{"report_id":"1bc725c1-0331-4198-ad81-d3dfe1756583","version":0,"status":"done","tags":[],"date":"2026-07-12T20:55:18Z","url":{"schema":"http","addr":"purplebtc.fun","fqdn":"purplebtc.fun","domain":"purplebtc.fun","tld":"fun"},"ip":{"addr":"172.67.223.71","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"purplebtc.fun/","fqdn":"purplebtc.fun","domain":"purplebtc.fun","tld":"fun"},"title":"Purple Bitcoin ($PBTC) | Bitcoin Reimagined in Purple","dom":{"size":34560,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3799)","md5":"1d6c24da97d45b1b98699ca84da22538","sha1":"587f297e4c6be07dc14b8b03a985447453e87fc5","sha256":"e5a5d1a2d91477dbcd0a9645e3599f4b1545242cdb7114d3a67ec0aab9a9a366","sha512":"59839f47e7481ec5adb78c02b1c58422f039ee73b180dfe3b5f0bb227d432cfc38786a5c1cd89d17cbb5d892b5f5e8978849a1eb79d9469847f23a7f03d22909","ssdeep":"768:5DnVkk+DTsheqoy/L0opNfPpqLSh9yB8/nct/4zVSZe4YyNTOv04syZht1mIJzO1:5DnVkk+DAJ/wopxPKltSMpvzoCD","tlshash":"5ef20c3263d0093f125783f8e9d2f628b765c143da1bad26b2ac41565f8ddaccc6369c","dom_hash":"domhash916452735bc7f746e0096cc61a88fb29","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"purplebtc.fun","fqdn":"purplebtc.fun","domain":"purplebtc.fun","tld":"fun"},"ip":{"addr":"172.67.223.71","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T20:55:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"purplebtc.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"purplebtc.fun","ip":{"addr":"104.21.91.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-02","domain_rank":0,"first_seen":"2026-07-10T08:54:34.357547Z","last_seen":"2026-07-10T08:54:34.357547Z","alert_count":9,"request_count":9,"received_data":475569,"sent_data":4329,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ipapi.co","ip":{"addr":"104.26.8.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-04-19","domain_rank":7936,"first_seen":"2017-01-31T09:07:01Z","last_seen":"2026-07-09T01:04:15.221232Z","alert_count":0,"request_count":1,"received_data":2492,"sent_data":452,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"purplebitcoin.com","ip":{"addr":"172.67.198.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-05-24","domain_rank":0,"first_seen":"2026-05-14T15:21:58.651204Z","last_seen":"2026-07-10T08:54:35.394713Z","alert_count":0,"request_count":1,"received_data":83581,"sent_data":545,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"hbeugaufg1-8-26hbaaaaddoter.fly.dev","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2019-03-01","domain_rank":0,"first_seen":"2026-02-09T00:40:28.837358Z","last_seen":"2026-07-10T08:51:44.672669Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":573,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"purplebtc.fun/","fqdn":"purplebtc.fun","domain":"purplebtc.fun","tld":"fun"},"ip":{"addr":"104.21.91.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f5b767c078c6813816231552aca1d562","sha1":"34f99579b527c24b3a5af82abb42079a0d3e1a51","sha256":"c17d50bae5a02a35e0ae5d0005c694495952f093629bb5193c668070161b0f7a","sha512":"7b4aed1d33c4891894a556505047a8f7afd72efc1c30c064b5a428fac50a5475e895f3937869de6d047128910d762069084c41d12fbacecffd43cd98e84b2e48","ssdeep":"","tlshash":"70c0125d7010696614ce687d4ccf088ebe368812a20809c999dcd4547bb1e6c42e484c","size":185,"data":"","first_seen":"2024-04-08T19:47:46Z","last_seen":"2026-07-13T18:33:19.390582Z","times_seen":695,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"purplebtc.fun/","fqdn":"purplebtc.fun","domain":"purplebtc.fun","tld":"fun"},"ip":{"addr":"104.21.91.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"895f526ab37305311d1e998fa4d5a6e8","sha1":"06d0220830c81bf254c70552e908371c6dc1f18f","sha256":"90916b8b1fb2fbbd765a22eba866c30d8829f59aa2d7ee86869abd20207b2117","sha512":"6b087d2e2025f4d11073254448b124af8839ce24ff37eb45bf2fd1a2b66bee8fd4fdca2b4d23c08786d217dd71dbc660d1054b7876b37752dee3baaefdaeaa4e","ssdeep":"","tlshash":"2871bc3beb00173bdc8fa9fdced5b4c02e62497262496960691ce102a16cd7487bed88","size":3743,"data":"","first_seen":"2025-08-14T22:47:51.287187Z","last_seen":"2026-07-12T20:59:35.385677Z","times_seen":1362,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"purplebtc.fun/","fqdn":"purplebtc.fun","domain":"purplebtc.fun","tld":"fun"},"ip":{"addr":"104.21.91.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dad6995d536ddffd5d4f9b81e339e4a9","sha1":"63830b2cd17f70589f87f7d2e701ec3ee5fc5e44","sha256":"199d30608ea267498db6c96444eb2981341b4b2ebb21d83c72f25e56f77eba03","sha512":"9e08b962aa8d9d28f80b4e169500805f842ba6d149d9cb3505c96343f10636c029d9c45b85a103b2ebeb2153713cb275a16e0347e94ea2a57a6afff90f47b9e3","ssdeep":"","tlshash":"1721486ff6343a7548fbb677519ffb583a231082084499012b79cd960f18e8438ab8d9","size":1221,"data":"","first_seen":"2026-06-25T12:47:33.745278Z","last_seen":"2026-07-12T20:55:19.74538Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"purplebtc.fun/loader.js","fqdn":"purplebtc.fun","domain":"purplebtc.fun","tld":"fun"},"ip":{"addr":"104.21.91.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0c72fa4b4b8cfd7e6be6337f5f24422","sha1":"779bf8361142409d90d449e0a681aeed44ed4395","sha256":"81cffa8006dea8a2266be203c57e060c210ba3cf95bbc25000243eb1d974b227","sha512":"039102730de7e9afbfedd2c64cd2d0f02b36883c48fcff185872ebcf2974e5763abb7d0528f160df62105431b1dfe32403fc48e9a663b1943974da18c1cfa4b8","ssdeep":"768:0s3R9nZD8uUR2xOVAEZ83idtOEpytAq+2Bkz+wpB:j9rUYxOXEitpyt/DF4","tlshash":"93e2b78d7be53132422361780ebb16447536e8435544d8287aace3903fe4b3e65bbbf9","size":34107,"data":"","first_seen":"2026-07-10T08:51:48.792049Z","last_seen":"2026-07-12T22:09:48.924321Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"error","text":"Failed to notify visit:NetworkError when attempting to fetch resource.","filename":"https://purplebtc.fun/loader.js","line_number":183,"column_number":6826}]},"http":[{"url":{"schema":"https","addr":"purplebtc.fun/","fqdn":"purplebtc.fun","domain":"purplebtc.fun","tld":"fun"},"ip":{"addr":"104.21.91.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T20:54:50.312Z","timestamp":1783889690312,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purplebtc.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 16:59:23 GMT","end":"Wed, 30 Sep 2026 17:59:18 GMT"},"fingerprint":{"sha1":"A5:3C:87:F2:35:95:F7:AA:18:09:7D:6B:F7:3E:44:84:01:6D:37:E3","sha256":"F3:FB:4F:62:15:73:24:F6:08:0A:8A:ED:6F:B5:0C:75:19:F4:1E:33:DA:36:3B:46:A0:34:A4:D3:F0:8A:A8:29"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: purplebtc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\ndate: Sun, 12 Jul 2026 20:54:50 GMT\r\ncontent-type: text/html\r\ncontent-encoding: zstd\r\ncf-ray: a1a2f204ff561a30-OSL\r\ncf-cache-status: DYNAMIC\r\nlast-modified: Thu, 02 Jul 2026 17:50:37 GMT\r\nserver: cloudflare\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=notOsLhHRpLbKCzmzdJc2E6jKzcxc3WDn2qNTuJm7L%2BBJtJ%2BIG60E9F59u0VAkiIwLnRRo0eqCzMPm75jYgb0vAT6kdjjFfw9CO1RjP0KBWt667V%2F1XJQXvuA%2BesfgZO\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38487,"size_decoded":10424,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3795)","md5":"d696d161887f3b0c6209ec2d48e9a72b","sha1":"ad74758359187eb1fca66cf3525dd6d047bb803e","sha256":"7b8e8a3e0ae015331a15f7abfb51a66c91980ebfcb56d2f1b7d409849b5fe751","sha512":"c86767166bb769f679a51f1e68e641e1f3dfd5f3d3c74f6acbab4981284f5ec3a2f4de0224bddddfc97b396fecdd741776b57e9604c7f4da2a6e51d3de5b268c","ssdeep":"768:fxZVkS+lTshesoy/L0opNfPpqLgXitaLbM3BSXVSTUUiadZkJW4PQjb3PEejlS+i:fxZVkS+leJ/wopxPKxv0MYYvzoC0","tlshash":"3a030a326390193f125b82f8ede2f61cb665c153d91bad2bb2ac41565f8dd6ccc6328c","first_seen":"2026-06-25T12:47:33.730894Z","last_seen":"2026-07-12T20:55:19.723632Z","times_seen":4,"resource_available":true,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":60,"connect":15,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"purplebtc.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"purplebtc.fun/13rfms16juua_.css","fqdn":"purplebtc.fun","domain":"purplebtc.fun","tld":"fun"},"ip":{"addr":"104.21.91.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://purplebtc.fun/","date":"2026-07-12T20:54:50.747Z","timestamp":1783889690747,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purplebtc.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 16:59:23 GMT","end":"Wed, 30 Sep 2026 17:59:18 GMT"},"fingerprint":{"sha1":"A5:3C:87:F2:35:95:F7:AA:18:09:7D:6B:F7:3E:44:84:01:6D:37:E3","sha256":"F3:FB:4F:62:15:73:24:F6:08:0A:8A:ED:6F:B5:0C:75:19:F4:1E:33:DA:36:3B:46:A0:34:A4:D3:F0:8A:A8:29"}}},"request":{"raw":"GET /13rfms16juua_.css HTTP/1.1\r\nHost: purplebtc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://purplebtc.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:54:50 GMT\r\ncontent-type: text/css\r\netag: W/\"6a46a4ad-cc5\"\r\nlast-modified: Thu, 02 Jul 2026 17:49:33 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OpLHAIUxp2ey6lyyZ%2B%2Bc1ZHY9%2BT0fOWuYDTC2ySKAPrdFtSHWMRzJ6HQQ5VKh7HMguhs5rQBhPbKN0F7dgLe8rRA6n9X09a3XLuII34%2FUCt32ERZRUF%2BQE9ZFsJRyBE8\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a2f2072ffd1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3269,"size_decoded":1605,"mime_type":"text/css","magic":"ASCII text, with very long lines (2061)","md5":"5996baf9de486fb82e192b2acb8daf37","sha1":"13209170202403ad9c5e908f869fe1a64da8c782","sha256":"9c1816bfb9a636bd17b7ca0947feb4a41846cfdc6a53b021b53afba64fb27739","sha512":"0a466f28fc2e2dcc532a26422a176a8be96b87cff35b84133209155926104925903a915819236c78b14ff4c4d2432d66991e6314c8f4a69159d44dd2db564e80","ssdeep":"","tlshash":"3761bc38402fe809d2f7cd6235ce7f033c1d90355ab9526399392aa89ddb93b53e1728","first_seen":"2026-05-14T15:22:02.777869Z","last_seen":"2026-07-12T20:55:19.728432Z","times_seen":7,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"purplebtc.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"purplebtc.fun/09jorv600qllg.css","fqdn":"purplebtc.fun","domain":"purplebtc.fun","tld":"fun"},"ip":{"addr":"104.21.91.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://purplebtc.fun/","date":"2026-07-12T20:54:50.755Z","timestamp":1783889690755,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purplebtc.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 16:59:23 GMT","end":"Wed, 30 Sep 2026 17:59:18 GMT"},"fingerprint":{"sha1":"A5:3C:87:F2:35:95:F7:AA:18:09:7D:6B:F7:3E:44:84:01:6D:37:E3","sha256":"F3:FB:4F:62:15:73:24:F6:08:0A:8A:ED:6F:B5:0C:75:19:F4:1E:33:DA:36:3B:46:A0:34:A4:D3:F0:8A:A8:29"}}},"request":{"raw":"GET /09jorv600qllg.css HTTP/1.1\r\nHost: purplebtc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://purplebtc.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:54:50 GMT\r\ncontent-type: text/css\r\netag: W/\"6a46a4ab-11d4\"\r\nlast-modified: Thu, 02 Jul 2026 17:49:31 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SwMnrcV%2FsutNl0hXwwmOWpKMFUNMqo8zH4N6%2FxF7vPHyIfHkKVz7Tc9RztnVL2yCiVSvSyePbSLcoY3KwG0QkuQv6psnOzfHEtL7Gy8bD7tGIE0E68%2FIrlibV%2FaCEid8\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a2f20738011a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4564,"size_decoded":1667,"mime_type":"text/css","magic":"ASCII text, with very long lines (4563)","md5":"dea7a411d3bc17645e6e53d281a56080","sha1":"2f034eff2f02178ebd256da84508de6572b5a384","sha256":"d71ee33c24ba4caf0a11fb14e63030a662d8804e05a7a7d536c4eca305e55226","sha512":"c61a9c6ed8ee726d2f572fa26ee35b97be5142ac9988d130b0392eebaee17002f448fa1509bca7f83efaf82acfd94a2ef7c3d4c19a03afb8bd7b2af824d79728","ssdeep":"48:sU3GPh4TULXMDUkyuUed7NRUaxMqwUhinODUEHh4TU2MMDUJyuUUHNRU+RxMqwUj:zO47Bgq4OfB4ju18q7Oa46BpnF1qkO6J","tlshash":"b691bd25442fa405d2f38c6235cf7f07781e1436265a59a1e12e2aacedfb87793e4b18","first_seen":"2026-05-14T15:22:02.785366Z","last_seen":"2026-07-12T20:55:19.730075Z","times_seen":7,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"purplebtc.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"purplebtc.fun/loader.js","fqdn":"purplebtc.fun","domain":"purplebtc.fun","tld":"fun"},"ip":{"addr":"104.21.91.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://purplebtc.fun/","date":"2026-07-12T20:54:50.756Z","timestamp":1783889690756,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purplebtc.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 16:59:23 GMT","end":"Wed, 30 Sep 2026 17:59:18 GMT"},"fingerprint":{"sha1":"A5:3C:87:F2:35:95:F7:AA:18:09:7D:6B:F7:3E:44:84:01:6D:37:E3","sha256":"F3:FB:4F:62:15:73:24:F6:08:0A:8A:ED:6F:B5:0C:75:19:F4:1E:33:DA:36:3B:46:A0:34:A4:D3:F0:8A:A8:29"}}},"request":{"raw":"GET /loader.js HTTP/1.1\r\nHost: purplebtc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://purplebtc.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:54:50 GMT\r\ncontent-type: application/javascript\r\netag: W/\"6a46a4ff-853b\"\r\nlast-modified: Thu, 02 Jul 2026 17:50:55 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nHIiKaxB1a%2BYSyOA0bRQeTjGPOGMK1rUqX9iynaC4nMX4i%2BrqoYNcamR6DQHA17eWyuLruvGlwpXJnjfOCsbl5GGOT5pyO5cq2GocS2H0m6XRODGl4LVUCQqhosL1qC0\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a2f20738021a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34107,"size_decoded":11412,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6876)","md5":"f0c72fa4b4b8cfd7e6be6337f5f24422","sha1":"779bf8361142409d90d449e0a681aeed44ed4395","sha256":"81cffa8006dea8a2266be203c57e060c210ba3cf95bbc25000243eb1d974b227","sha512":"039102730de7e9afbfedd2c64cd2d0f02b36883c48fcff185872ebcf2974e5763abb7d0528f160df62105431b1dfe32403fc48e9a663b1943974da18c1cfa4b8","ssdeep":"768:0s3R9nZD8uUR2xOVAEZ83idtOEpytAq+2Bkz+wpB:j9rUYxOXEitpyt/DF4","tlshash":"93e2b78d7be53132422361780ebb16447536e8435544d8287aace3903fe4b3e65bbbf9","first_seen":"2026-07-10T08:51:48.792049Z","last_seen":"2026-07-12T22:09:48.924321Z","times_seen":4,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"purplebtc.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"purplebtc.fun/purple-bitcoin-logo.png","fqdn":"purplebtc.fun","domain":"purplebtc.fun","tld":"fun"},"ip":{"addr":"104.21.91.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://purplebtc.fun/","date":"2026-07-12T20:54:50.763Z","timestamp":1783889690763,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purplebtc.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 16:59:23 GMT","end":"Wed, 30 Sep 2026 17:59:18 GMT"},"fingerprint":{"sha1":"A5:3C:87:F2:35:95:F7:AA:18:09:7D:6B:F7:3E:44:84:01:6D:37:E3","sha256":"F3:FB:4F:62:15:73:24:F6:08:0A:8A:ED:6F:B5:0C:75:19:F4:1E:33:DA:36:3B:46:A0:34:A4:D3:F0:8A:A8:29"}}},"request":{"raw":"GET /purple-bitcoin-logo.png HTTP/1.1\r\nHost: purplebtc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://purplebtc.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:54:50 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 02 Jul 2026 17:51:30 GMT\r\npriority: u=5,i\r\netag: \"6a46a522-ee4c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fQyo5kyAI4bKkr9JmmgX5sqoQdaAbxzHoht1biP7togrQIkcp0xdeMIPlA80zIPFqPt4OLPBOA53P0ZkbV4Lc%2B%2Bxlksd9%2BgIyhLrHtS0a96gvXo38jHt8AuSsybLp3ov\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2f20748051a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 61004\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61004,"size_decoded":61687,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"4c2bdb420d08a1c406adf3a7ed39a897","sha1":"431171630d0683df577574f54d64cb148e90e834","sha256":"62d52c5dce469d0814f0f0b68331ff28db08330dcbca6589ee843e6460d34135","sha512":"792472b94abe6e9068881d51761aa0a3744272ac68efc37bb2ff30b033b5c57e0eed3f7048ab111ef24901ff84952a6eb94543d5ce99068375cdb94ac7b9e5e8","ssdeep":"1536:+JnyaB/j4hKv4qf2pxBzmmBrifdfhr5dtUu:SxehKv4qf2pDSmBrixp5dtUu","tlshash":"235302ccf51a234299e1254b0fe94ab35f7a2206f781b24d4caff2f69c62590d452dcb","first_seen":"2026-05-14T15:22:02.780452Z","last_seen":"2026-07-12T20:55:19.732998Z","times_seen":7,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"purplebtc.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"purplebtc.fun/83afe278b6a6bb3c-s.p.0q-301v4kxxnr.woff2","fqdn":"purplebtc.fun","domain":"purplebtc.fun","tld":"fun"},"ip":{"addr":"104.21.91.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://purplebtc.fun/","date":"2026-07-12T20:54:51.191Z","timestamp":1783889691191,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purplebtc.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 16:59:23 GMT","end":"Wed, 30 Sep 2026 17:59:18 GMT"},"fingerprint":{"sha1":"A5:3C:87:F2:35:95:F7:AA:18:09:7D:6B:F7:3E:44:84:01:6D:37:E3","sha256":"F3:FB:4F:62:15:73:24:F6:08:0A:8A:ED:6F:B5:0C:75:19:F4:1E:33:DA:36:3B:46:A0:34:A4:D3:F0:8A:A8:29"}}},"request":{"raw":"GET /83afe278b6a6bb3c-s.p.0q-301v4kxxnr.woff2 HTTP/1.1\r\nHost: purplebtc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://purplebtc.fun/13rfms16juua_.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:54:51 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 02 Jul 2026 17:49:34 GMT\r\npriority: u=3,i=?0\r\netag: \"6a46a4ae-bd30\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iibg7WoAO54fw6Xp5M8TkiPIQzi03K3J9ya32Q175v05khNZsM7yxbODw5ttZov1R4fX%2BSiDoNHUuIDOkzj1dHRi7bEhf%2BGUd8u6GcPyRue%2BawWz0NACPZtG5YNhHDzV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2f209f8a21a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 48432\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48432,"size_decoded":49119,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48432, version 1.0","md5":"65850a373e258f1c897a2b3d75eb74de","sha1":"1dc044f4824fd5af6bfed67fee48be70fa069f3f","sha256":"c940764593d0fe5d596be327ca7558855e018039fb78509aa21921fd3644c3e4","sha512":"df2683f3dd9724de589451a47bc608c9925d54b874ad97b733dd465ef41f9db75e9e31604762415c2fc1433d050e45fdefc6ecd7ecadf58d1243d9ca5f4bf74b","ssdeep":"768:3IkDHBYoX5Pi4JxTGz9CDR0s1ROSsA8mF77YNt7wFhVq9oN2WfpdqWjBA:tNYoX53xTl/R8W77YNtUFrWoUWvdA","tlshash":"56230251f5f8624a7fc3003fbc317bd862909fe5996ee5d91288f30225611dd29ee017","first_seen":"2025-05-30T12:57:00.85385Z","last_seen":"2026-07-13T19:28:37.729655Z","times_seen":75887,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"purplebtc.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"purplebtc.fun/favicon.svg","fqdn":"purplebtc.fun","domain":"purplebtc.fun","tld":"fun"},"ip":{"addr":"104.21.91.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://purplebtc.fun/","date":"2026-07-12T20:54:51.421Z","timestamp":1783889691421,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purplebtc.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 16:59:23 GMT","end":"Wed, 30 Sep 2026 17:59:18 GMT"},"fingerprint":{"sha1":"A5:3C:87:F2:35:95:F7:AA:18:09:7D:6B:F7:3E:44:84:01:6D:37:E3","sha256":"F3:FB:4F:62:15:73:24:F6:08:0A:8A:ED:6F:B5:0C:75:19:F4:1E:33:DA:36:3B:46:A0:34:A4:D3:F0:8A:A8:29"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: purplebtc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://purplebtc.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:54:51 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"6a46a4c9-13fb1\"\r\nlast-modified: Thu, 02 Jul 2026 17:50:01 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JaLq3Wh42hjslMI3BApq%2BUnTur12E56iYOxMD6SpJkCRZD2kwT6%2F%2Bo22o%2B73Fz43Xa3Lx63AqBCx1yJq92NFS%2BZ5UzhzY2zhlIdgjQ8LYxb7%2FjtbhDAgvbexSZX1qxrj\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a2f20b69d71a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":81841,"size_decoded":61835,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a646494f8e1a0abfe874959f2ebbe002","sha1":"48ef9729367b43538d331652cd063483d95250b5","sha256":"c846cf44f8a4cf0201d2a962c6f514e4a0cd5ddbb94c36f22daf960228188baa","sha512":"c678a8bac94c8465f6e1a3fe58524bd45080918dff2e6406a7ad1d5c3771804a1793818b350292661e775d9d208afb0c1f42c9a5a868a433c2667580bdc2107e","ssdeep":"1536:5rTEx259/EWhX87sH9liTLnU7MnSBdWiaQaTLhVjaqLmEz6ib+kXsi8Nv:v7pdaFrKanHaqLDxvXsi8Nv","tlshash":"818302485c9fab1c52e84319f6c5c7cf6ebe6d2c852d57607ac70ed22423e814334aad","first_seen":"2026-05-14T15:22:02.7828Z","last_seen":"2026-07-12T20:55:19.735552Z","times_seen":7,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":71,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"purplebtc.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"purplebtc.fun/0x7ok6evp92ix.css","fqdn":"purplebtc.fun","domain":"purplebtc.fun","tld":"fun"},"ip":{"addr":"104.21.91.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://purplebtc.fun/","date":"2026-07-12T20:54:50.749Z","timestamp":1783889690749,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purplebtc.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 16:59:23 GMT","end":"Wed, 30 Sep 2026 17:59:18 GMT"},"fingerprint":{"sha1":"A5:3C:87:F2:35:95:F7:AA:18:09:7D:6B:F7:3E:44:84:01:6D:37:E3","sha256":"F3:FB:4F:62:15:73:24:F6:08:0A:8A:ED:6F:B5:0C:75:19:F4:1E:33:DA:36:3B:46:A0:34:A4:D3:F0:8A:A8:29"}}},"request":{"raw":"GET /0x7ok6evp92ix.css HTTP/1.1\r\nHost: purplebtc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://purplebtc.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:54:50 GMT\r\ncontent-type: text/css\r\netag: W/\"6a46a4a5-2c867\"\r\nlast-modified: Thu, 02 Jul 2026 17:49:25 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dnha103CrUbQ8ZEEBiLa5FRIsuCl7ndRVl1VaDHPMwLUYYvfxNDS0bafeJYZXQO57KkLM4ZipvPcnojuAGfVrfWX1XcBO3qFofM%2FBGDhl9ZkrBNtu3ogPOpVAszgRKVH\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1a2f2072ffe1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":182375,"size_decoded":29767,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c4dd52a63fc708b7b15162d2fd59a1c4","sha1":"854571faa45b19a0498c82e48b89837c42eb8da5","sha256":"db1609ac783964a9fecc0b8a5646ab9b551d809d80b70f3477a3080f180cec26","sha512":"e35b734b816ced429b296a5abb58d4797891a33917125e80bbe7d67d5bf5b3cda05be9cdc31155bb50a637dc7c5dfbe50303fef178f5d7171621211541a311fd","ssdeep":"3072:CUKamLhBhv+uu5Zo3yI5IJUXi+2qAAXnaxrtUqFkAEtBMno+WDAm+ADyuztjGlE0:CUKamLhBhv+uu5Zo3yAIJUXi+IknaxRf","tlshash":"b604a3a0b238e63fbc23b4f5d39ca88cb91ab091dd6947f9fa45621213d3bf55c26504","first_seen":"2026-05-14T15:22:02.779369Z","last_seen":"2026-07-12T20:55:19.736835Z","times_seen":7,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"purplebtc.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ipapi.co/json/","fqdn":"ipapi.co","domain":"ipapi.co","tld":"co"},"ip":{"addr":"104.26.8.44","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://purplebtc.fun/","date":"2026-07-12T20:54:51.189Z","timestamp":1783889691189,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ipapi.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 05:11:37 GMT","end":"Sun, 13 Sep 2026 06:11:34 GMT"},"fingerprint":{"sha1":"CE:63:0D:F2:C0:D2:04:93:CA:AE:0D:AA:ED:9F:31:01:7A:BC:69:40","sha256":"0D:2E:E4:8D:BD:B6:76:95:B5:BD:B8:C5:CE:61:98:B9:6E:81:B5:4B:16:5C:C0:0C:C9:FB:54:0B:B4:A6:7C:65"}}},"request":{"raw":"GET /json/ HTTP/1.1\r\nHost: ipapi.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://purplebtc.fun/\r\nOrigin: https://purplebtc.fun\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 20:54:57 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nallow: POST, OPTIONS, OPTIONS, HEAD, GET\r\nx-frame-options: DENY\r\nvary: Host, origin\r\naccess-control-allow-origin: https://purplebtc.fun\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.stripe.com https://*.paddle.com https://www.google.com https://www.gstatic.com https://maps.gstatic.com https://maps.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; style-src 'self' 'unsafe-inline' https://*.paddle.com https://fonts.gstatic.com https://fonts.googleapis.com; img-src 'self' data: https://ipapi.co https://maps.gstatic.com https://maps.googleapis.com https://*.stripe.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com; frame-src 'self' https://www.google.com https://*.stripe.com https://*.paddle.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/; connect-src 'self' https://ipapi.co/ https://*.paddle.com https://*.stripe.com https://maps.googleapis.com https://www.google.com/recaptcha/; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self';\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DOinojYootPxop%2FwJRWkir%2BAuz1G8PUnND42q5QbBN%2BwgTn4WxkAdkbTLlgz77HIhGiIb9IR2XRX%2Fk0jcK6YYHt2LvYyXFMlc75uEYTw8zIp3NAir1sEfC8u\"}]}\r\ncontent-encoding: br\r\ncf-ray: a1a2f2323cea56b5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":740,"size_decoded":2103,"mime_type":"application/json","magic":"JSON text data","md5":"56fa0cc157befab41f7ca09bcbcf6ba0","sha1":"218ffc9c9caa468ff56f9abdec6fa8b77eea1362","sha256":"56ae1d62ced9e47f11decc4556f9a81def550c64ba66d466f3e5e979b7c7f43f","sha512":"0b3072e63f5c820a9042ed809be9a4ab9d051727b474a7eaf65a3e2e4275d724dce3bc3f55b7179634fa1907bebe0f1e7b302af0ae737104e53a8517fb028323","ssdeep":"","tlshash":"3c01df68e4780f7b9cb8135870786817113462175e563a8e7bd4a74d0f8d8bf30b135e","first_seen":"2026-07-09T15:47:21.439328Z","last_seen":"2026-07-13T18:23:38.071073Z","times_seen":203,"resource_available":false,"data":null}},"time_used":6682,"timings":{"blocked":-1,"dns":3,"connect":2,"send":0,"wait":239,"receive":0,"ssl":6438},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"purplebtc.fun/4d8317c93ee732c4-s.p.06us55c8_9w54.woff2","fqdn":"purplebtc.fun","domain":"purplebtc.fun","tld":"fun"},"ip":{"addr":"104.21.91.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://purplebtc.fun/","date":"2026-07-12T20:54:51.193Z","timestamp":1783889691193,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purplebtc.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 16:59:23 GMT","end":"Wed, 30 Sep 2026 17:59:18 GMT"},"fingerprint":{"sha1":"A5:3C:87:F2:35:95:F7:AA:18:09:7D:6B:F7:3E:44:84:01:6D:37:E3","sha256":"F3:FB:4F:62:15:73:24:F6:08:0A:8A:ED:6F:B5:0C:75:19:F4:1E:33:DA:36:3B:46:A0:34:A4:D3:F0:8A:A8:29"}}},"request":{"raw":"GET /4d8317c93ee732c4-s.p.06us55c8_9w54.woff2 HTTP/1.1\r\nHost: purplebtc.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://purplebtc.fun/09jorv600qllg.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 12 Jul 2026 20:54:51 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 02 Jul 2026 17:49:29 GMT\r\npriority: u=3,i=?0\r\netag: \"6a46a4a9-3c44\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5EC41nLBMlV%2F1yzftGt7PbvrZpvbSp%2BnlkWpcI7TycSC7RyAbOk3wo12l%2B3CY0%2BEU4LS%2FbR4Vo1iy33fr6ay83j%2F3jQ6W2st0S3a%2F%2Fd6P2v%2FzNDaY1M8TyyF53OcXdDt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2f209f8a41a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15428\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15428,"size_decoded":16127,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15428, version 1.0","md5":"4f5097a65c6fa30fc144e0ccb9f3beda","sha1":"c1bfaa9d675f73f45858572fa05ecc5d5df27e72","sha256":"ba727f8f8dd358cad58f6bb04a6f871c923cdd1028bf30f174cb87aa61f0a1ec","sha512":"2fd2bbe925cffeabe3fb972d1293b5b6c61bb86aaeaabff8373918d2721e66d93804cd8f30ed9dcfebfc17dd9cb433b41247b9f9382a96b03b214761798c34e8","ssdeep":"384:NiEpf0YR4QGuG8lElvEFi3ifAOlmJfFf9HTO4cKUVjL:NyZQVdlElc83GAYmff9zeKcjL","tlshash":"6862c0295b52b0a4c3b4058a5f23d3b98a3ef2914f322ce3fd146d3176951eb5e4cab1","first_seen":"2025-09-08T11:14:51.996672Z","last_seen":"2026-07-12T20:55:19.73921Z","times_seen":57,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"purplebtc.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"purplebitcoin.com/favicon/favicon.svg","fqdn":"purplebitcoin.com","domain":"purplebitcoin.com","tld":"com"},"ip":{"addr":"172.67.198.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://purplebtc.fun/","date":"2026-07-12T20:54:51.419Z","timestamp":1783889691419,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purplebitcoin.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 24 Jun 2026 20:31:43 GMT","end":"Tue, 22 Sep 2026 21:29:19 GMT"},"fingerprint":{"sha1":"FA:87:88:B9:7F:0D:85:47:DE:2F:76:24:C4:87:A1:56:A1:3B:26:D3","sha256":"CF:54:0A:B8:70:73:71:84:05:E9:FE:E0:F1:D9:83:C4:62:B1:4B:96:39:82:81:54:26:D7:AA:16:1F:43:AB:B2"}}},"request":{"raw":"GET /favicon/favicon.svg HTTP/1.1\r\nHost: purplebitcoin.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://purplebtc.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 20:54:51 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\ncontent-security-policy: default-src 'self'; img-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://va.vercel-scripts.com https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.google.com https://connect.facebook.net https://static.cloudflareinsights.com; script-src-elem 'self' 'unsafe-inline' 'unsafe-eval' https://va.vercel-scripts.com https://www.googletagmanager.com https://www.google-analytics.com https://ssl.google-analytics.com https://www.google.com https://connect.facebook.net https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline'; font-src 'self' data:; connect-src 'self' https:; frame-src 'self' https://www.openstreetmap.org; frame-ancestors 'none'; base-uri 'self'; form-action 'self'\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 12 May 2026 12:24:38 GMT\r\netag: W/\"13fb1-19e1c25794d\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=icOmdm2yNppf0X4LDM2%2BepQz5Nfr%2F0fW92wIf9TfaVtvq33Q4rcj5XLYBnUbACK4FB1V%2B5UMOXlG0kcXhevHi%2B8CzRXEYxhOdahWDulEK2CCihJj%2BlJt8IuO0LS7jZTcsG40wg%3D%3D\"}]}\r\ncf-ray: a1a2f20b8f4e3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":81841,"size_decoded":62829,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a646494f8e1a0abfe874959f2ebbe002","sha1":"48ef9729367b43538d331652cd063483d95250b5","sha256":"c846cf44f8a4cf0201d2a962c6f514e4a0cd5ddbb94c36f22daf960228188baa","sha512":"c678a8bac94c8465f6e1a3fe58524bd45080918dff2e6406a7ad1d5c3771804a1793818b350292661e775d9d208afb0c1f42c9a5a868a433c2667580bdc2107e","ssdeep":"1536:5rTEx259/EWhX87sH9liTLnU7MnSBdWiaQaTLhVjaqLmEz6ib+kXsi8Nv:v7pdaFrKanHaqLDxvXsi8Nv","tlshash":"818302485c9fab1c52e84319f6c5c7cf6ebe6d2c852d57607ac70ed22423e814334aad","first_seen":"2026-05-14T15:22:02.7828Z","last_seen":"2026-07-12T20:55:19.735552Z","times_seen":7,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":9,"connect":1,"send":0,"wait":124,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hbeugaufg1-8-26hbaaaaddoter.fly.dev/notify-visit","fqdn":"hbeugaufg1-8-26hbaaaaddoter.fly.dev","domain":"hbeugaufg1-8-26hbaaaaddoter.fly.dev","tld":"fly.dev"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://purplebtc.fun/","date":"2026-07-12T20:54:57.915Z","timestamp":1783889697915,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"OPTIONS /notify-visit HTTP/1.1\r\nHost: hbeugaufg1-8-26hbaaaaddoter.fly.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://purplebtc.fun/\r\nOrigin: https://purplebtc.fun\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-13T19:34:15.402433Z","times_seen":17219342,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}