seen":164,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"resources.cryptocompare.com/news/82/default.png","fqdn":"resources.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:04.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 12:36:03 GMT","end":"Sun, 24 May 2026 13:35:55 GMT"},"fingerprint":{"sha1":"FD:66:48:50:CD:A6:40:95:0E:9E:61:EB:74:35:DA:08:64:12:6C:3B","sha256":"D1:66:CC:CC:EE:59:3E:89:A8:89:77:B3:09:BB:49:2A:EE:4C:9A:41:70:24:C4:33:C1:16:07:BB:FE:B2:DF:70"}}},"request":{"raw":"GET /news/82/default.png HTTP/1.1\r\nHost: resources.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 18106\r\ncf-ray: 9de556ea3b3e783d-OSL\r\nlast-modified: Mon, 23 Oct 2023 13:16:39 GMT\r\netag: 0x8DBD3CA4AE6B9D5\r\nx-ms-request-id: b24b30a2-301e-005a-31f9-4934c4000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20251031T180953Z-r15bb78fdf6btfqzhC1STOrrrg00000003kg000000005we0\r\nx-fd-int-roxy-purgeid: 0\r\nx-cache-info: L2_T2\r\nx-cache: TCP_REMOTE_HIT\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18106,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"f8039527cdaa7931e484d8baaceb65c0","sha1":"dd73ebdc4ed4f69bce669c1780ec9f01f2933f3d","sha256":"2c6e5ce744ca7481409d14089f9f838e0203dd6a207e435c8f8a51bb4c9e42ef","sha512":"6b47fbb321e45da8506ea6fa9e21e6c29a54aa1d5b2af5205948cfa2d75ee30a38be7dd006332cd96977e74c2a7bdbf2f3053417686f0676b9889daaf2a7e45d","ssdeep":"384:ei+Fs4owZ/l477pQ94hHK1Ve6bhGd48XHiXl8ML0c/PKHHNfy:vOx/l4/OOHK18IGd48yXelc3KHtfy","tlshash":"9482bf5032fd5bd887f0d4e2547fc8a9e9dd150d1a70529848372e689fbd82a933ae0d","first_seen":"2024-01-21T17:25:31Z","last_seen":"2026-07-26T12:47:21.145949Z","times_seen":96,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":90,"dns":29,"connect":1,"send":0,"wait":125,"receive":1,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"resources.cryptocompare.com/news/98/default.png","fqdn":"resources.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:04.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 12:36:03 GMT","end":"Sun, 24 May 2026 13:35:55 GMT"},"fingerprint":{"sha1":"FD:66:48:50:CD:A6:40:95:0E:9E:61:EB:74:35:DA:08:64:12:6C:3B","sha256":"D1:66:CC:CC:EE:59:3E:89:A8:89:77:B3:09:BB:49:2A:EE:4C:9A:41:70:24:C4:33:C1:16:07:BB:FE:B2:DF:70"}}},"request":{"raw":"GET /news/98/default.png HTTP/1.1\r\nHost: resources.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 10410\r\ncf-ray: 9de556ea3b5b783d-OSL\r\nlast-modified: Thu, 13 Jun 2024 14:33:58 GMT\r\netag: 0x8DC8BB5DCB75D85\r\nx-ms-request-id: 37d570db-101e-003f-5c64-aa9a80000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20260302T164612Z-16b4f8f7c98glh86hC1FRAszv80000000d2000000000epz8\r\nx-fd-int-roxy-purgeid: 0\r\nx-cache: TCP_MISS\r\naccept-ranges: bytes\r\nage: 4382\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10410,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"77cf8503430df76420029604944e0932","sha1":"28e4f2d256e186132678b5bae0488c15df3693fe","sha256":"451d1a600e6373ea195ad13bd5ce0840966b4648f4c1ac4c9e48e4ed7d08ef27","sha512":"511ecebe957bbfa7c60399d528db9a0b70311ed38ef4d10157d9ab89a82a32419121ddf7a99237a2ce1b0c1ebaab2fac871985bc96c94880857c0c2ab9292f75","ssdeep":"192:iUmUm0WvcKfZ7VfC6NktubQFaP44bJquhGc5f+yTRE54pczZu2NY2xi/:iZZNvcKfZZlNjbQFaPF1qSffpRZpcMaw","tlshash":"4b225cb3d375128bda304b7416ba0765203e5ddd94beb089c2d53d2807bc7ed74b49a2","first_seen":"2025-02-12T15:40:38.007628Z","last_seen":"2026-07-03T14:02:00.163202Z","times_seen":7,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":82,"dns":29,"connect":1,"send":0,"wait":61,"receive":1,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"resources.cryptocompare.com/news/50/59370359.jpeg","fqdn":"resources.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:04.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 12:36:03 GMT","end":"Sun, 24 May 2026 13:35:55 GMT"},"fingerprint":{"sha1":"FD:66:48:50:CD:A6:40:95:0E:9E:61:EB:74:35:DA:08:64:12:6C:3B","sha256":"D1:66:CC:CC:EE:59:3E:89:A8:89:77:B3:09:BB:49:2A:EE:4C:9A:41:70:24:C4:33:C1:16:07:BB:FE:B2:DF:70"}}},"request":{"raw":"GET /news/50/59370359.jpeg HTTP/1.1\r\nHost: resources.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19324\r\ncf-ray: 9de556ea2b03783d-OSL\r\nlast-modified: Wed, 18 Mar 2026 15:03:51 GMT\r\netag: 0x8DE84FF9108B66A\r\nx-ms-request-id: 0e9f6c03-601e-000a-08e8-b6f694000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20260318T150440Z-r15b46b979d7vrtshC1WAWzfmc0000001s60000000002228\r\nx-fd-int-roxy-purgeid: 52414258\r\nx-cache-info: L2_T2\r\nx-cache: TCP_REMOTE_HIT\r\naccept-ranges: bytes\r\nage: 2184\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}],"data":{"size":19324,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 300x300, components 3","md5":"ac9fa5b9aac2888402e9edeadeca0e9b","sha1":"0d6d5ec7524c563456d840e2874be6f7079ef633","sha256":"6b68ec1a5e6eac182237b8b3d9ed71a491a5d25bc2397b645b2bad5da39120cf","sha512":"c7bf557ec53e3d01705148d7845e24b206675a06e04e9e0e752fc3dad1de2e6e0432e1bfad8376a817eddd49d4486fb28efffbee5b398ed41e224448fe98fe3e","ssdeep":"384:a4+OFUoDRkT2Emz674C8T9AxHE1sYVbIk4sODD7kjD94jFz72/uLC5:a4++3y6Emz674C8Za0nVb54sSD7iD94I","tlshash":"0592d06a309675867f2cfc379e69253306e50235a5523a4f305ed52bc598590be1f183","first_seen":"2026-03-18T15:41:37.441326Z","last_seen":"2026-03-18T15:41:37.441326Z","times_seen":1,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":79,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptocompare.com/media/43977160/avax.png","fqdn":"www.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:05.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 12:36:03 GMT","end":"Sun, 24 May 2026 13:35:55 GMT"},"fingerprint":{"sha1":"FD:66:48:50:CD:A6:40:95:0E:9E:61:EB:74:35:DA:08:64:12:6C:3B","sha256":"D1:66:CC:CC:EE:59:3E:89:A8:89:77:B3:09:BB:49:2A:EE:4C:9A:41:70:24:C4:33:C1:16:07:BB:FE:B2:DF:70"}}},"request":{"raw":"GET /media/43977160/avax.png HTTP/1.1\r\nHost: www.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 10604\r\ncf-ray: 9de556ee089d783d-OSL\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 18 Mar 2027 15:41:05 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncryptocompare-vm: 2\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: frame-ancestors 'self'\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Sun, 08 Mar 2026 09:12:20 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10604,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"c0d5fe5388a561e0aa02e86ef7c8532e","sha1":"887c6b1921d18d6280baaaabf3a216215492f8e9","sha256":"75b97255b7c91499cfab91b5fe1d31ccc680ec2cc34163236b224cc1d9c81849","sha512":"7b58a6cc379a7dc6aecc465d09e3c3a098ada31d91fa438bc9aeb01269548250c8cbddfe4b5a14b9353c6b256fe1d406705d1780a4f71eb930623d45ae53c586","ssdeep":"192:pO13lvJu2VC4Kj5gw1dq74opR+yeZzrr2o2YPwaJsYsrfilX4C5f5:I1/u2fKj2wfYpRyZr2o2iwBrilZ","tlshash":"7822bea04574c748c8cb84f4a2a32fd378532d9257fea623c4bfb3ac0497ee51766441","first_seen":"2023-12-11T11:19:07Z","last_seen":"2026-07-26T12:47:21.158559Z","times_seen":147,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"popbasedplasma.xyz/assets/img/dapp_logo.png","fqdn":"popbasedplasma.xyz","domain":"popbasedplasma.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:03.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"popbasedplasma.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 10:42:10 GMT","end":"Sat, 13 Jun 2026 10:42:09 GMT"},"fingerprint":{"sha1":"11:E3:02:7F:35:B9:07:60:4C:C3:84:E3:B6:A3:0A:22:FA:D7:6D:AB","sha256":"99:20:1F:A8:73:B1:AD:8D:91:AB:5F:7D:4C:30:4C:AF:2F:FE:26:98:81:7E:B5:00:7D:24:AF:FD:83:A4:C1:D7"}}},"request":{"raw":"GET /assets/img/dapp_logo.png HTTP/1.1\r\nHost: popbasedplasma.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 1719\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 15 Mar 2026 10:57:33 GMT\r\netag: W/\"6b7-19cf124e8b3\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RUpYHg4TzgSmRLpdag1XZnCllAFiGEIZN3wmxp9QA6k2LkAn4SP1JKFGFhGsGhPEVRT8el1N0UlZ1%2BZimZ4xYBMIwFocn82JchHUYO2JzVKYeQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de556e1cbf4e0de-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1719,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 178 x 80, 8-bit colormap, non-interlaced","md5":"3967785578b7e133db90cd833cef8012","sha1":"d3a6627547f12adcd08f7d98decb3889afa431e5","sha256":"d8478c2f96688dee42e3b3f064036cad83bd2440f760204f2afab6473ebcbe9f","sha512":"da3663c3adbb30856dedb24ddc0e98dbb44485f9bab67072eb3826d179352a5941a025a2d165d95fe006c7bcb2f6f47dbec1da218ab686ea25c571a83cc7c00e","ssdeep":"","tlshash":"ed31fad347289d159176889d8fd051bdf42b56f45fc0893e78bda89240dbc1ef4b404b","first_seen":"2023-05-08T23:57:51Z","last_seen":"2026-08-07T00:19:51.488377Z","times_seen":75,"resource_available":false,"data":null}},"time_used":481,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":480,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"popbasedplasma.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"popbasedplasma.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"popbasedplasma.xyz/assets/img/cardano.png","fqdn":"popbasedplasma.xyz","domain":"popbasedplasma.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:03.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"popbasedplasma.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 10:42:10 GMT","end":"Sat, 13 Jun 2026 10:42:09 GMT"},"fingerprint":{"sha1":"11:E3:02:7F:35:B9:07:60:4C:C3:84:E3:B6:A3:0A:22:FA:D7:6D:AB","sha256":"99:20:1F:A8:73:B1:AD:8D:91:AB:5F:7D:4C:30:4C:AF:2F:FE:26:98:81:7E:B5:00:7D:24:AF:FD:83:A4:C1:D7"}}},"request":{"raw":"GET /assets/img/cardano.png HTTP/1.1\r\nHost: popbasedplasma.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 91295\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 15 Mar 2026 10:57:33 GMT\r\netag: W/\"1649f-19cf124e8a5\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uS4YMFsVOhuyXNVivOlspgDdfreORiCtEAvwbBCOzaTeboZEvG3CBK0P0zDEQsAKjjmaXExMT6wk%2BlHyhivV%2BoOxiDv9a6TRE2mc04vJhrRzDw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de556e1cc1ce0de-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":91295,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"540aa59d91a4787dfd0e4d6fd6611948","sha1":"5a061f71ea9d5e6d75d7ea8ede158429dc6989e2","sha256":"6fc4ef25984bb160f798548364667ec38afa7d13e8ab19837cafca94085b79f8","sha512":"7245aea5b3783b3d133ff1e14f934f504bd760a9965f1cbae8bca3c46192d062adbceba625996e442865a070c79193df3baf9da1ef8bad2dc005716ee4b90796","ssdeep":"1536:NfUUUUUUUU76kTV88mbpnorSOqDHtditBv/JMUEm26d/aDIJnL9I3oYVuIyANBkE:NdmLOS8JMUEmzdCInhIXASBkNgd9fVrL","tlshash":"b393e0eb1816dae6c4a040bcd9b7abc633745a7dc248cedf4379b4719dc698c38169c8","first_seen":"2023-11-11T03:35:51Z","last_seen":"2026-08-10T19:13:12.479825Z","times_seen":382,"resource_available":false,"data":null}},"time_used":578,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":520,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"popbasedplasma.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"popbasedplasma.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"popbasedplasma.xyz/assets/img/google-store.png","fqdn":"popbasedplasma.xyz","domain":"popbasedplasma.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:03.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"popbasedplasma.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 10:42:10 GMT","end":"Sat, 13 Jun 2026 10:42:09 GMT"},"fingerprint":{"sha1":"11:E3:02:7F:35:B9:07:60:4C:C3:84:E3:B6:A3:0A:22:FA:D7:6D:AB","sha256":"99:20:1F:A8:73:B1:AD:8D:91:AB:5F:7D:4C:30:4C:AF:2F:FE:26:98:81:7E:B5:00:7D:24:AF:FD:83:A4:C1:D7"}}},"request":{"raw":"GET /assets/img/google-store.png HTTP/1.1\r\nHost: popbasedplasma.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 2771\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 15 Mar 2026 10:57:33 GMT\r\netag: W/\"ad3-19cf124e8c1\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iM%2BHHBFiPesV3BDqT%2FW0OZwEpTV7kJrTo2lOpfG2TDDgfG%2FqDLP0ixurT7bHKZk8wMZR42pbncr8xwSWG7OSiIetY%2BDlvDXu6bZ%2F%2B3cQOQCRDw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de556e1cc28e0de-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2771,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 166 x 50, 8-bit gray+alpha, non-interlaced","md5":"e3d58c8d9d532d760f23bad99f89bec5","sha1":"93e8d68c9b547f04737498b01daca94b292f5821","sha256":"d9aff27689833df1ef6764e3e1e4fee8bec4f3b2f74b4ceb9d732f6b3fb00bd0","sha512":"20e11f577e6f6d4fd7d00f6f3479881514c60ad6f5c6de24e2da15059c6f56fb80b38b449684d3ab25e8d6772eb332a3cae2663ad048422340eecb55496837f5","ssdeep":"","tlshash":"cf514bf0c191ebf9591b41a435f5c7e5e4f04c8beed407273c87c881ac24aee4126268","first_seen":"2023-11-11T03:35:51Z","last_seen":"2026-08-07T00:19:51.483508Z","times_seen":93,"resource_available":false,"data":null}},"time_used":518,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":518,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"popbasedplasma.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"popbasedplasma.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"popbasedplasma.xyz/assets/img/dex-image.png","fqdn":"popbasedplasma.xyz","domain":"popbasedplasma.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:04.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"popbasedplasma.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 10:42:10 GMT","end":"Sat, 13 Jun 2026 10:42:09 GMT"},"fingerprint":{"sha1":"11:E3:02:7F:35:B9:07:60:4C:C3:84:E3:B6:A3:0A:22:FA:D7:6D:AB","sha256":"99:20:1F:A8:73:B1:AD:8D:91:AB:5F:7D:4C:30:4C:AF:2F:FE:26:98:81:7E:B5:00:7D:24:AF:FD:83:A4:C1:D7"}}},"request":{"raw":"GET /assets/img/dex-image.png HTTP/1.1\r\nHost: popbasedplasma.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/assets/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 161464\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 15 Mar 2026 10:57:33 GMT\r\netag: W/\"276b8-19cf124e8b9\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=chOc5xIO2uJejc4rlPFuf8zz9m9CZv%2FXdToWmD%2B5mrjD0FGUEgBJ1yBilyOZYq52Eb0sdQKQApJ0BNJuhjyH003APteCtpnY5Cl1kotkD95NwQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de556e6a950e0de-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":161464,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1800 x 500, 8-bit/color RGBA, non-interlaced","md5":"4a04664e73e4d0234e10f2940aab043e","sha1":"77bbf540debeb9b6465aeb9f03b6e869da1e3782","sha256":"8586debfa205f040adbb412a51db89c761128fd766947a6baed7aa6ebbfa02d2","sha512":"1f8c2ea0b47d44f92b9eb0cf84581a809dfbe828fc590dba8e08ecb52562c4f47eecf9bea6ea954997b59137be60b1ea42aa12ecaf63e67e6ae35b56f9e08acb","ssdeep":"3072:G/yDRyGmbkc5UYLSQpu3pGMLi508h+aYD259jWsEL37zv42SzNFDmqO0dfH7Fkao:GqDjKkcCYk3nih+b251Wr3vP05HpkhL","tlshash":"48f3020d209bfc6cccdf1176c9a44d898e363079fdb72070b9732e5ed20a9d1656a32a","first_seen":"2024-01-21T17:25:31Z","last_seen":"2026-08-07T00:19:51.478078Z","times_seen":96,"resource_available":false,"data":null}},"time_used":444,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":171,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"popbasedplasma.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"popbasedplasma.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptocompare.com/media/37746862/etc.png","fqdn":"www.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:05.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 12:36:03 GMT","end":"Sun, 24 May 2026 13:35:55 GMT"},"fingerprint":{"sha1":"FD:66:48:50:CD:A6:40:95:0E:9E:61:EB:74:35:DA:08:64:12:6C:3B","sha256":"D1:66:CC:CC:EE:59:3E:89:A8:89:77:B3:09:BB:49:2A:EE:4C:9A:41:70:24:C4:33:C1:16:07:BB:FE:B2:DF:70"}}},"request":{"raw":"GET /media/37746862/etc.png HTTP/1.1\r\nHost: www.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 10088\r\ncf-ray: 9de556ee18c6783d-OSL\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 18 Mar 2027 15:41:05 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncryptocompare-vm: 1\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: frame-ancestors 'self'\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Thu, 26 Feb 2026 18:19:24 GMT\r\nage: 1718501\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10088,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"867f71bfa04c77bf1fc2a804b7fe4889","sha1":"2f152d2a756fe66d0f7829c56afcd14c50ce8061","sha256":"efa637740292cf19fcb569f72be8173c95e89a6b400d61820f0bcabc4e561714","sha512":"783d3780e1d4b633e1f39ebce9589c65939d167a71b0c9ff3a129ea044dde5302cb4681c1efa06a535fac519a63ec5527495ef21a235c54c7cc51a3a030f7253","ssdeep":"192:SeKtL9xOQyW3s5Lc2OzZttlwSOu+tfmp96FirHOHfxzJ+S/uU0F:O9Qgc5Lp43wSOu+Ro9buHfT+Wuv","tlshash":"7f22ae83a3949d66d28d697ad5fe70f1fe4ccc3342fab2249746de530a01d52a10e503","first_seen":"2023-12-11T11:19:07Z","last_seen":"2026-07-26T12:47:21.182685Z","times_seen":166,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"popbasedplasma.xyz/format-3.26.2.min.js","fqdn":"popbasedplasma.xyz","domain":"popbasedplasma.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:03.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"popbasedplasma.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 10:42:10 GMT","end":"Sat, 13 Jun 2026 10:42:09 GMT"},"fingerprint":{"sha1":"11:E3:02:7F:35:B9:07:60:4C:C3:84:E3:B6:A3:0A:22:FA:D7:6D:AB","sha256":"99:20:1F:A8:73:B1:AD:8D:91:AB:5F:7D:4C:30:4C:AF:2F:FE:26:98:81:7E:B5:00:7D:24:AF:FD:83:A4:C1:D7"}}},"request":{"raw":"GET /format-3.26.2.min.js HTTP/1.1\r\nHost: popbasedplasma.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:04 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 15 Mar 2026 10:57:33 GMT\r\netag: W/\"107fe-19cf124e919\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cFasIqZs2G6KEGiQf%2FA6Hxbmsr%2FCbIZcG45osvrdutupBtUI%2FjLmi4IEMRaHXi6kQ%2Bt%2BnxoZMGZeHFIq1ZvpOX62nyrDkei4gH5s4U8NlE3GIQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de556e1cbf1e0de-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":67582,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"552fb5bbcd2421905f7a1fdfc65258a0","sha1":"24528d2a025ffcd19e56450fac77380f424aa3a5","sha256":"770c924de13342e51c46ff590e41d5d61f4c5571136070322472f773e9579909","sha512":"3357e0b8a679af79251b20217b4ecfd5239cf067aa1a66cfae59021c55a835dec14eb37a579a928c62ae8d55fa4b33779ce418a58a3903f0270640ea44a5d615","ssdeep":"768:TOroAcuavhfZEGF3kaJCwbR5VMJq4y80xEwwucVewpcRWhD8GR7gkc63irce:PvhhEG3lRDdrv5wD4K2","tlshash":"e563fbd6581bc9d08e1121dde833e625e4a41d67cd6ef273aa2cded0784df26848327b","first_seen":"2026-03-18T15:41:37.449245Z","last_seen":"2026-03-18T15:41:37.449245Z","times_seen":1,"resource_available":true,"data":null}},"time_used":558,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":544,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"popbasedplasma.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"popbasedplasma.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"popbasedplasma.xyz/assets/img/binance.png","fqdn":"popbasedplasma.xyz","domain":"popbasedplasma.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:03.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"popbasedplasma.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 10:42:10 GMT","end":"Sat, 13 Jun 2026 10:42:09 GMT"},"fingerprint":{"sha1":"11:E3:02:7F:35:B9:07:60:4C:C3:84:E3:B6:A3:0A:22:FA:D7:6D:AB","sha256":"99:20:1F:A8:73:B1:AD:8D:91:AB:5F:7D:4C:30:4C:AF:2F:FE:26:98:81:7E:B5:00:7D:24:AF:FD:83:A4:C1:D7"}}},"request":{"raw":"GET /assets/img/binance.png HTTP/1.1\r\nHost: popbasedplasma.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 9663\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 15 Mar 2026 10:57:33 GMT\r\netag: W/\"25bf-19cf124e89e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sdn2I4f%2FZkUenzTGe8D67tFFKrV6kb7JQNICwqD2jE6alt6ZUvamgFQ9c12lMn1tbtOqGWIEfv0DNemKxKg9OktrCE8DAw%2BWu3rEzSzI1KY7fQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de556e1cbfce0de-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9663,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 1200, 8-bit colormap, non-interlaced","md5":"7396f243a3f2e2a171da54d5782ccdb6","sha1":"4b205626ceed582438af7971daa124d190cacf1c","sha256":"e776de7893a31cd6cd30be7fdd7c4cd496a16b8b2577ec085fdc570389a1ec0e","sha512":"055e091a9e3118e3c7240a75b2e3527b0d261e4c44d0199cede329be00ac54fcfaf316de4c4127e16d37276bb4ec2cac499e257e591560dc3f57277410061fbc","ssdeep":"192:pLehn3Vop2g/iiiYuRkIBl4bE6NdLtTurKtAO8AJefzkuJD7uuWA:8x3BguBl4bRTurKtAO8AJozkuJDf","tlshash":"0c12f98cf9d9ddb62d6393dd5a9720d1c3384b32b4e239d4d08ae8ee8059194dfd6c11","first_seen":"2023-11-11T03:35:51Z","last_seen":"2026-08-07T00:19:51.494624Z","times_seen":127,"resource_available":false,"data":null}},"time_used":527,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":525,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"popbasedplasma.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"popbasedplasma.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptocompare.com/media/37746251/btc.png","fqdn":"www.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:04.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 12:36:03 GMT","end":"Sun, 24 May 2026 13:35:55 GMT"},"fingerprint":{"sha1":"FD:66:48:50:CD:A6:40:95:0E:9E:61:EB:74:35:DA:08:64:12:6C:3B","sha256":"D1:66:CC:CC:EE:59:3E:89:A8:89:77:B3:09:BB:49:2A:EE:4C:9A:41:70:24:C4:33:C1:16:07:BB:FE:B2:DF:70"}}},"request":{"raw":"GET /media/37746251/btc.png HTTP/1.1\r\nHost: www.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 9329\r\ncf-ray: 9de556e9f981783d-OSL\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 18 Mar 2027 15:41:05 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncryptocompare-vm: 2\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: frame-ancestors 'self'\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Thu, 05 Mar 2026 02:20:06 GMT\r\nage: 1171258\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9329,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"d9e617f4a04973a8402905873124cfbf","sha1":"b030baf0723b635768048f8fc121590fd6537ed8","sha256":"a14be715d6061ea8d5e6d8ce48a7ee8a9e05c4ec0982366caebb739835bbd296","sha512":"061ac864fa21e1470dc38efb0610645f8c614d96d0516177b249c5da9be443888da0f821ceae0648feb75009c90f6010ae51935c8d652d7c0328b74aa217018f","ssdeep":"192:Tdg67F8knJIkW+k2ma9u+Ufo0NieceTixWMGJ+7S+u3E:prNnJTW+kxa9SoajceTFPou+x","tlshash":"8612a009f3c27e92446ccf8a35dea16198336369eac195855c8da8806d723ffcda1cd7","first_seen":"2023-08-22T22:03:47Z","last_seen":"2026-07-26T12:47:21.131781Z","times_seen":329,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":62,"dns":21,"connect":1,"send":0,"wait":68,"receive":2,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"popbasedplasma.xyz/","fqdn":"popbasedplasma.xyz","domain":"popbasedplasma.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-18T15:41:03.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"popbasedplasma.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 10:42:10 GMT","end":"Sat, 13 Jun 2026 10:42:09 GMT"},"fingerprint":{"sha1":"11:E3:02:7F:35:B9:07:60:4C:C3:84:E3:B6:A3:0A:22:FA:D7:6D:AB","sha256":"99:20:1F:A8:73:B1:AD:8D:91:AB:5F:7D:4C:30:4C:AF:2F:FE:26:98:81:7E:B5:00:7D:24:AF:FD:83:A4:C1:D7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: popbasedplasma.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:03 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 15 Mar 2026 10:57:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zx7ZQ81OIcoqgdB0XDdZR%2FA7IlnujIx3qy3yXMVgQ1S8U%2Fy0%2FSrr9F8gOyksVoMiiKDO%2BmaSrkd1W2dZNKpNydeDQD1MZGUJBewm8Qtu%2Foulbw%3D%3D\"}]}\r\nage: 271001\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9de556e048d7dbb0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38356,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (380)","md5":"b570979b859068a26cb123c5b9846683","sha1":"eebf0d982ebadead3c25dbac8da3a91457a6e659","sha256":"2798eb7951fa2d9ddc480fb8e51905e99e8fd935a65e98ffbb301a5d551cfee7","sha512":"abe6004953f11f963fdf6ed3f599b189807f6b337b3e6ae20ce352e4badeef19572a3c9e086663396b9a1b395c7dc6fb540b59beb35078f7b1bd5285c69b1153","ssdeep":"192:U9OHzFR+oVDQDoL8m04OUArnk/xMAZd1yB7e/HzB+987C4f6SrTybmxxNgDackOI:UwzOJDoL8n4OUAtkKWBPYoCli","tlshash":"4603ab6810f21abb0293c5f12a614b866ee5d687ceafd64973ec0bd01fd3d82cd5b518","first_seen":"2026-03-18T15:41:37.45235Z","last_seen":"2026-03-18T15:41:37.45235Z","times_seen":1,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":55,"dns":23,"connect":9,"send":0,"wait":20,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"popbasedplasma.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"popbasedplasma.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"popbasedplasma.xyz/assets/js/custom.js","fqdn":"popbasedplasma.xyz","domain":"popbasedplasma.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:03.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"popbasedplasma.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 10:42:10 GMT","end":"Sat, 13 Jun 2026 10:42:09 GMT"},"fingerprint":{"sha1":"11:E3:02:7F:35:B9:07:60:4C:C3:84:E3:B6:A3:0A:22:FA:D7:6D:AB","sha256":"99:20:1F:A8:73:B1:AD:8D:91:AB:5F:7D:4C:30:4C:AF:2F:FE:26:98:81:7E:B5:00:7D:24:AF:FD:83:A4:C1:D7"}}},"request":{"raw":"GET /assets/js/custom.js HTTP/1.1\r\nHost: popbasedplasma.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:04 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 15 Mar 2026 10:57:33 GMT\r\netag: W/\"1f1-19cf124e8ec\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cKUQspN30vbFrQssGPFmtL8GBYEazTEyTwWRJINeBIjvzBG2udJDJIy5ihamKGuEuuD4XK%2FK5kzsFdL1vXYGx4%2Bw3%2Fgi5A16Kot4yIhSjvz0IQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de556e1dc49e0de-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":497,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"80b53a130a2f1bf9f72260276cf50082","sha1":"7922ea94dae585fa9755feac6602bc31786e8496","sha256":"e2219273275ac1c45924fbdad512a77e3a600c6b229531e480eb42b44d732699","sha512":"4f6ef93de7e25d2356f7aa10e544d7519bc6e52b5962d00f5da1581cd5c14d4d29e05c1967a63edfb0fc5e3cb0138a59b9352a8e979cf9fa8400eb10a4abb849","ssdeep":"","tlshash":"9cf0e29cb853595a993a73fc5757b088f631549380651005b84c4ea8fbf0929836bd74","first_seen":"2025-08-11T22:43:24.770317Z","last_seen":"2026-03-18T15:41:37.453339Z","times_seen":6,"resource_available":true,"data":null}},"time_used":432,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":432,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"popbasedplasma.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"popbasedplasma.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"popbasedplasma.xyz/assets/js/custom.js","fqdn":"popbasedplasma.xyz","domain":"popbasedplasma.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:04.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"popbasedplasma.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 10:42:10 GMT","end":"Sat, 13 Jun 2026 10:42:09 GMT"},"fingerprint":{"sha1":"11:E3:02:7F:35:B9:07:60:4C:C3:84:E3:B6:A3:0A:22:FA:D7:6D:AB","sha256":"99:20:1F:A8:73:B1:AD:8D:91:AB:5F:7D:4C:30:4C:AF:2F:FE:26:98:81:7E:B5:00:7D:24:AF:FD:83:A4:C1:D7"}}},"request":{"raw":"GET /assets/js/custom.js HTTP/1.1\r\nHost: popbasedplasma.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:04 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 15 Mar 2026 10:57:33 GMT\r\netag: W/\"1f1-19cf124e8ec\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=env6OiK6bSbm%2F4KG1ec1zEbqlChq2bhyQ%2FrN5GToRsAyBsRtetH201%2B46BPH5mOf8K7EebW9qdX%2BJmVbaFETD1SBoa%2FNcmpECS3vEAwL%2BwzknA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de556e75ba6e0de-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":497,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"80b53a130a2f1bf9f72260276cf50082","sha1":"7922ea94dae585fa9755feac6602bc31786e8496","sha256":"e2219273275ac1c45924fbdad512a77e3a600c6b229531e480eb42b44d732699","sha512":"4f6ef93de7e25d2356f7aa10e544d7519bc6e52b5962d00f5da1581cd5c14d4d29e05c1967a63edfb0fc5e3cb0138a59b9352a8e979cf9fa8400eb10a4abb849","ssdeep":"","tlshash":"9cf0e29cb853595a993a73fc5757b088f631549380651005b84c4ea8fbf0929836bd74","first_seen":"2025-08-11T22:43:24.770317Z","last_seen":"2026-03-18T15:41:37.453339Z","times_seen":6,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"popbasedplasma.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"popbasedplasma.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"resources.cryptocompare.com/news/14/59370859.jpeg","fqdn":"resources.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:04.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 12:36:03 GMT","end":"Sun, 24 May 2026 13:35:55 GMT"},"fingerprint":{"sha1":"FD:66:48:50:CD:A6:40:95:0E:9E:61:EB:74:35:DA:08:64:12:6C:3B","sha256":"D1:66:CC:CC:EE:59:3E:89:A8:89:77:B3:09:BB:49:2A:EE:4C:9A:41:70:24:C4:33:C1:16:07:BB:FE:B2:DF:70"}}},"request":{"raw":"GET /news/14/59370859.jpeg HTTP/1.1\r\nHost: resources.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23540\r\ncf-ray: 9de556ea1a67783d-OSL\r\nlast-modified: Wed, 18 Mar 2026 15:16:44 GMT\r\netag: 0x8DE85015DA1EDBF\r\nx-ms-request-id: 49a49158-701e-005b-05ea-b66b18000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20260318T151726Z-r15b46b979dtpbdzhC1WAWd6700000000c4000000000buzk\r\nx-fd-int-roxy-purgeid: 52414258\r\nx-cache-info: L2_T2\r\nx-cache: TCP_REMOTE_HIT\r\naccept-ranges: bytes\r\nage: 1418\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}],"data":{"size":23540,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 300x300, components 3","md5":"635eb517327733562e501e9e377be11e","sha1":"7d51a7f9399aae2a7a426bea28beaccde53ab759","sha256":"375c3390eab5865ca2d8875a2d430b98f10c5cfcd3bfd0e6f06dad5144af7d32","sha512":"20c85527c29e24f1bfae40204e4b2fa0a8d5f5a7e0c177c806b58407493cf682cfa42988495c0d37c5d5580cd633a981364ee5f4d6a595a9a99e66645513f5ff","ssdeep":"384:6S8NGL6LWpROCCr59gadVdkN6vGMRoV10810HASNS6FrdgyxJm8Fj27jKj7SxvYO:6BWHAy1N8RoVKj/+AJr2vcSxv9","tlshash":"5bb2f13eb20ce83d80ecedbdcaad16906446885237714e91b88c9d8732be15439d79ec","first_seen":"2026-03-18T15:41:37.454441Z","last_seen":"2026-03-18T15:41:37.454441Z","times_seen":1,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":50,"dns":0,"connect":0,"send":0,"wait":89,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"resources.cryptocompare.com/news/5/59370781.jpeg","fqdn":"resources.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:04.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 12:36:03 GMT","end":"Sun, 24 May 2026 13:35:55 GMT"},"fingerprint":{"sha1":"FD:66:48:50:CD:A6:40:95:0E:9E:61:EB:74:35:DA:08:64:12:6C:3B","sha256":"D1:66:CC:CC:EE:59:3E:89:A8:89:77:B3:09:BB:49:2A:EE:4C:9A:41:70:24:C4:33:C1:16:07:BB:FE:B2:DF:70"}}},"request":{"raw":"GET /news/5/59370781.jpeg HTTP/1.1\r\nHost: resources.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15335\r\ncf-ray: 9de556ea1a8e783d-OSL\r\nlast-modified: Wed, 18 Mar 2026 15:14:49 GMT\r\netag: 0x8DE850118C807FA\r\nx-ms-request-id: 9d614834-701e-004b-6bea-b6ae70000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20260318T151516Z-16b4f8f7c98kvxvxhC1FRApqvg00000022dg00000000vsqp\r\nx-fd-int-roxy-purgeid: 52414258\r\nx-cache: TCP_MISS\r\naccept-ranges: bytes\r\nage: 1548\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}],"data":{"size":15335,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 300x300, components 3","md5":"dc8a544e1c152bc5bb8e85f4c5da4cde","sha1":"c6e579d88bfb85bbef534e3e2e91da5fd855f203","sha256":"b823d5d39dcf06d500acc11dae44fe5e40647abc460493ab4baadd350ea595e7","sha512":"9d87ff289931ce55b12429b109d0c6ff57d6b263f6e335565b9334830ba185fea232acfe575d8725c8b6a40b6f8b96eafc9f98f8231e82b2a51e6f13f9a0cc82","ssdeep":"384:SQJl6pljMDPNfwMCHNlTfjTd6r3KJszaRjPA6VRi1f:RJl6pl61ojPeh+9VVwx","tlshash":"6d62d05bfd84282a8e56aabc69ec15500dddccc9c2ff463c02c21494796931517dec8f","first_seen":"2026-03-18T15:41:37.455386Z","last_seen":"2026-03-18T15:41:37.455386Z","times_seen":1,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.cryptocompare.com/news/default/ambcrypto.png","fqdn":"images.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:04.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 12:36:03 GMT","end":"Sun, 24 May 2026 13:35:55 GMT"},"fingerprint":{"sha1":"FD:66:48:50:CD:A6:40:95:0E:9E:61:EB:74:35:DA:08:64:12:6C:3B","sha256":"D1:66:CC:CC:EE:59:3E:89:A8:89:77:B3:09:BB:49:2A:EE:4C:9A:41:70:24:C4:33:C1:16:07:BB:FE:B2:DF:70"}}},"request":{"raw":"GET /news/default/ambcrypto.png HTTP/1.1\r\nHost: images.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 43126\r\ncf-ray: 9de556ea4b97783d-OSL\r\nlast-modified: Wed, 02 Jan 2019 16:53:30 GMT\r\netag: 0x8D670D2D34C6DD3\r\nvary: Origin, Accept-Encoding\r\nx-ms-request-id: f755d01f-601e-0019-3083-abeece000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\nx-azure-ref: 20260304T113520Z-r15c679d9d5r6bf5hC1FRAzbbn0000000cd000000000upya\r\nx-fd-int-roxy-purgeid: 0\r\nx-cache-info: L1_T2\r\nx-cache: TCP_HIT\r\naccept-ranges: bytes\r\nage: 1360\r\nexpires: Wed, 18 Mar 2026 16:41:05 GMT\r\ncache-control: public, max-age=3600\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43126,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGB, non-interlaced","md5":"ee5d669605681da5cb0519b185f886e6","sha1":"7843bb899fa4cc53399e0539f374f5601e4b6d86","sha256":"c36a2ce050209d96db5aec2fe34e44c2a8ad6c763dfc2c8fb4a6dae21afce43d","sha512":"5bff725b1d8d8cdead40b445780ab7f7abcaeb269874af137a67cee1bfb20810b05f6fa3cc3d20c9fe5197da03f9dc315f576d63bb48a9405272547087a74416","ssdeep":"768:hLgN5p9g0OM9WfxCWELpYn0jEWE1SdInXE8nH2ZW2iJjR7Jf1ylOf2d:hLzM+xCh4WHMpn72uN71oOud","tlshash":"d913f11554a7102bfff0df675c9daca8b274bd32b24f2889a5c14611b2de36b6106e18","first_seen":"2023-11-20T14:04:37Z","last_seen":"2026-07-26T12:47:21.218452Z","times_seen":154,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":41,"connect":4,"send":0,"wait":75,"receive":32,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptocompare.com/media/37746879/trx.png","fqdn":"www.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:05.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 12:36:03 GMT","end":"Sun, 24 May 2026 13:35:55 GMT"},"fingerprint":{"sha1":"FD:66:48:50:CD:A6:40:95:0E:9E:61:EB:74:35:DA:08:64:12:6C:3B","sha256":"D1:66:CC:CC:EE:59:3E:89:A8:89:77:B3:09:BB:49:2A:EE:4C:9A:41:70:24:C4:33:C1:16:07:BB:FE:B2:DF:70"}}},"request":{"raw":"GET /media/37746879/trx.png HTTP/1.1\r\nHost: www.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 10160\r\ncf-ray: 9de556ee0877783d-OSL\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 18 Mar 2027 15:41:05 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncryptocompare-vm: 2\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: frame-ancestors 'self'\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Thu, 19 Feb 2026 15:57:39 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10160,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"924f43fef87cd295307f44cd7b35d99b","sha1":"1d425b9961f9316dc17c321b6321e86fb864f95d","sha256":"b92a3824e11af2f7d9db97adb77714d745d99affa1bf7c42be7f36105e664063","sha512":"a3fd6355cde3f22eb01471485bc3efa352ff785006dd811b851d31c97654fb5ad0909f59f76b9f7f75a004c56bd652f7bcf3cfa31036128a8b792c911cb96c15","ssdeep":"192:cRtWrvttrMYK80mFU+WW66L7dwIjempDZxVg1hOg/h:DrvtVn0meRW/xDFZvgHOKh","tlshash":"d422bf35c771ed098c629af1e95f4f9787bb31471ec00723ca7ba15e2eade445268342","first_seen":"2023-12-11T11:19:07Z","last_seen":"2026-07-26T12:47:21.1678Z","times_seen":155,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptocompare.com/media/37746885/uni.png","fqdn":"www.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:05.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 12:36:03 GMT","end":"Sun, 24 May 2026 13:35:55 GMT"},"fingerprint":{"sha1":"FD:66:48:50:CD:A6:40:95:0E:9E:61:EB:74:35:DA:08:64:12:6C:3B","sha256":"D1:66:CC:CC:EE:59:3E:89:A8:89:77:B3:09:BB:49:2A:EE:4C:9A:41:70:24:C4:33:C1:16:07:BB:FE:B2:DF:70"}}},"request":{"raw":"GET /media/37746885/uni.png HTTP/1.1\r\nHost: www.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 7967\r\ncf-ray: 9de556ee089a783d-OSL\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 18 Mar 2027 15:41:05 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncryptocompare-vm: 1\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: frame-ancestors 'self'\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Tue, 24 Feb 2026 17:15:46 GMT\r\nage: 1895118\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7967,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit colormap, non-interlaced","md5":"8c3acd6dcb67b38f16c35e0e96e930ab","sha1":"30ea10353ad5ddc2526674f41e2f6e4162c93ceb","sha256":"e8142bed28f4c3e8a3ec1ad7aed31dfaaee0fab5c68512c3f38952a3c10fc94f","sha512":"571a9ed4c01240c162eee332b66492a3e0105d1d27c0800791376c4fbe875b9eeb3583db795ada12617bb1775c3996c23f42c123a6757f47733b504dff3f9442","ssdeep":"192:fXA6WJhMn91IExL/tgdHp5ljt4/6mfkQhXZMqls4yX:fXHn9txeBnbS9hpTlsn","tlshash":"9ef18d4250f121a02f90b877f9dec42f6c84dad54de998e1e7ed836c1902cab46956c3","first_seen":"2023-12-11T11:19:07Z","last_seen":"2026-07-26T12:47:21.1558Z","times_seen":168,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"popbasedplasma.xyz/assets/vendor/slick/slick.min.css","fqdn":"popbasedplasma.xyz","domain":"popbasedplasma.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:03.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"popbasedplasma.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 10:42:10 GMT","end":"Sat, 13 Jun 2026 10:42:09 GMT"},"fingerprint":{"sha1":"11:E3:02:7F:35:B9:07:60:4C:C3:84:E3:B6:A3:0A:22:FA:D7:6D:AB","sha256":"99:20:1F:A8:73:B1:AD:8D:91:AB:5F:7D:4C:30:4C:AF:2F:FE:26:98:81:7E:B5:00:7D:24:AF:FD:83:A4:C1:D7"}}},"request":{"raw":"GET /assets/vendor/slick/slick.min.css HTTP/1.1\r\nHost: popbasedplasma.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:03 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 15 Mar 2026 10:57:33 GMT\r\netag: W/\"52f-19cf124e911\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l%2FXUfnBZN0GN5ZMwqtzqrD3pHmL5WnkCOWlJbGWuZeUMGjHEQJkjQsgSX%2Ftjm745kfuOrHi3SJvcwkYDCoEtPdS%2Bn26XwO8jlLNOqDea4Bujug%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de556e1cbe6e0de-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1327,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1327), with no line terminators","md5":"da4e146913da6966d85a6b8686886edb","sha1":"03a28dac9dfc6c33e6175c9c185911c56525d31b","sha256":"fb3ed351cd5c0f1f30f88778ee1f9b056598e6d25ac4fdcab1eebcd8be521cd9","sha512":"ce91402c696e30eb15b619130772f48fafe922170350c7f5637634611e41fb8ef391f9e8ba44d74b04b8230b944faf41d0e92e6cec5b1ded4a92a4125b38d94f","ssdeep":"","tlshash":"b2218a591496115a4027e3125ed3da9a38ebf1121c3607cef7408309ce8fbae1dd29e7","first_seen":"2023-04-08T11:01:14Z","last_seen":"2026-08-12T05:59:37.719952Z","times_seen":3992,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"popbasedplasma.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"popbasedplasma.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"popbasedplasma.xyz/assets/img/app-store.png","fqdn":"popbasedplasma.xyz","domain":"popbasedplasma.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:03.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"popbasedplasma.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 10:42:10 GMT","end":"Sat, 13 Jun 2026 10:42:09 GMT"},"fingerprint":{"sha1":"11:E3:02:7F:35:B9:07:60:4C:C3:84:E3:B6:A3:0A:22:FA:D7:6D:AB","sha256":"99:20:1F:A8:73:B1:AD:8D:91:AB:5F:7D:4C:30:4C:AF:2F:FE:26:98:81:7E:B5:00:7D:24:AF:FD:83:A4:C1:D7"}}},"request":{"raw":"GET /assets/img/app-store.png HTTP/1.1\r\nHost: popbasedplasma.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 2773\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 15 Mar 2026 10:57:33 GMT\r\netag: W/\"ad5-19cf124e895\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ltso6O9thXrSAEpSAKrHofSfI57pxG1RaRpQpr6cXf%2FrYEYe%2BhpfAUnb4Mwqxc%2Fe%2FIotSO04ZPVrq0%2BqZjBId%2BiHbZaGBtYgrPwt35D2kNAiZA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de556e1cc20e0de-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2773,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 50, 8-bit gray+alpha, non-interlaced","md5":"1992cb9c92db81c9d9cedc678d48b863","sha1":"058f1eeff217f7e1927cafd25a35b34fed51212a","sha256":"62fbc1cfd863ae735a77e128bed06b79429ef31a31817513704e05ab0fccbd45","sha512":"b65ae415c5a37b4d2e0838e172a8a4c59785a9a13cba98f59b45621bf414b28e321c82100fc12eb3f2b83bc5458e5c896eb4395cca11236b3697834e8f219fd2","ssdeep":"","tlshash":"4d513bf1b6184104c0038314eef8b2ccbea525eb4525a945e6accabccb7e6865748747","first_seen":"2023-11-11T03:35:51Z","last_seen":"2026-08-07T00:19:51.482906Z","times_seen":93,"resource_available":false,"data":null}},"time_used":520,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":520,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"popbasedplasma.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"popbasedplasma.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"popbasedplasma.xyz/assets/vendor/bootstrap/js/bootstrap.bundle.min.js","fqdn":"popbasedplasma.xyz","domain":"popbasedplasma.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:03.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"popbasedplasma.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 10:42:10 GMT","end":"Sat, 13 Jun 2026 10:42:09 GMT"},"fingerprint":{"sha1":"11:E3:02:7F:35:B9:07:60:4C:C3:84:E3:B6:A3:0A:22:FA:D7:6D:AB","sha256":"99:20:1F:A8:73:B1:AD:8D:91:AB:5F:7D:4C:30:4C:AF:2F:FE:26:98:81:7E:B5:00:7D:24:AF:FD:83:A4:C1:D7"}}},"request":{"raw":"GET /assets/vendor/bootstrap/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: popbasedplasma.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:04 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 15 Mar 2026 10:57:33 GMT\r\netag: W/\"13131-19cf124e8f9\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jcCM5fJhzcFDjIAvlOlXBbCGbv8B4q%2FDMJjRx9PBjcS3XlzXPyef79kX6V2flAeYXXW6a%2FMQE7LF%2ByoL1%2BhcLrkcac1ZwekI6V7toxdrfqxDEQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de556e1cc35e0de-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78129,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"7ccd9d390d31af98110f74f842ea9b32","sha1":"a85e681624c91a106a514c31eacf80de817b2cc3","sha256":"f5210fa3e7f0245a4c51eb7f280092c0ef99fdd28c45e17dab8cc5854fdf4fd3","sha512":"a5ac783258178c710f7c2c1c24b4218a063bf8df2bb7a6d5bd62c5c9432ec5286fd7bd17e774d1cc63e63e4666181864fa38a447c581338ca5ec0f563071eabe","ssdeep":"1536:pppbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZY:T36WJr9ixi","tlshash":"a873c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","first_seen":"2023-03-07T01:06:26Z","last_seen":"2026-08-12T05:32:21.172529Z","times_seen":18937,"resource_available":true,"data":null}},"time_used":576,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":554,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"popbasedplasma.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"popbasedplasma.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"popbasedplasma.xyz/css2.html","fqdn":"popbasedplasma.xyz","domain":"popbasedplasma.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:04.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"popbasedplasma.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 10:42:10 GMT","end":"Sat, 13 Jun 2026 10:42:09 GMT"},"fingerprint":{"sha1":"11:E3:02:7F:35:B9:07:60:4C:C3:84:E3:B6:A3:0A:22:FA:D7:6D:AB","sha256":"99:20:1F:A8:73:B1:AD:8D:91:AB:5F:7D:4C:30:4C:AF:2F:FE:26:98:81:7E:B5:00:7D:24:AF:FD:83:A4:C1:D7"}}},"request":{"raw":"GET /css2.html HTTP/1.1\r\nHost: popbasedplasma.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 15 Mar 2026 10:57:33 GMT\r\netag: W/\"4e0-19cf124e917\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oZ4pctGqpA%2BBfqEPHApEPKcCswZCXVwr%2FENBPHn6OBFtJTOOdJ7ZY%2FQl6ZV%2B2eAZ4pkzJwWMgeCuzTYDCafLWJacvXQhI5yx3aYMLpwBQwDgow%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9de556e51d59e0de-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T05:57:32.675234Z","times_seen":17850164,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"popbasedplasma.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"popbasedplasma.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"resources.cryptocompare.com/news/43/59370935.jpeg","fqdn":"resources.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:04.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 12:36:03 GMT","end":"Sun, 24 May 2026 13:35:55 GMT"},"fingerprint":{"sha1":"FD:66:48:50:CD:A6:40:95:0E:9E:61:EB:74:35:DA:08:64:12:6C:3B","sha256":"D1:66:CC:CC:EE:59:3E:89:A8:89:77:B3:09:BB:49:2A:EE:4C:9A:41:70:24:C4:33:C1:16:07:BB:FE:B2:DF:70"}}},"request":{"raw":"GET /news/43/59370935.jpeg HTTP/1.1\r\nHost: resources.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13752\r\ncf-ray: 9de556ea1a78783d-OSL\r\nlast-modified: Wed, 18 Mar 2026 15:17:34 GMT\r\netag: 0x8DE85017B438449\r\nx-ms-request-id: 04c6b4ff-d01e-0020-0bea-b62984000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20260318T151742Z-r154b8655698dnkhhC1CPHuges0000000yx0000000000qt1\r\nx-fd-int-roxy-purgeid: 52414258\r\nx-cache: TCP_MISS\r\naccept-ranges: bytes\r\nage: 1402\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]}],"data":{"size":13752,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 300x300, components 3","md5":"2582a45397185f3eb7fa46ddf71adcf8","sha1":"fba3b73a45d170d899a8a655e994068de58fff57","sha256":"26d71d2dc85758fb75aa76a26fc32e2c0bd90f7c6d0fd768c6c5cbe7c126a9ca","sha512":"c01b1ca9258e6c11254002c11997ed1481ccc157ddd79dba6b6cae68c6d735e0090079fb1065f29fcac69b8f6b88f5633499552fde46f45b51b4776f6f42aed9","ssdeep":"192:o4lyVeeydsLFKQzhK7bGPs+bWt4glYUZCi/3Ex3iX2lkHBpkQ8bXtw1pZoe:JQrQ0K6KP4bWqguAjEQ2lkHBJ8bXgZR","tlshash":"0952b0763919fc6a44a2a0f462b49377a1416b80cb0dad3d16fa1a185124633e5d375b","first_seen":"2026-03-18T15:41:37.460899Z","last_seen":"2026-03-18T15:41:37.460899Z","times_seen":1,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":49,"dns":0,"connect":0,"send":0,"wait":142,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"resources.cryptocompare.com/news/14/59369991.jpeg","fqdn":"resources.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:04.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 12:36:03 GMT","end":"Sun, 24 May 2026 13:35:55 GMT"},"fingerprint":{"sha1":"FD:66:48:50:CD:A6:40:95:0E:9E:61:EB:74:35:DA:08:64:12:6C:3B","sha256":"D1:66:CC:CC:EE:59:3E:89:A8:89:77:B3:09:BB:49:2A:EE:4C:9A:41:70:24:C4:33:C1:16:07:BB:FE:B2:DF:70"}}},"request":{"raw":"GET /news/14/59369991.jpeg HTTP/1.1\r\nHost: resources.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11544\r\ncf-ray: 9de556ea2b1e783d-OSL\r\nlast-modified: Wed, 18 Mar 2026 14:54:58 GMT\r\netag: 0x8DE84FE52FC30EE\r\nx-ms-request-id: 25cc1d69-801e-002d-3ee7-b6e150000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20260318T145541Z-r15b46b979d8rtjlhC1WAWe1q40000001usg000000000xp8\r\nx-fd-int-roxy-purgeid: 52414258\r\nx-cache: TCP_MISS\r\naccept-ranges: bytes\r\nage: 2723\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11544,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 300x300, components 3","md5":"b89f7ff398c425e19547aa2d0b6fa260","sha1":"e0d6d3b948c2d79f78579a5edb9ef8a1a13aa164","sha256":"5377412beb6d46dd670981eae88c4ccdbcf56b2119ff042b213716ac69ccc669","sha512":"ca259d7ec1c9f98992751f940fb0eac7b4fa74ec7bb460a050479178b22d1ec1e81e3876572960663d7fc931511cf0771d1ab977aeff8321372f18a3bab1638c","ssdeep":"192:bvZijp/kXjaY4n/E+Tqqg2l4LelK184aGm1vokACabr9KtO5WNDdcBrJADHpBEXX:bBYpkef8+TqqglWKe1vUCawsikyDUo6p","tlshash":"b632d05e3d3209b5e327fa3418d06170cb304744ccd706dcfb656c95999a6e6c02bc8d","first_seen":"2026-03-18T15:41:37.461835Z","last_seen":"2026-03-18T15:41:37.461835Z","times_seen":1,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":40,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptocompare.com/media/37746243/ltc.png","fqdn":"www.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:05.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 12:36:03 GMT","end":"Sun, 24 May 2026 13:35:55 GMT"},"fingerprint":{"sha1":"FD:66:48:50:CD:A6:40:95:0E:9E:61:EB:74:35:DA:08:64:12:6C:3B","sha256":"D1:66:CC:CC:EE:59:3E:89:A8:89:77:B3:09:BB:49:2A:EE:4C:9A:41:70:24:C4:33:C1:16:07:BB:FE:B2:DF:70"}}},"request":{"raw":"GET /media/37746243/ltc.png HTTP/1.1\r\nHost: www.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 8357\r\ncf-ray: 9de556ee087b783d-OSL\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 18 Mar 2027 15:41:05 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncryptocompare-vm: 1\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: frame-ancestors 'self'\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Fri, 27 Feb 2026 07:23:07 GMT\r\nage: 1671478\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8357,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"5eb19ef7c9d7e4ee2a06908a2fc09bcc","sha1":"b754b7e393e568fef49b77275267c3380f08317f","sha256":"b25b455e4c9ef1f50afbaf4dea7b0059635ae8c2a2a7f1eff6b701b146c322e4","sha512":"ba7234467cf13654f63a9f3c9702f64857009576cb15732b7c75d62f4173b216f37e1b4e81d1b164dd4b6acce1173b24e1dcad81152669aba41d7c47d66f5a1c","ssdeep":"192:Tdg67F8kntIGErVSHlPgKBgdMkW3f5wA8rK2C9lin8xmeuvF:prNntBEroHtSdMkWP5wAqkDAvF","tlshash":"a9028d09f7d059900e38fa8a6ce1e1a21b7b079e56d3d5446844940ecb315fdca8fadb","first_seen":"2023-11-24T00:26:26Z","last_seen":"2026-07-26T12:47:21.16215Z","times_seen":223,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptocompare.com/media/37746883/xmr.png","fqdn":"www.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:05.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 12:36:03 GMT","end":"Sun, 24 May 2026 13:35:55 GMT"},"fingerprint":{"sha1":"FD:66:48:50:CD:A6:40:95:0E:9E:61:EB:74:35:DA:08:64:12:6C:3B","sha256":"D1:66:CC:CC:EE:59:3E:89:A8:89:77:B3:09:BB:49:2A:EE:4C:9A:41:70:24:C4:33:C1:16:07:BB:FE:B2:DF:70"}}},"request":{"raw":"GET /media/37746883/xmr.png HTTP/1.1\r\nHost: www.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 7947\r\ncf-ray: 9de556ee18b4783d-OSL\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 18 Mar 2027 15:41:05 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncryptocompare-vm: 1\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: frame-ancestors 'self'\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Tue, 10 Mar 2026 01:39:56 GMT\r\nage: 741669\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7947,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"5e973c139ff5dbe001eb40f16b288f8c","sha1":"5f8818c4840ab9faadc5bc07aad4c907fb04f7af","sha256":"98e4f9c6620ac8e66f3b17628ae003cfe3cf3baffb8ddde49cbba18b6ced4d5e","sha512":"7806750241a4fdc39330803665d0fe68de9406b97f388acacd399515a490d1ce6543606b2e05a2e3399544e5bd178ca3ebd046f3123d79410efebb6df585a4c6","ssdeep":"96:vz2FqtZ8+0ipPw21tGKrLduhT94wpsvfhlULoPImYpajn5Z4KtUIiBSWzqH0x9o5:xO+0+Pw2Lldu194OWfhlULqHwIgSWzw","tlshash":"b5f1bfd6d68f32d6c6096776c677408949e0a8734785af3bc4a3971c00593970639623","first_seen":"2023-11-29T08:52:58Z","last_seen":"2026-07-26T12:47:21.156428Z","times_seen":200,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"popbasedplasma.xyz/assets/img/polygon.png","fqdn":"popbasedplasma.xyz","domain":"popbasedplasma.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:03.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"popbasedplasma.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 10:42:10 GMT","end":"Sat, 13 Jun 2026 10:42:09 GMT"},"fingerprint":{"sha1":"11:E3:02:7F:35:B9:07:60:4C:C3:84:E3:B6:A3:0A:22:FA:D7:6D:AB","sha256":"99:20:1F:A8:73:B1:AD:8D:91:AB:5F:7D:4C:30:4C:AF:2F:FE:26:98:81:7E:B5:00:7D:24:AF:FD:83:A4:C1:D7"}}},"request":{"raw":"GET /assets/img/polygon.png HTTP/1.1\r\nHost: popbasedplasma.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 12856\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 15 Mar 2026 10:57:33 GMT\r\netag: W/\"3238-19cf124e8c3\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N2s6rFVGJMMCMQHNQL3qoNujvHIvBI6YvDTilVmXdY%2Bb1icj141%2BX3pYdkSH9iPFL83JZfEkborVPuEl4TSTfUPlOXDh4nGYDCDDlop3Xuxgeg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de556e1cc01e0de-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12856,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 264, 8-bit/color RGBA, non-interlaced","md5":"f84cc483cab9c1a320bdbc3bcda2ee97","sha1":"526be8b67a701fa70e3d0f33c2153c82663dee20","sha256":"32a6f90eb22703f8f4efadaf1fa4e8e5fbaf5f11667afe41c5790bb0198f2ca8","sha512":"754441ab130ed5cb4ded930a2e4b0f05076417b51962fae473fa35c7ac514b6ad3882f361408bf6790a8473eacba9e35a32a3fb87f48734d0bc66be89e2e79cc","ssdeep":"384:LWjlCiROUCEdO9oFexyFIRUVzx6ENEOIdcYssZYMy:LWoSBCEdMUex9RUVVXNOcpx","tlshash":"cd42bfc8f2648d94ca2113f7dfd15855c0c9214e2e3493a9ce7f68c4a3323b5261fc52","first_seen":"2023-11-11T03:35:51Z","last_seen":"2026-08-07T00:19:51.497048Z","times_seen":128,"resource_available":false,"data":null}},"time_used":515,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":514,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"popbasedplasma.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"popbasedplasma.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"popbasedplasma.xyz/assets/vendor/slick/slick.min.js","fqdn":"popbasedplasma.xyz","domain":"popbasedplasma.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:03.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"popbasedplasma.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 10:42:10 GMT","end":"Sat, 13 Jun 2026 10:42:09 GMT"},"fingerprint":{"sha1":"11:E3:02:7F:35:B9:07:60:4C:C3:84:E3:B6:A3:0A:22:FA:D7:6D:AB","sha256":"99:20:1F:A8:73:B1:AD:8D:91:AB:5F:7D:4C:30:4C:AF:2F:FE:26:98:81:7E:B5:00:7D:24:AF:FD:83:A4:C1:D7"}}},"request":{"raw":"GET /assets/vendor/slick/slick.min.js HTTP/1.1\r\nHost: popbasedplasma.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:04 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 15 Mar 2026 10:57:33 GMT\r\netag: W/\"a76f-19cf124e913\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pPup6ORueVzKVwsEBGwXq5H%2FVxxgNpJUe%2FxFT4Gl09x86EyRRe1HE5QB6doAeskyRf79KArve8M22fRHOdqcktZOz5J1kl83Q%2BGFF3mFaemM7g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de556e1dc3ce0de-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":42863,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (42862)","md5":"d5a61c749e44e47159af8a6579dda121","sha1":"3b41b3bc956685015a347a2238e71db29dfa0dbb","sha256":"0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740","sha512":"5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH","tlshash":"e513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-08-12T05:57:22.045755Z","times_seen":111055,"resource_available":true,"data":null}},"time_used":539,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":539,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"popbasedplasma.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"popbasedplasma.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"popbasedplasma.xyz/assets/vendor/qrcodejs/qrcode.min.js","fqdn":"popbasedplasma.xyz","domain":"popbasedplasma.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:03.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"popbasedplasma.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 10:42:10 GMT","end":"Sat, 13 Jun 2026 10:42:09 GMT"},"fingerprint":{"sha1":"11:E3:02:7F:35:B9:07:60:4C:C3:84:E3:B6:A3:0A:22:FA:D7:6D:AB","sha256":"99:20:1F:A8:73:B1:AD:8D:91:AB:5F:7D:4C:30:4C:AF:2F:FE:26:98:81:7E:B5:00:7D:24:AF:FD:83:A4:C1:D7"}}},"request":{"raw":"GET /assets/vendor/qrcodejs/qrcode.min.js HTTP/1.1\r\nHost: popbasedplasma.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:04 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 15 Mar 2026 10:57:33 GMT\r\netag: W/\"4dd7-19cf124e906\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fp0LOEL6jW7YuadNh8vdTYctof6arXJHLfj8j01kuXGCrSIuPUeoOY5lh5xu841Y%2B1eQlz1Guu%2Fv0ihRD28gjwQ1tQCteb3U2XKAtYMjtmJ8LA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de556e1dc44e0de-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":19927,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (19927), with no line terminators","md5":"517b55d3688ce9ef1085a3d9632bcb97","sha1":"2d06c1f823f34c19981c6ae0b0eb0f5861c5e14b","sha256":"c541ef06327885a8415bca8df6071e14189b4855336def4f36db54bde8484f36","sha512":"08d80845e706a3b9e985b799d3849cd7791ad3ba5aa9d793bb4591d4833890d7299810144874905f416c94d8530da74be0ee520066a91ade05a1da8bf0ccb498","ssdeep":"384:WRQ2kvcAAdTRhQLThP2yO9/9G84U5xOiKQYHHHsglDep9m1yfB8dKLMyA+LyUyy9:xThP2V/9N4U/gQYPXa8CAPLyrZ","tlshash":"8c92c7e4f36542f6915e6cd4283f104b64a0a4636c1490acbfb5c1e6a9f8fe0647af74","first_seen":"2023-03-07T01:14:56Z","last_seen":"2026-08-12T05:52:01.53043Z","times_seen":66304,"resource_available":true,"data":null}},"time_used":523,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":523,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"popbasedplasma.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"popbasedplasma.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"resources.cryptocompare.com/news/64/59371682.jpeg","fqdn":"resources.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:04.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 12:36:03 GMT","end":"Sun, 24 May 2026 13:35:55 GMT"},"fingerprint":{"sha1":"FD:66:48:50:CD:A6:40:95:0E:9E:61:EB:74:35:DA:08:64:12:6C:3B","sha256":"D1:66:CC:CC:EE:59:3E:89:A8:89:77:B3:09:BB:49:2A:EE:4C:9A:41:70:24:C4:33:C1:16:07:BB:FE:B2:DF:70"}}},"request":{"raw":"GET /news/64/59371682.jpeg HTTP/1.1\r\nHost: resources.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16437\r\ncf-ray: 9de556ea3b4c783d-OSL\r\nlast-modified: Wed, 18 Mar 2026 15:36:37 GMT\r\netag: 0x8DE850424F36B90\r\nx-ms-request-id: 1358d52a-d01e-006d-6ded-b6e668000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20260318T153642Z-r15c679d9d55gch6hC1FRAg7rw00000026dg00000000nfhs\r\nx-fd-int-roxy-purgeid: 52414258\r\nx-cache: TCP_MISS\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}],"data":{"size":16437,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 300x300, components 3","md5":"7139d7f35afb90ab0b53c11f97338752","sha1":"b688939674cf7b2139723d926060b01b105652fd","sha256":"2e6532480b6637def02b0f095c39983234c4622b28b45e972783b05da693ef72","sha512":"572a85aabc143bc2e5a95516e5d02d8e03890ab859b5b23d81780a543ce3874ab7e3c484725a805b02a8858840665f221c0356ce13f1a0c68b8ecb96d3b363f4","ssdeep":"384:P1omHRZ7/q2YArvuG3Gi/decpbXbRuIq7:P17xZ7SujuaechXsIW","tlshash":"6472d08bfc822040a209f5790f67d3ce16c242cd893b7fcf9984686c5b276b66b712c4","first_seen":"2026-03-18T15:41:37.46606Z","last_seen":"2026-03-18T15:41:37.46606Z","times_seen":1,"resource_available":false,"data":null}},"time_used":393,"timings":{"blocked":88,"dns":29,"connect":1,"send":0,"wait":185,"receive":1,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"resources.cryptocompare.com/news/27/59370964.jpeg","fqdn":"resources.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:04.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 12:36:03 GMT","end":"Sun, 24 May 2026 13:35:55 GMT"},"fingerprint":{"sha1":"FD:66:48:50:CD:A6:40:95:0E:9E:61:EB:74:35:DA:08:64:12:6C:3B","sha256":"D1:66:CC:CC:EE:59:3E:89:A8:89:77:B3:09:BB:49:2A:EE:4C:9A:41:70:24:C4:33:C1:16:07:BB:FE:B2:DF:70"}}},"request":{"raw":"GET /news/27/59370964.jpeg HTTP/1.1\r\nHost: resources.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8882\r\ncf-ray: 9de556ea1a96783d-OSL\r\nlast-modified: Wed, 18 Mar 2026 15:19:02 GMT\r\netag: 0x8DE8501B01E12B7\r\nx-ms-request-id: 5633bf77-301e-004a-15ea-b6f1ac000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20260318T151913Z-16b4f8f7c98hwm5khC1FRA6atw0000000g3000000000w2e0\r\nx-fd-int-roxy-purgeid: 52414258\r\nx-cache: TCP_MISS\r\naccept-ranges: bytes\r\nage: 1311\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8882,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 300x300, components 3","md5":"850f4e4100bfbbfec364be0625203ea6","sha1":"3becbf7846c003ecb31747f0c17d85d8e3fe4bd4","sha256":"6bd50a4a828b4556af321538e83dfa812bed8c62a15716dffcf9127fa609c230","sha512":"352c2b6ec1258868b2f584a21182449b8fcc273aae30c5eb8e0bb00b34e0b6acaab944e95c5f4cea0b56116eb590a7aa48c9636d73633e8a8d2dde1786e937c3","ssdeep":"192:QTzodVDE57IknYi/OUnmzd/oGJpMZFhMzfS9K5bDq6uZiiiiAKeI:QTzovg+kYj+uMzhl9KxBuZiiiiAKR","tlshash":"e9029d68743c752b7971dd31d631c372228fe15b066da7af3c091269a404829b9bf4fb","first_seen":"2026-03-18T15:41:37.466899Z","last_seen":"2026-03-18T15:41:37.466899Z","times_seen":1,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"resources.cryptocompare.com/news/107/default.png","fqdn":"resources.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:04.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 12:36:03 GMT","end":"Sun, 24 May 2026 13:35:55 GMT"},"fingerprint":{"sha1":"FD:66:48:50:CD:A6:40:95:0E:9E:61:EB:74:35:DA:08:64:12:6C:3B","sha256":"D1:66:CC:CC:EE:59:3E:89:A8:89:77:B3:09:BB:49:2A:EE:4C:9A:41:70:24:C4:33:C1:16:07:BB:FE:B2:DF:70"}}},"request":{"raw":"GET /news/107/default.png HTTP/1.1\r\nHost: resources.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 43439\r\ncf-ray: 9de556ea1aa1783d-OSL\r\nlast-modified: Mon, 11 Aug 2025 10:31:00 GMT\r\netag: 0x8DDD8C22A654FBC\r\nx-ms-request-id: f7869057-801e-0060-5a6d-552ebc000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20251115T134421Z-r15666bdb78t86tchC1WAWd71s00000011w000000000ehez\r\nx-fd-int-roxy-purgeid: 52414258\r\nx-cache-info: L2_T2\r\nx-cache: TCP_REMOTE_HIT\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43439,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"71ae717beaf1e819992e63e5f84ff387","sha1":"14d6eb2731462d7da57daa6eaa15d6821315a867","sha256":"68682e8714f30af424877a537c39e827167080d7273cd376411aeb43dca0365e","sha512":"3d017be999640eff5ce9b24ec0c73e1c74f10138b97b403d9e0c5b1239940c6b55f0b095092545c120b319d4c70ce2aa190cae9e85ae61c6664e6ee05dfc4743","ssdeep":"768:vEQz4krmfrjKKjhiN2aqjFIQGlVKsswzazozPuU+/3MRSgpuP+NgYWpMAnB:z4kragvQmV5e8P83yLkPxpMAB","tlshash":"5913e01b87a4e897c4b9ee270a59eb3cd0722fa2423f4810c2557ef87d11add0383a71","first_seen":"2025-08-14T16:23:20.56697Z","last_seen":"2026-07-03T14:02:00.220767Z","times_seen":47,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":43,"dns":0,"connect":0,"send":0,"wait":106,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptocompare.com/media/37746238/eth.png","fqdn":"www.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:05.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 12:36:03 GMT","end":"Sun, 24 May 2026 13:35:55 GMT"},"fingerprint":{"sha1":"FD:66:48:50:CD:A6:40:95:0E:9E:61:EB:74:35:DA:08:64:12:6C:3B","sha256":"D1:66:CC:CC:EE:59:3E:89:A8:89:77:B3:09:BB:49:2A:EE:4C:9A:41:70:24:C4:33:C1:16:07:BB:FE:B2:DF:70"}}},"request":{"raw":"GET /media/37746238/eth.png HTTP/1.1\r\nHost: www.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 17554\r\ncf-ray: 9de556edf825783d-OSL\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 18 Mar 2027 15:41:05 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncryptocompare-vm: 2\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: frame-ancestors 'self'\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Thu, 26 Feb 2026 23:42:54 GMT\r\nage: 1699091\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17554,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"5e3528f1e5b29dae5f16200757db8baa","sha1":"4a4e47c015d3f2dfae697a9380b8e57baa0e34f4","sha256":"569b53e929b416f18527067bff520f4370d88d8685cec9e618e9936f6f87a0b0","sha512":"85d0927f7eebf64bad7d24ac79f3c594e13a823f899b7de47c42ba86a180d80cb18e827bd24c9726d6389d4d06e80e7fbff82d152cd8d4d9abe09ec303d99a90","ssdeep":"384:pVYnAG+FCyq+7ebibWP/+vDJc7NI3E5A/od4TdpBO:pVYS7Ii6OvMGE5wY4fBO","tlshash":"5972d060e5928c93990b8f03acbd8393af7b14e37ee151246d5b594a9a44bb1dcfcc60","first_seen":"2023-08-22T22:03:47Z","last_seen":"2026-07-26T12:47:21.20926Z","times_seen":245,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptocompare.com/media/37747610/dai.png","fqdn":"www.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:05.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 12:36:03 GMT","end":"Sun, 24 May 2026 13:35:55 GMT"},"fingerprint":{"sha1":"FD:66:48:50:CD:A6:40:95:0E:9E:61:EB:74:35:DA:08:64:12:6C:3B","sha256":"D1:66:CC:CC:EE:59:3E:89:A8:89:77:B3:09:BB:49:2A:EE:4C:9A:41:70:24:C4:33:C1:16:07:BB:FE:B2:DF:70"}}},"request":{"raw":"GET /media/37747610/dai.png HTTP/1.1\r\nHost: www.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 7359\r\ncf-ray: 9de556ee086f783d-OSL\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 18 Mar 2027 15:41:05 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncryptocompare-vm: 2\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: frame-ancestors 'self'\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Mon, 23 Feb 2026 03:03:58 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7359,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"ab1f321f99e11b01ce9aebf1ea228b14","sha1":"33ff6dc454b49a8be0011193654143795c47aa56","sha256":"8b4017d34c950153c49757a3ebda312d1d674ed831dcb19925633b2cd4860eb1","sha512":"d9fa1782fea91248b33c3fc4d9a2d7ec96a7d1870e63d8f4ee6b51850b8263fabd36bb01c25d6dc7d4804d336eceaefe57c890a54a7f0d77d4bf6c24e30f79ea","ssdeep":"192:r/huWLgaKhjPeMJCx85pLdQKRXQ2YymuxC:Thb0aKdPekCx85kKROyvC","tlshash":"e4e19e65ffc47824cf826efc98c0a8b1bc26882b08a750efd45653a80a31d795e0f4f5","first_seen":"2023-12-11T11:19:07Z","last_seen":"2026-07-26T12:47:21.157053Z","times_seen":148,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"popbasedplasma.xyz/assets/img/solana.png","fqdn":"popbasedplasma.xyz","domain":"popbasedplasma.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:03.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"popbasedplasma.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 10:42:10 GMT","end":"Sat, 13 Jun 2026 10:42:09 GMT"},"fingerprint":{"sha1":"11:E3:02:7F:35:B9:07:60:4C:C3:84:E3:B6:A3:0A:22:FA:D7:6D:AB","sha256":"99:20:1F:A8:73:B1:AD:8D:91:AB:5F:7D:4C:30:4C:AF:2F:FE:26:98:81:7E:B5:00:7D:24:AF:FD:83:A4:C1:D7"}}},"request":{"raw":"GET /assets/img/solana.png HTTP/1.1\r\nHost: popbasedplasma.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 123409\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 15 Mar 2026 10:57:33 GMT\r\netag: W/\"1e211-19cf124e8c7\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G7Wt9q4h95tHxr3MtyWu%2B6rnYOP5J%2BZ5psb0TOtPLbIJMR2ag2eNkhssQH%2FSv5igNJR0uMMW1Oz4%2BDAZjcHMc8gtZ%2B2q%2BfAsO7X3szBGglo3tw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de556e1cc12e0de-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":123409,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"0d8e9a185773da474955639b5fc82808","sha1":"20a83c3b86f3fc904f26dcc59419205bdb0a2975","sha256":"e5721ef7bd05455ed2f842ea2f66fd7715b56cea319d819187907838300618ac","sha512":"3660589a5ef0ab74175ed985f79555b264ff68cf5d2bd8f737525630d59387d37b871d9ed7a92de2250b80ea53b08169f333f1b453303ccfce377ef738291b3e","ssdeep":"3072:1E6pISxxAj7GlIoJPxH6o6CMRHqemhgpeKw96T7u5XOAZ:1E6WSxxS7GlIoJPxafHtkEJw","tlshash":"6bc32945d3a6ca85de18caff2e269dca0105b377f0d88ee8344cb1f4b178d5349866d2","first_seen":"2023-05-09T04:14:29Z","last_seen":"2026-08-10T19:13:12.476488Z","times_seen":663,"resource_available":false,"data":null}},"time_used":592,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":522,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"popbasedplasma.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"popbasedplasma.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"resources.cryptocompare.com/news/64/59369917.jpeg","fqdn":"resources.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:04.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 12:36:03 GMT","end":"Sun, 24 May 2026 13:35:55 GMT"},"fingerprint":{"sha1":"FD:66:48:50:CD:A6:40:95:0E:9E:61:EB:74:35:DA:08:64:12:6C:3B","sha256":"D1:66:CC:CC:EE:59:3E:89:A8:89:77:B3:09:BB:49:2A:EE:4C:9A:41:70:24:C4:33:C1:16:07:BB:FE:B2:DF:70"}}},"request":{"raw":"GET /news/64/59369917.jpeg HTTP/1.1\r\nHost: resources.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15164\r\ncf-ray: 9de556ea3b38783d-OSL\r\nlast-modified: Wed, 18 Mar 2026 14:52:53 GMT\r\netag: 0x8DE84FE08771CA8\r\nx-ms-request-id: 44785d18-901e-0021-4ee7-b67658000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20260318T145340Z-16b4f8f7c98k25xhhC1FRAx1h40000000m2000000000g5u6\r\nx-fd-int-roxy-purgeid: 52414258\r\nx-cache: TCP_MISS\r\naccept-ranges: bytes\r\nage: 2844\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15164,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 300x300, components 3","md5":"5137254a215283f9eda4328c8f9bfd61","sha1":"11916a15a071729d7c80d8f8cb3255302e4659d9","sha256":"0752ce1afc1f12e703984212a7a2aebafbbaf09bc1e6574f498c64ce3afe29ca","sha512":"5df0204a7620de862048b1ce161ffb248b37c9afdaa25417f0e1d7bf8e67a736df16da91f89d823d0e4ef71e67c960ab74e5d7b46b08ab7bd7bd3cdd05182061","ssdeep":"384:3osq4jXrJ0z2r09Ze7LnBvrcVCMKZe724B7dur0Bgh5KGa:3+IrO6r09w7LBz7e7NJdqKGQGa","tlshash":"2f62cf60a3af7229c553c3bc900d1723db271905e83ca5bf585faf22af446d2785946b","first_seen":"2026-03-18T15:41:37.471262Z","last_seen":"2026-03-18T15:41:37.471262Z","times_seen":1,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":38,"dns":0,"connect":0,"send":0,"wait":74,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptocompare.com/media/37747199/shib.png","fqdn":"www.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:05.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 12:36:03 GMT","end":"Sun, 24 May 2026 13:35:55 GMT"},"fingerprint":{"sha1":"FD:66:48:50:CD:A6:40:95:0E:9E:61:EB:74:35:DA:08:64:12:6C:3B","sha256":"D1:66:CC:CC:EE:59:3E:89:A8:89:77:B3:09:BB:49:2A:EE:4C:9A:41:70:24:C4:33:C1:16:07:BB:FE:B2:DF:70"}}},"request":{"raw":"GET /media/37747199/shib.png HTTP/1.1\r\nHost: www.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 16914\r\ncf-ray: 9de556ee0880783d-OSL\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 18 Mar 2027 15:41:05 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncryptocompare-vm: 1\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: frame-ancestors 'self'\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Thu, 05 Mar 2026 04:35:00 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16914,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"3b91d85513052b04839e817f3a91cd1c","sha1":"b9f95f1d0a3603148472900824982954408dcd84","sha256":"a62ec4b4ec99386ac537d412f4b58b53131553b61c8f07716efe93c268a7439c","sha512":"8894c1d23d5815405034bc117f544bb89c8eaf7b57adb478ba5e05d11b9e51db7b7e41b0d4e28d90b63e10c8f44b0903cc8bdde104d8718a90b94d6c255addf3","ssdeep":"384:aRt1zG1pV3q1Q71p7GatxIl41oJ4PeImEoY:UiV3qAjPxIeCJCebVY","tlshash":"0372c09cecc70701a2e526bd72d9a9fe4336d5418b736cdeb4c98187e605b971e81e80","first_seen":"2023-12-11T11:19:07Z","last_seen":"2026-07-26T12:47:21.196005Z","times_seen":147,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"resources.cryptocompare.com/news/64/59370867.jpeg","fqdn":"resources.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:04.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 12:36:03 GMT","end":"Sun, 24 May 2026 13:35:55 GMT"},"fingerprint":{"sha1":"FD:66:48:50:CD:A6:40:95:0E:9E:61:EB:74:35:DA:08:64:12:6C:3B","sha256":"D1:66:CC:CC:EE:59:3E:89:A8:89:77:B3:09:BB:49:2A:EE:4C:9A:41:70:24:C4:33:C1:16:07:BB:FE:B2:DF:70"}}},"request":{"raw":"GET /news/64/59370867.jpeg HTTP/1.1\r\nHost: resources.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23606\r\ncf-ray: 9de556ea1a84783d-OSL\r\nlast-modified: Wed, 18 Mar 2026 15:16:48 GMT\r\netag: 0x8DE85015FF76807\r\nx-ms-request-id: a7c0a726-c01e-003c-1cea-b67be4000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20260318T151742Z-r15b46b979d7vrtshC1WAWzfmc0000001s40000000005xfp\r\nx-fd-int-roxy-purgeid: 52414258\r\nx-cache: TCP_MISS\r\naccept-ranges: bytes\r\nage: 1402\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23606,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 300x300, components 3","md5":"85482cae425b101bda26ef08d45c795a","sha1":"ce70177f67a00697bbd73262a5abe6af7ee04716","sha256":"8f1a0dba3f07d15327314875588caae93998ac690c9f59f0caad23836b5dd9d7","sha512":"1fa0c3772a3e0c1de3c51a3f8135f86e13458c97ebbc18f2faecfc938dbb25f35ae66384af6748f70ff906a8d0e04ad983191cb719012a67f413bcb3f303af25","ssdeep":"384:2w3gZ33XEmEhgY15nNGx1MfAoLHLckAspmBTcBVT95Osgrh8WunZ/MtPL7KtH:M33XEmEKY15NGx1sAo7Lj/sBg7JgrS1x","tlshash":"f6b2e1b6f158877ecd61ccb8b46b96f16d05e000d0a5a69e42c0d1278b8d830f7af99f","first_seen":"2026-03-18T15:41:37.474382Z","last_seen":"2026-03-18T15:41:37.474382Z","times_seen":1,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":48,"dns":0,"connect":0,"send":0,"wait":69,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"resources.cryptocompare.com/news/50/59370215.jpeg","fqdn":"resources.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:04.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 12:36:03 GMT","end":"Sun, 24 May 2026 13:35:55 GMT"},"fingerprint":{"sha1":"FD:66:48:50:CD:A6:40:95:0E:9E:61:EB:74:35:DA:08:64:12:6C:3B","sha256":"D1:66:CC:CC:EE:59:3E:89:A8:89:77:B3:09:BB:49:2A:EE:4C:9A:41:70:24:C4:33:C1:16:07:BB:FE:B2:DF:70"}}},"request":{"raw":"GET /news/50/59370215.jpeg HTTP/1.1\r\nHost: resources.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 28996\r\ncf-ray: 9de556ea2b0b783d-OSL\r\nlast-modified: Wed, 18 Mar 2026 14:59:46 GMT\r\netag: 0x8DE84FEFF0F1BF8\r\nx-ms-request-id: 5eca7dfa-101e-0062-80e7-b69004000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20260318T150041Z-16b4f8f7c98v6tx8hC1FRAfmqs00000023pg0000000023z9\r\nx-fd-int-roxy-purgeid: 52414258\r\nx-cache-info: L2_T2\r\nx-cache: TCP_REMOTE_HIT\r\naccept-ranges: bytes\r\nage: 2423\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28996,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 300x300, components 3","md5":"c543f3c0869ce906f51d4bfa28c4638d","sha1":"5316cc4fffddecadc9cc155ae181a70125764999","sha256":"4731d2823c1847e45aeaee21e98fcde7fa2688c8a000d5137831d27d820ac4e8","sha512":"1ff892afd74a4889ae784ce5efbdc4b9b89725fb483c210dcfab8a6033adebbe39ba6aeacda42fa5b2735c0eaca10a3ead599b4408c14fd16616b58b96f6f2c1","ssdeep":"384:SCwshvKmaZAMsxg+s0jCWPOEuDIxVrWzRnUuWmAnLvihGbHZ94yq0yf6Se002gjR:4JZAMmfuDy4zRU1mwLvi4Dc6S62GF","tlshash":"3cd2f1643d8c117be298a13a9112524bfe8000af1f9f56bc760dbb6c0fca7956f17672","first_seen":"2026-03-18T15:41:37.475581Z","last_seen":"2026-03-18T15:41:37.475581Z","times_seen":1,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":41,"dns":0,"connect":0,"send":0,"wait":99,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"resources.cryptocompare.com/news/5/59369989.jpeg","fqdn":"resources.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:04.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 12:36:03 GMT","end":"Sun, 24 May 2026 13:35:55 GMT"},"fingerprint":{"sha1":"FD:66:48:50:CD:A6:40:95:0E:9E:61:EB:74:35:DA:08:64:12:6C:3B","sha256":"D1:66:CC:CC:EE:59:3E:89:A8:89:77:B3:09:BB:49:2A:EE:4C:9A:41:70:24:C4:33:C1:16:07:BB:FE:B2:DF:70"}}},"request":{"raw":"GET /news/5/59369989.jpeg HTTP/1.1\r\nHost: resources.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 28368\r\ncf-ray: 9de556ea2b24783d-OSL\r\nlast-modified: Wed, 18 Mar 2026 14:54:58 GMT\r\netag: 0x8DE84FE53297B98\r\nx-ms-request-id: 4dcbc0b7-201e-000b-7be7-b6a948000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20260318T145514Z-r15c679d9d5rfw5chC1FRAzu440000001a50000000008cu7\r\nx-fd-int-roxy-purgeid: 52414258\r\nx-cache: TCP_MISS\r\naccept-ranges: bytes\r\nage: 2750\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28368,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 300x300, components 3","md5":"762a5e33b38a1d9df264f9f4ea4fda15","sha1":"e8c866b0f031cc81e4d4ae63cbbbdb7dcf9a73a6","sha256":"6120ef57fe7d7a0a464615b83d3030b9c75868cb14f1bd4c90731b68d6e39123","sha512":"71f1cc2389fbd4c38c647f994932fc140d4b11a5138da7689e5ebc2175c657b5c4a743665c331a26f66372b912daea7561ab245f7a8eedee2f0d05cbd2a1aedd","ssdeep":"768:GfBnpGlKSohDmIAea3gM3y9EiJ6NkSwUnpqAwudvTbjGeT:GfJ3Vhcb3Zi0NMcptwud7fGw","tlshash":"7cd2d168b22a1153c0d9f9373dba8a3e3703212259506c191ce9fc9f619f9779913d2b","first_seen":"2026-03-18T15:41:37.476914Z","last_seen":"2026-03-18T15:41:37.476914Z","times_seen":1,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":65,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptocompare.com/media/37746047/matic.png","fqdn":"www.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:05.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 12:36:03 GMT","end":"Sun, 24 May 2026 13:35:55 GMT"},"fingerprint":{"sha1":"FD:66:48:50:CD:A6:40:95:0E:9E:61:EB:74:35:DA:08:64:12:6C:3B","sha256":"D1:66:CC:CC:EE:59:3E:89:A8:89:77:B3:09:BB:49:2A:EE:4C:9A:41:70:24:C4:33:C1:16:07:BB:FE:B2:DF:70"}}},"request":{"raw":"GET /media/37746047/matic.png HTTP/1.1\r\nHost: www.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 5162\r\ncf-ray: 9de556ee0848783d-OSL\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 18 Mar 2027 15:41:05 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncryptocompare-vm: 1\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: frame-ancestors 'self'\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Tue, 17 Mar 2026 23:36:09 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5162,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"84b0523a00887e22b73b4ce09ee8a3eb","sha1":"e26d838e683132951f2f3dcd815302764fa3b4d1","sha256":"09fe2ca7037443f2c6ac6b5f30b9de47cc4f0a0f900cc28a1252c09e8c6a6ad0","sha512":"1d4fd880ecbb20fb9b8922711cc861fbe42d0ecf9b16f6cdb7fb57004b2b70704c300d794516d5650f7cbf95d4057367a8d6b38ee1fc776fd09bfbb5f79077fa","ssdeep":"96:TdgXo7FhknmWpJWncHoIHHZpjPDDMnRYFFEbbm7gah8QptnRTsZhT7:Tdg47FhknlIIrbDbFEv+h8QpVRC7","tlshash":"e7b14d2abdb2fac031cdec8135fc56173b93469811c1f5887ddcd78729212b6b6481ca","first_seen":"2023-12-11T11:19:07Z","last_seen":"2026-07-26T12:47:21.219213Z","times_seen":150,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"popbasedplasma.xyz/assets/img/avalanche.png","fqdn":"popbasedplasma.xyz","domain":"popbasedplasma.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:03.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"popbasedplasma.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 10:42:10 GMT","end":"Sat, 13 Jun 2026 10:42:09 GMT"},"fingerprint":{"sha1":"11:E3:02:7F:35:B9:07:60:4C:C3:84:E3:B6:A3:0A:22:FA:D7:6D:AB","sha256":"99:20:1F:A8:73:B1:AD:8D:91:AB:5F:7D:4C:30:4C:AF:2F:FE:26:98:81:7E:B5:00:7D:24:AF:FD:83:A4:C1:D7"}}},"request":{"raw":"GET /assets/img/avalanche.png HTTP/1.1\r\nHost: popbasedplasma.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 47819\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 15 Mar 2026 10:57:33 GMT\r\netag: W/\"bacb-19cf124e899\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5dYybb4pIU47yeafT%2FzD2%2BmIj8VnxECCZf5kYiCcmwuMnoiJs5A9aXLfgutXJQajWM%2FP0l5ES8nqP90b2TFM7txXRdptfGRfwBLrI5CF0kRFig%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de556e1cc0ae0de-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47819,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1503 x 1504, 8-bit/color RGBA, non-interlaced","md5":"bcfbb16284d0fe74e311ef8e8ac5e22b","sha1":"af82ffac7807c7a1871c1f26591980e54c1402a2","sha256":"ca2d5f17dcdbd41bdf1eab39ab129864d4ca1da0491b577556a644bcba04312e","sha512":"07cc427d55d827d55756a58aaf65d0648063e8922ec60dbeb630ba6d61ca41d7d099ee368fa6c5f91b52774d0e0490055805b9a44865a0ff81075eb345b05c02","ssdeep":"768:BOe6Tb9TW531NpPPWa1ZAVHbfXysSdOcmoZTjSUyL6qoocRMIEVo6VGJipce2UAF:0W5lrW+Z+bKsS4oZ3qzoH+IEC6VGJipM","tlshash":"a423e16431852082fd4b59f3ea6e2e5e93d5332be4b0a2035b75e4b4e9ef29275f1c01","first_seen":"2023-06-11T20:37:55Z","last_seen":"2026-08-07T00:19:51.480023Z","times_seen":239,"resource_available":false,"data":null}},"time_used":521,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":489,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"popbasedplasma.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"popbasedplasma.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"resources.cryptocompare.com/news/93/default.png","fqdn":"resources.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:04.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 12:36:03 GMT","end":"Sun, 24 May 2026 13:35:55 GMT"},"fingerprint":{"sha1":"FD:66:48:50:CD:A6:40:95:0E:9E:61:EB:74:35:DA:08:64:12:6C:3B","sha256":"D1:66:CC:CC:EE:59:3E:89:A8:89:77:B3:09:BB:49:2A:EE:4C:9A:41:70:24:C4:33:C1:16:07:BB:FE:B2:DF:70"}}},"request":{"raw":"GET /news/93/default.png HTTP/1.1\r\nHost: resources.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 23507\r\ncf-ray: 9de556ea3b55783d-OSL\r\nlast-modified: Fri, 01 Mar 2024 09:06:39 GMT\r\netag: 0x8DC39CEE803E1EE\r\nx-ms-request-id: d553161d-a01e-003a-3832-b6485b000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20260318T003808Z-16b4f8f7c982k86whC1FRAy60s00000025ng000000009dmq\r\nx-fd-int-roxy-purgeid: 52414258\r\nx-cache-info: L1_T2\r\nx-cache: TCP_HIT\r\naccept-ranges: bytes\r\nage: 5014\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23507,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"774cf1a178138131d6ebe8dbcdabc3e3","sha1":"7569706d70891579a3372e4c13eff6dcd1565cef","sha256":"6567cb5edf0db31f7a17b2ffc533fabcc8f6dc75c960d40f1a9248d39f4a9488","sha512":"75d0fc7daafe516dcfe59ac5bbbd034fc5e38216d5bb033b9b309a4aed1fcad6a9cd5736b3f5b9a5a903229ce5ca350a7383fb6e6165e3ebe0b5b8a2328d8b93","ssdeep":"384:PmXXM56ae04IOysDB7dctgzJiB0zIBUbjCa6Zii+4tYbJATsj5:eXXpaL4RN76tuJk0v/CBa5","tlshash":"dfb2d0f3236bb94c8977e61fbe24820e73c9430b0673a5103c6576facb15a1e028d53a","first_seen":"2024-06-17T10:17:52Z","last_seen":"2026-06-10T13:33:22.592761Z","times_seen":72,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":28,"connect":1,"send":0,"wait":70,"receive":1,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"popbasedplasma.xyz/assets/vendor/bootstrap/font/bootstrap-icons.css","fqdn":"popbasedplasma.xyz","domain":"popbasedplasma.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:03.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"popbasedplasma.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 10:42:10 GMT","end":"Sat, 13 Jun 2026 10:42:09 GMT"},"fingerprint":{"sha1":"11:E3:02:7F:35:B9:07:60:4C:C3:84:E3:B6:A3:0A:22:FA:D7:6D:AB","sha256":"99:20:1F:A8:73:B1:AD:8D:91:AB:5F:7D:4C:30:4C:AF:2F:FE:26:98:81:7E:B5:00:7D:24:AF:FD:83:A4:C1:D7"}}},"request":{"raw":"GET /assets/vendor/bootstrap/font/bootstrap-icons.css HTTP/1.1\r\nHost: popbasedplasma.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:04 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 15 Mar 2026 10:57:33 GMT\r\netag: W/\"13a38-19cf124e8f2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6sfoNlKHgxCY%2Fd8eP2kCgF8sgZqqxk1%2BXdDG5tfsnf8EH02nEhpXfACoiRQFDYPFaq4pSIEMCqfwtET3toJgA2TnAjY%2Ft2QqMpumBij9l1uypw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de556e1bbe2e0de-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80440,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"ac313b01172a4e7a5b1ffccdfbd35e9d","sha1":"e5b9e95caa66df2be95348bcd22daa2a1a3b4df3","sha256":"72b9a21accee4cb5e28e8cc4ae0d3c5ef6ea0a9f7329ab59b354a34cd9f546e0","sha512":"c4c228ff1bcc38758c764293cf041a7c1135aa25c3b9486c700867abb147a9988bfba30abd79cdaf890afd8b67bfc4bd3bd8706a91241bc2b1635e9c24e3112b","ssdeep":"768:6qnm8OAL1Mzocm4KyH2CuwZwmij34k4RDl8Ibgo:nOocm4FuwZ5ijINRDl8o","tlshash":"7373deba914f05f9d341e4d92743674297aab93ce1813c7ad342399ee3c16188ad73ec","first_seen":"2023-06-15T10:37:12Z","last_seen":"2026-08-07T20:11:51.785151Z","times_seen":113,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":400,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"popbasedplasma.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"popbasedplasma.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"popbasedplasma.xyz/assets/img/ethereum.png","fqdn":"popbasedplasma.xyz","domain":"popbasedplasma.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:03.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"popbasedplasma.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 10:42:10 GMT","end":"Sat, 13 Jun 2026 10:42:09 GMT"},"fingerprint":{"sha1":"11:E3:02:7F:35:B9:07:60:4C:C3:84:E3:B6:A3:0A:22:FA:D7:6D:AB","sha256":"99:20:1F:A8:73:B1:AD:8D:91:AB:5F:7D:4C:30:4C:AF:2F:FE:26:98:81:7E:B5:00:7D:24:AF:FD:83:A4:C1:D7"}}},"request":{"raw":"GET /assets/img/ethereum.png HTTP/1.1\r\nHost: popbasedplasma.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 199459\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 15 Mar 2026 10:57:33 GMT\r\netag: W/\"30b23-19cf124e8bf\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3H4W0e58kUMTFMnq6B%2BJptL5DkisPH%2BWOPaMCnqgYszAzCfE38%2B9g%2FWUZxSzCrjMy%2FJBO2Svl51rVtZ5nYHVK3%2BydP%2F8o%2B02hCPEkPMXByqw6w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de556e1cbf9e0de-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":199459,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2400 x 3909, 8-bit/color RGBA, non-interlaced","md5":"d762ac5ef1f4ca8955b54ee6f991527b","sha1":"96957e2a3ffde1a757876e9c80d6605e5c1de9d8","sha256":"35bc1b1fda886478c84eb103467d0161ff604fe2b72d3f1cd8912b8c792f6214","sha512":"04cc7e5c606aa8f86a833a555944a48475c2559bc026ee713388833908b89d15986caa1c643f106a1150cd506f091430335be7b0789bdaae47811de38774784d","ssdeep":"6144:RbrGmTvXvZ+cFd/S1dNEYRcbI+z3f+BmSP:RbamTvvZ+cFoHRQw","tlshash":"4e14d0b74e7a0dddf9371875842b2faa72ed05ad4160ab6b8775c471fe8b2336483480","first_seen":"2023-11-11T03:35:51Z","last_seen":"2026-08-07T00:19:51.499206Z","times_seen":129,"resource_available":false,"data":null}},"time_used":591,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":504,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"popbasedplasma.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"popbasedplasma.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"resources.cryptocompare.com/news/14/59371337.jpeg","fqdn":"resources.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:04.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 12:36:03 GMT","end":"Sun, 24 May 2026 13:35:55 GMT"},"fingerprint":{"sha1":"FD:66:48:50:CD:A6:40:95:0E:9E:61:EB:74:35:DA:08:64:12:6C:3B","sha256":"D1:66:CC:CC:EE:59:3E:89:A8:89:77:B3:09:BB:49:2A:EE:4C:9A:41:70:24:C4:33:C1:16:07:BB:FE:B2:DF:70"}}},"request":{"raw":"GET /news/14/59371337.jpeg HTTP/1.1\r\nHost: resources.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10370\r\ncf-ray: 9de556ea1a50783d-OSL\r\nlast-modified: Wed, 18 Mar 2026 15:28:45 GMT\r\netag: 0x8DE85030B56BFCB\r\nx-ms-request-id: 350108bb-301e-0017-4eeb-b6fb28000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20260318T152848Z-r15c679d9d5z6zdxhC1FRA8p5n00000027rg000000004s8y\r\nx-fd-int-roxy-purgeid: 52414258\r\nx-cache: TCP_MISS\r\naccept-ranges: bytes\r\nage: 736\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}],"data":{"size":10370,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 300x300, components 3","md5":"ff66bd14d8767d03d468fd644b1450ae","sha1":"0b446e324b02d271f913b2b7c3142e6ba59b8911","sha256":"10cbfe171f60e322eb851f43790475bb82bcbe4713ffc96206df1ebd16763820","sha512":"a26392f71b6c9729f01eb9a4fbb8a7e09bdb8051049bbefd83daa8f87ee797a9ceb2d08adeb3f678a74f37b5c216d677c2f6e958294a658f7c270b6d26514bc3","ssdeep":"192:k0zLs7nFAwLRMj+bnWx1UV8c0hcsVbTw5w84t8YHrFDyu6PtMQamBZE7u5xMC:kUtwLRM6bnC1UV8cpCbiv4t8YHB81raC","tlshash":"4b22ae2a7752e087d11dc9bb8a47a880293f59685d38d1fcfa03109f0b3751893ade43","first_seen":"2026-03-18T15:41:37.482426Z","last_seen":"2026-03-18T15:41:37.482426Z","times_seen":1,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":52,"dns":0,"connect":0,"send":0,"wait":56,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"resources.cryptocompare.com/news/5/59370782.jpeg","fqdn":"resources.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:04.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 12:36:03 GMT","end":"Sun, 24 May 2026 13:35:55 GMT"},"fingerprint":{"sha1":"FD:66:48:50:CD:A6:40:95:0E:9E:61:EB:74:35:DA:08:64:12:6C:3B","sha256":"D1:66:CC:CC:EE:59:3E:89:A8:89:77:B3:09:BB:49:2A:EE:4C:9A:41:70:24:C4:33:C1:16:07:BB:FE:B2:DF:70"}}},"request":{"raw":"GET /news/5/59370782.jpeg HTTP/1.1\r\nHost: resources.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15752\r\ncf-ray: 9de556ea1a8a783d-OSL\r\nlast-modified: Wed, 18 Mar 2026 15:14:50 GMT\r\netag: 0x8DE8501196B81A4\r\nx-ms-request-id: 651af6d3-901e-0031-4bea-b6b330000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20260318T151516Z-r15c679d9d56wspchC1FRAegvn00000005z000000000kx5s\r\nx-fd-int-roxy-purgeid: 52414258\r\nx-cache: TCP_MISS\r\naccept-ranges: bytes\r\nage: 1548\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]}],"data":{"size":15752,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 300x300, components 3","md5":"d5b518d0537e45810ec60c561decac4c","sha1":"950b375e30c525201fbdea4e37b21f65ab963b8c","sha256":"1d5290e7b0b9af41147987f5b0e3ee2c2f37c461b295a74893876f9f8fd82d1c","sha512":"63469f460bb4d9660d4fcaf28fad580dd7339b23c21b1dcf3a9d0ad103182c174dbd222526bcd1b2c184e2c2998c585b80d3c7337662f59b10e4ce37c8915ca9","ssdeep":"384:P8EWZhKATyt5Zf2GShb+6G1ZISmJVX0i18oljFLQ2k0:PihB0tIbMISAp1DlRLQ2k0","tlshash":"c762cf5d3193422ac077e0bd54cae6a11f20b61488e7bc0ec97ed9125c5ebb1a1fe858","first_seen":"2026-03-18T15:41:37.483704Z","last_seen":"2026-03-18T15:41:37.483704Z","times_seen":1,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":47,"dns":0,"connect":0,"send":0,"wait":130,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"resources.cryptocompare.com/news/5/59370684.jpeg","fqdn":"resources.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:04.930Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 12:36:03 GMT","end":"Sun, 24 May 2026 13:35:55 GMT"},"fingerprint":{"sha1":"FD:66:48:50:CD:A6:40:95:0E:9E:61:EB:74:35:DA:08:64:12:6C:3B","sha256":"D1:66:CC:CC:EE:59:3E:89:A8:89:77:B3:09:BB:49:2A:EE:4C:9A:41:70:24:C4:33:C1:16:07:BB:FE:B2:DF:70"}}},"request":{"raw":"GET /news/5/59370684.jpeg HTTP/1.1\r\nHost: resources.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15877\r\ncf-ray: 9de556ea1aac783d-OSL\r\nlast-modified: Wed, 18 Mar 2026 15:12:42 GMT\r\netag: 0x8DE8500CD4D50AD\r\nx-ms-request-id: 04c3a786-d01e-0020-4ce9-b62984000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20260318T151314Z-r1d54678fb8x9p68hC1FRA9ve80000002490000000004q2v\r\nx-fd-int-roxy-purgeid: 52414258\r\nx-cache: TCP_MISS\r\naccept-ranges: bytes\r\nage: 1670\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]}],"data":{"size":15877,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 300x300, components 3","md5":"3364c722f5b640a17ce9a2a223e03e22","sha1":"b118e749e5e614472827750424c410abe3f12b6b","sha256":"713127b68dc6206e2342668246e8520724c03ebd520e0a169a9d0f3b8f40ead6","sha512":"418a2240b7270155a889e4b2ad592ba3e83b84662ef873e4eb3725e6ad7ea3eb870eb54b0c90ea4472e1725071f2093e41f869eb6fbdd6c216c61fa073a41c8b","ssdeep":"384:RpoqGpUEm2FcycP8g7A4mLk28+OozUj+lmdTpi:RmpPm2mFjU4q23cXlqo","tlshash":"ff62e16e77b011a3c8d2bb70c1b658c522a28351904d74fe5e929a1af3471f72f85d33","first_seen":"2026-03-18T15:41:37.484817Z","last_seen":"2026-03-18T15:41:37.484817Z","times_seen":1,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":86,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"popbasedplasma.xyz/assets/img/favicon.png","fqdn":"popbasedplasma.xyz","domain":"popbasedplasma.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:05.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"popbasedplasma.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 10:42:10 GMT","end":"Sat, 13 Jun 2026 10:42:09 GMT"},"fingerprint":{"sha1":"11:E3:02:7F:35:B9:07:60:4C:C3:84:E3:B6:A3:0A:22:FA:D7:6D:AB","sha256":"99:20:1F:A8:73:B1:AD:8D:91:AB:5F:7D:4C:30:4C:AF:2F:FE:26:98:81:7E:B5:00:7D:24:AF:FD:83:A4:C1:D7"}}},"request":{"raw":"GET /assets/img/favicon.png HTTP/1.1\r\nHost: popbasedplasma.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 2369\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 15 Mar 2026 10:57:33 GMT\r\netag: W/\"941-19cf124e8c0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 271002\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3d9PB44XiydtSLdWA5ZXtmK77qJeHbdkH93u2OFDFx20BDyEXtXNIJizqN%2FBvjznvE0OqOvZ8RFAmLFFuHdAKSPN%2FvGZtk0mwSMdSnPpuEjYQQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de556ef595ee0de-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2369,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit colormap, non-interlaced","md5":"0fc86f18039db506dd490bbc4fcff6ef","sha1":"bd1b2f0d77b10f09ab71771acbbc926056c9a58e","sha256":"9e9694e1bffa358fcce0c86878f8aaa0088c522cbe13eec3226518a247efd8be","sha512":"34bf87efe6e3d52bc06c82b4a58a322219ac01d1471291d6ace9834ea5cc100b04dd76081b36b2fc39f5857ba8bc8d424e868c886f50de391422610e5fa3b9e1","ssdeep":"","tlshash":"7f4108c0ce26d2b067bbe416c96321566c07b22c1c1ac28d70e22e8adc851cbe3c9062","first_seen":"2023-11-11T03:35:51Z","last_seen":"2026-08-07T00:19:51.476603Z","times_seen":88,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"popbasedplasma.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"popbasedplasma.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"resources.cryptocompare.com/news/44/59370456.jpeg","fqdn":"resources.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:04.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 12:36:03 GMT","end":"Sun, 24 May 2026 13:35:55 GMT"},"fingerprint":{"sha1":"FD:66:48:50:CD:A6:40:95:0E:9E:61:EB:74:35:DA:08:64:12:6C:3B","sha256":"D1:66:CC:CC:EE:59:3E:89:A8:89:77:B3:09:BB:49:2A:EE:4C:9A:41:70:24:C4:33:C1:16:07:BB:FE:B2:DF:70"}}},"request":{"raw":"GET /news/44/59370456.jpeg HTTP/1.1\r\nHost: resources.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20689\r\ncf-ray: 9de556ea1aca783d-OSL\r\nlast-modified: Wed, 18 Mar 2026 15:06:57 GMT\r\netag: 0x8DE84FFFFC9E3F2\r\nx-ms-request-id: 6515b42b-901e-0031-05e8-b6b330000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20260318T150740Z-16b4f8f7c98pll6mhC1FRA6t0000000023k000000000amzn\r\nx-fd-int-roxy-purgeid: 52414258\r\nx-cache-info: L2_T2\r\nx-cache: TCP_REMOTE_HIT\r\naccept-ranges: bytes\r\nage: 2004\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}],"data":{"size":20689,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 300x300, components 3","md5":"c0af28c622b27e5abf84dbe865d8d979","sha1":"5aef286ddc35371e10b62153ee8891a460f852e5","sha256":"2fdf84a0adc677bc9e56e831fbc5003b9f4ab3a3c5c9bdfe8900b60d1a8276fd","sha512":"eb26e83d87e0ca0bd3c3c674d3827b65c809e2a1764978e5cc54c167c1d182c46de056911a2c9845251ef1dec32bcac8c358e5e22dda860636b11799c7874556","ssdeep":"384:G4rR1T3X0+QVWdNK9l5KQ2hS+cPfdxRmAAErUrVBEX4bxRjB6nBg/1zeQs9Hd:NrRR3X03VWr67fdJlru7tdrdqtz","tlshash":"7a92c01ae84e56180ac2c97a1356eae513908b91ff987d0e103575cc9dfc88b6dab07f","first_seen":"2026-03-18T15:41:37.486658Z","last_seen":"2026-03-18T15:41:37.486658Z","times_seen":1,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":83,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"resources.cryptocompare.com/news/64/59370309.jpeg","fqdn":"resources.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:04.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 12:36:03 GMT","end":"Sun, 24 May 2026 13:35:55 GMT"},"fingerprint":{"sha1":"FD:66:48:50:CD:A6:40:95:0E:9E:61:EB:74:35:DA:08:64:12:6C:3B","sha256":"D1:66:CC:CC:EE:59:3E:89:A8:89:77:B3:09:BB:49:2A:EE:4C:9A:41:70:24:C4:33:C1:16:07:BB:FE:B2:DF:70"}}},"request":{"raw":"GET /news/64/59370309.jpeg HTTP/1.1\r\nHost: resources.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21674\r\ncf-ray: 9de556ea1ad6783d-OSL\r\nlast-modified: Wed, 18 Mar 2026 15:03:14 GMT\r\netag: 0x8DE84FF7A9D655A\r\nx-ms-request-id: 9c3ff65e-a01e-002a-48e8-b68d33000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20260318T150341Z-r15c679d9d57v4rshC1FRA1kd40000000p1g00000000xhvb\r\nx-fd-int-roxy-purgeid: 52414258\r\nx-cache: TCP_MISS\r\naccept-ranges: bytes\r\nage: 2243\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21674,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 300x300, components 3","md5":"cd08c9914c6138ce8feb0a08cf8ea089","sha1":"3b799818477134d51fb511502862c4f30ae72ac0","sha256":"68bf92331fa28128aa1159c22eb0680644a181c9193198acc2f42765e0b86903","sha512":"5abefbd6a282093b75fb4d455e0b36b8a70a692e2d96a9bdcc33a481397637d05f6cb9440d6a93b013f9aa32b88a69ac6c415a64d31ed01ae44b190b98b2aa45","ssdeep":"384:jfgKQQzMVYg2mtQW9tydpLV+H2A/CLdND+yjFGe7Dg9806PQ81fBEAgZvm8oH3RX:jfZQ559ty9CI+yRGcDg9t6PQOZEAT8kJ","tlshash":"c1a2f1f6b578de574a74c2b5c4f606db6bd68a62f009c71e1253e497e07e2110c1f21b","first_seen":"2026-03-18T15:41:37.487814Z","last_seen":"2026-03-18T15:41:37.487814Z","times_seen":1,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":36,"dns":0,"connect":0,"send":0,"wait":80,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"popbasedplasma.xyz/assets/vendor/bootstrap/font/fonts/bootstrap-icons.woff2","fqdn":"popbasedplasma.xyz","domain":"popbasedplasma.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:04.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"popbasedplasma.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 10:42:10 GMT","end":"Sat, 13 Jun 2026 10:42:09 GMT"},"fingerprint":{"sha1":"11:E3:02:7F:35:B9:07:60:4C:C3:84:E3:B6:A3:0A:22:FA:D7:6D:AB","sha256":"99:20:1F:A8:73:B1:AD:8D:91:AB:5F:7D:4C:30:4C:AF:2F:FE:26:98:81:7E:B5:00:7D:24:AF:FD:83:A4:C1:D7"}}},"request":{"raw":"GET /assets/vendor/bootstrap/font/fonts/bootstrap-icons.woff2 HTTP/1.1\r\nHost: popbasedplasma.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/assets/vendor/bootstrap/font/bootstrap-icons.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:04 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 102536\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000\r\nlast-modified: Sun, 15 Mar 2026 10:57:33 GMT\r\netag: W/\"19088-19cf124e8f7\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0aPssO%2B5RH%2FfpCbB4mVPjQLdjR7K7lCs%2F3BRNECJYXnm8O%2BW8YeApE3fdRIBE5d%2Bb3NJORU48eqMp48UvpzzVxCdPnmE%2FRMIiQWqqqY1Az1NwQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9de556e6d9bee0de-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102536,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 102536, version 1.0","md5":"1ed478a6b265d4b4f5c26bb063203588","sha1":"1ca5e8c7d2fb8e9d60ad1a1feb2a46e98c248a3d","sha256":"c874e14c63db86c4c5318c77cb557fce7036645edc7d690dcc1d23b389631b13","sha512":"6aa92a97373e55521584bf67eae83160e01f38f636e09aa90ddfb085b020d02662393998e620e416a2bb6a198b90f1f0bd1ab66fa350e310f0f6511bd01b0ec9","ssdeep":"1536:JdO26Vlt/8WEjNkZWNvZy4m4I2Do5H7Z3BvgoXK/tNh8XEorh/gQOns6trAk2Xt:J42o3WY4I2Do5NxvgxtNGXEofDW4","tlshash":"3fa31232a784011e2128daf7a453f2f805d9e786efb327d963c0817597e78d267a43d2","first_seen":"2023-04-07T09:04:20Z","last_seen":"2026-08-07T23:47:52.670306Z","times_seen":5166,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"popbasedplasma.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"popbasedplasma.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptocompare.com/media/39334571/dot.png","fqdn":"www.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:05.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 12:36:03 GMT","end":"Sun, 24 May 2026 13:35:55 GMT"},"fingerprint":{"sha1":"FD:66:48:50:CD:A6:40:95:0E:9E:61:EB:74:35:DA:08:64:12:6C:3B","sha256":"D1:66:CC:CC:EE:59:3E:89:A8:89:77:B3:09:BB:49:2A:EE:4C:9A:41:70:24:C4:33:C1:16:07:BB:FE:B2:DF:70"}}},"request":{"raw":"GET /media/39334571/dot.png HTTP/1.1\r\nHost: www.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 5384\r\ncf-ray: 9de556ee0873783d-OSL\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 18 Mar 2027 15:41:05 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncryptocompare-vm: 1\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: frame-ancestors 'self'\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Thu, 12 Mar 2026 08:55:12 GMT\r\nage: 542753\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5384,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit colormap, non-interlaced","md5":"99979c4a5ea15ac289663064fb8db2b6","sha1":"084a57e67e216db5973c6d72e529af70ae4b9403","sha256":"f657d8b153c5b8e6631f767053f5700f782c9679cdb21156f112478f6e2ba41b","sha512":"74f247aeecde05d24b1e122a7ffe44c595f403fdcc2780c5106a14c21543f6ba9d01ae7b310674bf501e0d17f6bd7670ce83a7c2c7770287bb4aea8a2ad08c8c","ssdeep":"96:6S4X10hKB5z2ud/hrF83XgU3z6+brz0MpSkA3t2VzHgAQ:Y1tZrCng23brz0MpNeQBAn","tlshash":"46b18e258a84cfc896f8205b5b05966b49c1766bdc5c9a50b3f5163d0d00318dc3edfd","first_seen":"2023-12-11T11:19:07Z","last_seen":"2026-07-26T12:47:21.173592Z","times_seen":151,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"resources.cryptocompare.com/news/44/59371530.jpeg","fqdn":"resources.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:04.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 12:36:03 GMT","end":"Sun, 24 May 2026 13:35:55 GMT"},"fingerprint":{"sha1":"FD:66:48:50:CD:A6:40:95:0E:9E:61:EB:74:35:DA:08:64:12:6C:3B","sha256":"D1:66:CC:CC:EE:59:3E:89:A8:89:77:B3:09:BB:49:2A:EE:4C:9A:41:70:24:C4:33:C1:16:07:BB:FE:B2:DF:70"}}},"request":{"raw":"GET /news/44/59371530.jpeg HTTP/1.1\r\nHost: resources.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20907\r\ncf-ray: 9de556ea4b8d783d-OSL\r\nlast-modified: Wed, 18 Mar 2026 15:32:50 GMT\r\netag: 0x8DE85039DA4695F\r\nx-ms-request-id: 4de3bf7e-201e-000b-75ec-b6a948000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20260318T153340Z-16b4f8f7c98g2z55hC1FRA5xun00000028wg000000001xsb\r\nx-fd-int-roxy-purgeid: 52414258\r\nx-cache-info: L2_T2\r\nx-cache: TCP_REMOTE_HIT\r\naccept-ranges: bytes\r\nage: 444\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20907,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 300x300, components 3","md5":"cb33c6ad82eb7581b1b791635fc3bfff","sha1":"dc4592022b65b5b3c6cdbb7fa4e6f20a962187e6","sha256":"09da24cd65f54c6126b2f7d489e7b157fd70e8dbd83abaffddbca6662cbd510c","sha512":"30cf820e8b64908edbbc386f5d626b08391b20a4a3b49a9b10a8ad7c755c1cea44f5a5c0e07743ebd3e49703a3d16b7d928aa6bb5af5ff35ddb4f5eb73edce6d","ssdeep":"384:kswVpvtmwR9bCMguPpHlVy0sPIjMq7HauNIW61PbytB8Q8M2Z7/xDg2:kswDUwrbCMguPxlVy9qMqWuNvqO8QT2J","tlshash":"e092d0a2fae911778cdb83be0b3057a20248157ac36cc77f1e26592e61182977cddc98","first_seen":"2026-03-18T15:41:37.491179Z","last_seen":"2026-03-18T15:41:37.491179Z","times_seen":1,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":91,"dns":29,"connect":1,"send":0,"wait":74,"receive":1,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"resources.cryptocompare.com/news/67/default.png","fqdn":"resources.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:04.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 12:36:03 GMT","end":"Sun, 24 May 2026 13:35:55 GMT"},"fingerprint":{"sha1":"FD:66:48:50:CD:A6:40:95:0E:9E:61:EB:74:35:DA:08:64:12:6C:3B","sha256":"D1:66:CC:CC:EE:59:3E:89:A8:89:77:B3:09:BB:49:2A:EE:4C:9A:41:70:24:C4:33:C1:16:07:BB:FE:B2:DF:70"}}},"request":{"raw":"GET /news/67/default.png HTTP/1.1\r\nHost: resources.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 20706\r\ncf-ray: 9de556ea3b70783d-OSL\r\nlast-modified: Wed, 28 Sep 2022 16:12:02 GMT\r\netag: 0x8DAA16C2DF77F4A\r\nx-ms-request-id: 57196f01-f01e-006a-6db6-278a0b000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20250917T194239Z-157c4b7c889n5vhjhC1PRGtz8400000000z000000000s5kv\r\nx-fd-int-roxy-purgeid: 52414258\r\nx-cache-info: L2_T2\r\nx-cache: TCP_REMOTE_HIT\r\naccept-ranges: bytes\r\nage: 6061\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20706,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"9556113610397a8ee568bff58dbac29c","sha1":"19765b632926b2f4f847d574a904eef0b60ba724","sha256":"7a67665858ebd1e88e41847a363b0cf403579f660d02328d1b14eea3fa86e3ab","sha512":"500880f75cbf063f911935dda1fc76c720c6f166e266196e729361494d852716e9a60bb6196310966b1605f054fb1950f0ef03f1a5ef1b8145d1b63c1403f28c","ssdeep":"384:KhXjFAa/tyiTRUZ2PhvoMUwmkA2bRsWHI61MYTi8fTPHjwqDEu2gcTx:oX5Aa/tPUkhAAAyR5owMQ7gv","tlshash":"c792e014862338a7f716bbbbb38d8b65410049ccadd4a76f5c4e9586388a7f0892bd47","first_seen":"2024-01-21T17:25:31Z","last_seen":"2026-07-03T14:02:00.168731Z","times_seen":130,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":88,"dns":29,"connect":1,"send":0,"wait":74,"receive":1,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"resources.cryptocompare.com/news/75/59369988.jpeg","fqdn":"resources.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:04.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 12:36:03 GMT","end":"Sun, 24 May 2026 13:35:55 GMT"},"fingerprint":{"sha1":"FD:66:48:50:CD:A6:40:95:0E:9E:61:EB:74:35:DA:08:64:12:6C:3B","sha256":"D1:66:CC:CC:EE:59:3E:89:A8:89:77:B3:09:BB:49:2A:EE:4C:9A:41:70:24:C4:33:C1:16:07:BB:FE:B2:DF:70"}}},"request":{"raw":"GET /news/75/59369988.jpeg HTTP/1.1\r\nHost: resources.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:05 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15870\r\ncf-ray: 9de556ea2b2c783d-OSL\r\nlast-modified: Wed, 18 Mar 2026 14:53:52 GMT\r\netag: 0x8DE84FE2BEFFFB1\r\nx-ms-request-id: 133affa7-d01e-006d-40e7-b6e668000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20260318T145440Z-r15c679d9d5th7xxhC1FRA9cdn00000027p0000000002kuc\r\nx-fd-int-roxy-purgeid: 52414258\r\nx-cache: TCP_MISS\r\naccept-ranges: bytes\r\nage: 2784\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}],"data":{"size":15870,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 300x300, components 3","md5":"84cacde27da02f704b4d67e492453485","sha1":"21b7139677981497e8ef557020683e5324f9d597","sha256":"d480ea356473272e5d95db8f07fc71367e10f85530dd36281f5c5e9fa5f786d6","sha512":"aa5157470c206b4613e30725d9d8cb1520bd8a7fdb389270a7ba8f9bd42e578ce6583e2c8cd36b5a40eaf24b357e49977c3b8767492682d0697de8f59b8dbc7e","ssdeep":"384:pVUEw/PPbOhxOyU0i5amuEV2eIv8a89zUx4CTZjdVPmg6:psKhxOyUSmJV2eIR89zUxTTZL6","tlshash":"8d62d03bb3912d138e1ce1b22a8c3749567a914aaede496f0c560350f52a1e25cfe8d5","first_seen":"2026-03-18T15:41:37.49288Z","last_seen":"2026-03-18T15:41:37.49288Z","times_seen":1,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":36,"dns":0,"connect":0,"send":0,"wait":85,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"popbasedplasma.xyz/secureproxy?e=jscdn/getFile","fqdn":"popbasedplasma.xyz","domain":"popbasedplasma.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:05.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"popbasedplasma.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 15 Mar 2026 10:42:10 GMT","end":"Sat, 13 Jun 2026 10:42:09 GMT"},"fingerprint":{"sha1":"11:E3:02:7F:35:B9:07:60:4C:C3:84:E3:B6:A3:0A:22:FA:D7:6D:AB","sha256":"99:20:1F:A8:73:B1:AD:8D:91:AB:5F:7D:4C:30:4C:AF:2F:FE:26:98:81:7E:B5:00:7D:24:AF:FD:83:A4:C1:D7"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: popbasedplasma.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://popbasedplasma.xyz/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://popbasedplasma.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"odi0hkwkw5vads4d75h8\"}"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:06 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hpbBvKKME85Iymv4QgaX1sG8USjfipEpEYpez7NhFQSK%2FO3Zc%2FB89zhhxFhwT%2F2%2F5o%2F%2BR3ktuYMDY9ptFANNl7hSCIiggIWsIhNJkNCxxoTdlA%3D%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-ray: 9de556ee2dd6e0de-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3512922,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e5e017f5757e5baa93248b0d29517e07","sha1":"6d39bf57e138385f9180d5b0038805bdab3f5dfe","sha256":"62ea816e6e9b908bc41860119ee7fd790eb329dec6abc0aec97030e9e187769a","sha512":"36b90356ba0d620b7dd29ec6d85b32f5050ef1b69f3a51185293a1b8e341ffb4c922cd6dd94940d487c4701fad98208a37c669f62c66841f1bd864547193d80c","ssdeep":"24576:hDV8/8Yae0PgGswPpBroS7InwbjtsJshJuEbdJu:hD7OwPEZJsO","tlshash":"cf253301ae5bff5e4f8caa2a747b6e0376864f47408d64d77962eec000a8276415ef1f","first_seen":"2026-03-18T15:41:37.493888Z","last_seen":"2026-03-18T15:41:37.493888Z","times_seen":1,"resource_available":false,"data":null}},"time_used":860,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":435,"receive":425,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-18","alert":"Sinkholed","trigger":"popbasedplasma.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-18","alert":"Phishing Block","trigger":"popbasedplasma.xyz","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"resources.cryptocompare.com/news/106/default.png","fqdn":"resources.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:04.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 12:36:03 GMT","end":"Sun, 24 May 2026 13:35:55 GMT"},"fingerprint":{"sha1":"FD:66:48:50:CD:A6:40:95:0E:9E:61:EB:74:35:DA:08:64:12:6C:3B","sha256":"D1:66:CC:CC:EE:59:3E:89:A8:89:77:B3:09:BB:49:2A:EE:4C:9A:41:70:24:C4:33:C1:16:07:BB:FE:B2:DF:70"}}},"request":{"raw":"GET /news/106/default.png HTTP/1.1\r\nHost: resources.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 43439\r\ncf-ray: 9de556ea1a5c783d-OSL\r\nlast-modified: Mon, 11 Aug 2025 10:17:40 GMT\r\netag: 0x8DDD8C04D7F498A\r\nx-ms-request-id: 846c2539-001e-006e-5461-29070c000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20250919T200506Z-r1b99fbbd7f6t6zrhC1DUSe9zn00000009qg00000000pv25\r\nx-fd-int-roxy-purgeid: 52414258\r\nx-cache-info: L2_T2\r\nx-cache: TCP_REMOTE_HIT\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43439,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"71ae717beaf1e819992e63e5f84ff387","sha1":"14d6eb2731462d7da57daa6eaa15d6821315a867","sha256":"68682e8714f30af424877a537c39e827167080d7273cd376411aeb43dca0365e","sha512":"3d017be999640eff5ce9b24ec0c73e1c74f10138b97b403d9e0c5b1239940c6b55f0b095092545c120b319d4c70ce2aa190cae9e85ae61c6664e6ee05dfc4743","ssdeep":"768:vEQz4krmfrjKKjhiN2aqjFIQGlVKsswzazozPuU+/3MRSgpuP+NgYWpMAnB:z4kragvQmV5e8P83yLkPxpMAB","tlshash":"5913e01b87a4e897c4b9ee270a59eb3cd0722fa2423f4810c2557ef87d11add0383a71","first_seen":"2025-08-14T16:23:20.56697Z","last_seen":"2026-07-03T14:02:00.220767Z","times_seen":47,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":201,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.cryptocompare.com/media/37746867/atom.png","fqdn":"www.cryptocompare.com","domain":"cryptocompare.com","tld":"com"},"ip":{"addr":"104.18.31.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://popbasedplasma.xyz/","date":"2026-03-18T15:41:05.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cryptocompare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 12:36:03 GMT","end":"Sun, 24 May 2026 13:35:55 GMT"},"fingerprint":{"sha1":"FD:66:48:50:CD:A6:40:95:0E:9E:61:EB:74:35:DA:08:64:12:6C:3B","sha256":"D1:66:CC:CC:EE:59:3E:89:A8:89:77:B3:09:BB:49:2A:EE:4C:9A:41:70:24:C4:33:C1:16:07:BB:FE:B2:DF:70"}}},"request":{"raw":"GET /media/37746867/atom.png HTTP/1.1\r\nHost: www.cryptocompare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://popbasedplasma.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 18 Mar 2026 15:41:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 17565\r\ncf-ray: 9de556ee18bd783d-OSL\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 18 Mar 2027 15:41:05 GMT\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncryptocompare-vm: 1\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\ncontent-security-policy: frame-ancestors 'self'\r\naccess-control-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\nlast-modified: Sun, 01 Mar 2026 02:38:45 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17565,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"1ed8899c4fb3014268ddca97f9333a71","sha1":"fd5f7244b37380ce684daec108da705dd0a4ed5b","sha256":"1e3bdea51d95ce58aaf696fbe8a3281dd8d25890d0e5abe900e98a50645873ad","sha512":"fda731de9b8ecc364a5be5d92d6a9b41bf4deca74d2888149ee3e386ace22d017d8614ca0f409cf23e50b23659647acb7cd67e43b71cda6e9dd009cb87f79c47","ssdeep":"384:EDlGUMk69sfHBm5Y0GPtCiAqzj1xNntWXuR6LbFHuYAQp:EDwE69Yhm5Y0GPoiPjfNtWeRqbFdp","tlshash":"8672d01d99d65be6148631f6c6e72b97a837c1bc4c336c582a6afa2cd49de072306201","first_seen":"2023-12-11T11:19:07Z","last_seen":"2026-07-26T12:47:21.148053Z","times_seen":147,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
