{"report_id":"1cd027a9-5f9d-4ba4-995f-e23970d143e5","version":6,"status":"done","tags":[],"date":"2026-05-24T19:21:31Z","url":{"schema":"http","addr":"ncpurple.net/","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ncpurple.net/","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"title":"PURPLE – Unleash your play, PURPLE","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ncpurple.net/","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-28T19:21:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cookie.bladeandsoul.com","ip":{"addr":"52.84.50.20","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-07-14","domain_rank":6903068,"first_seen":"2019-04-01T04:13:40Z","last_seen":"2026-04-09T04:49:29.16639Z","alert_count":0,"request_count":1,"received_data":728,"sent_data":537,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2026-05-17T22:48:39.617247Z","alert_count":0,"request_count":1,"received_data":33601,"sent_data":470,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cookie.ncsoft.com","ip":{"addr":"52.84.50.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"1995-08-11","domain_rank":3849742,"first_seen":"2020-08-27T07:10:27Z","last_seen":"2026-04-09T04:49:28.371027Z","alert_count":0,"request_count":1,"received_data":722,"sent_data":531,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"vod.plaync.com","ip":{"addr":"3.167.8.90","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2003-10-21","domain_rank":0,"first_seen":"2020-07-02T03:23:45Z","last_seen":"2026-04-09T04:49:29.206196Z","alert_count":0,"request_count":3,"received_data":27090083,"sent_data":1454,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"community-api.plaync.com","ip":{"addr":"34.49.133.48","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2003-10-21","domain_rank":0,"first_seen":"2025-07-31T05:08:56.277952Z","last_seen":"2026-04-09T04:49:28.18683Z","alert_count":0,"request_count":2,"received_data":25777,"sent_data":1074,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"cookie.aiononline.com","ip":{"addr":"52.84.50.64","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2001-11-04","domain_rank":6178999,"first_seen":"2020-08-27T07:10:27Z","last_seen":"2025-07-31T05:08:56.912865Z","alert_count":0,"request_count":1,"received_data":726,"sent_data":535,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"cookie.lineage2.com","ip":{"addr":"52.84.50.7","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2000-04-17","domain_rank":6947637,"first_seen":"2020-08-27T07:09:58Z","last_seen":"2026-04-09T04:49:29.363084Z","alert_count":0,"request_count":1,"received_data":724,"sent_data":533,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"ncpurple.net","ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-08-11","domain_rank":0,"first_seen":"2026-04-09T04:49:27.551858Z","last_seen":"2026-04-09T04:49:27.551858Z","alert_count":136,"request_count":136,"received_data":17127460,"sent_data":76410,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ncpurple.net/","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"aa3c5f1f411dd6d2ad4f471e9daca61a","sha1":"b082ac4b9dc3c9699a7e799f457640e61785ddb5","sha256":"2c00831af36c0b4d38314d7ac050193a301e89ec90c9657f3571e3cf67370ef8","sha512":"cefcbf3fc339645d268ef7b5b7d520a3432c5b2580c28327c785590481dfaa8a48f8a4af9a48a07bbb1a23af58a5925b02bd203df9fcf25993f023e6ff53e5a6","ssdeep":"","tlshash":"6ae0d83c3089448a56132725fb2707501c3052133213c49c305cd7722f06816c49b5fe","size":360,"data":"","first_seen":"2025-07-31T05:09:15.661375Z","last_seen":"2026-05-24T19:21:48.67808Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3da987f16196842c2d8ddb3a2ac8ac37","sha1":"e362927c2b1426e3b6d1b932c3269f0892f189dc","sha256":"352f381ca83e6c61d107e557a0f18b71673eec0883f071fd5b7856abef92e752","sha512":"87f8bf6b4593d8a1072968f5f019defc73f477161bb502db6ce902ba025164ff4e1c9cb42daa158012c28fc3bc97599c287f070e26cf2d9c7a927b9217ec3d69","ssdeep":"","tlshash":"7de0c2281ea0d1350a535027753ee229319294a70801e805be8ced0c6f54beb4eaaea5","size":300,"data":"","first_seen":"2025-07-31T05:09:15.664831Z","last_seen":"2026-05-24T19:21:48.682195Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/index.es-CW50TaXQ.js","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e06a03159418cc30192883c3cea9354c","sha1":"e3d79fd176cf17200d229175cd158d56d2746525","sha256":"8b59066c808cd886dc0d639a1a5724865ddab01e90f2b218aa380fc82f8fbf41","sha512":"0fa80e12eb0517039ff417c638849341ab01a573b5a35da21f1bed960729354a75fd6dd9b3d7c0abb6aa6a52887159c6bffbd1e38277b78223cec03c800d0a71","ssdeep":"","tlshash":"7771eece5720a594ad79e39def3dcc94236916d3a2399141bf0edf18984bcd8fc884a0","size":3634,"data":"","first_seen":"2025-07-31T05:09:15.433097Z","last_seen":"2026-05-24T19:21:48.662672Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/index.es-D4Q69uTg.js","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"70ed0e6f4c327656bbd042d4f6e3016e","sha1":"fedc3c5ade0355774d7be3e4d5a59a0797ea44e7","sha256":"098f8de53a93fd086239d81d56f696cd7f7e8195e21b2699fdb8bd0480ddcfab","sha512":"50bfa8a67d6f571b2303f606f78bec3f402bf5bfdb8654cd998b797f92f44ed1889ea40772df0d1db5ea8498424a3cd72999bde223d4802a16cbf73c8543f0fd","ssdeep":"","tlshash":"331110fb45227515be3781a87466c14fb363141a2324c675fbc4311e4f891964437b72","size":929,"data":"","first_seen":"2025-07-31T05:09:15.321178Z","last_seen":"2026-05-24T19:21:48.601496Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/swiper-slide-Crj74V-o.js","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"5933adff27028213d34493b98d6c3af0","sha1":"9f70272913e4f5034b2d9b417f479e0343b84905","sha256":"fa2ccb143620d2da57257a0e1dbf0b90fb9ed671c171769bf569be0d480ceee0","sha512":"f36b01c38ddf0743e09da106df7cb7d1259e36f75402db23f1a07b2c39615dd9306dffda811481391b6edb17f25d20fff195b587a7ec26816bbef19e4d7d960b","ssdeep":"1536:wQyal2X1uCE63fAeM4Uwphwuolguxmd4KgTDlOI02Uwqij1:nX68XPA3DQ1","tlshash":"48732a95b261717ad3e716db62a9c101b3b609447409c4a4b1bc8cab686e95c03ffffc","size":76766,"data":"","first_seen":"2025-07-31T05:09:15.436507Z","last_seen":"2026-05-24T19:21:48.470047Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/StorePage-dGq9tRt-.js","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"276fc5eb3a6b698f78762d6ad116755f","sha1":"4338e39c5f90a4e51d0a97cff69fd4f2ac9e8fe8","sha256":"5e17225055beb5c49bcb664a03f56a52abcf6da6d8a5b41681bd3cf5c6d8c280","sha512":"8b533ff2d3162994134f0cd527eda4a7c4cb7fe65b4e8eddafe320fd7955fcc4fa310ceacc1e6b1d6000574706adbb4e6930f65952dd160c5e0a80760295ffe7","ssdeep":"6144:aMXUl65Zj6TbvrVRjpHJU1aGp0VENj5Kwxw:a6UlKZgbvPzVENj5Kwxw","tlshash":"1254f9faa63b31453d6ba89896b3c2083e33b40fa115c0f4b79d19554f9c781b6a37e4","size":281159,"data":"","first_seen":"2025-07-31T05:09:15.421206Z","last_seen":"2026-05-24T19:21:48.611145Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/index.es-Bc8NyCZk.js","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6290439758225d02c8c2f9a07f74046","sha1":"307ed4cb96a20ecf4be0975698b8b0a07f143a74","sha256":"24ae94998161e1f9e4d0beb7dc88dc9cc51867328d007548d0edc8c82be562c9","sha512":"6743a6aa6c15354d11889745538538738d015cabeef6e2da169a4f1f8e8502d9090174713b5036be634b04db1964bb9486ab258fd95e7dedcf00f496d8adf15c","ssdeep":"6144:P1fwvy/elILjTybRU+15tVuTNFdnoFMVJXKpw6e:P1oq/elRdDuhbdOE","tlshash":"194412e69a36e5cd4bccef1c05bf5eb0c8d52ac8c21cdddc82217e53a055977a82b524","size":257739,"data":"","first_seen":"2025-07-31T05:09:15.470298Z","last_seen":"2026-05-24T19:21:48.580266Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v833ccba57c9e4d2798f2e76cebdd09a11778172276447","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ec2f610910f9dfd8e87975604e5e34c","sha1":"10d61ee41e8fe816ca08616159d7b6b8294a2011","sha256":"aca73fc574e12740e3368860b88a284d01b643456f3ed6a06322ecb47750563f","sha512":"e7b30399c71c25762d3671fe662070cc2e236f6aef815084a2460df8bfe72e598ef2b7d84ff808a56d80e7af6227fddbfb45046ac8218ee647fe66b7c08b3f11","ssdeep":"384:qVCILwCiUg1IX33sDycq+AgMXUQKxrhxIZOGNG620vbgZLTE5egwolSV0yuuokwz:AwCiUqHmcd/5xdKZdt8Z3Cer2yuuDPQB","tlshash":"6ce219e9b595713613f350b2406f220bb33a7562588e8018e22bd7c16c78eded267f6d","size":33228,"data":"","first_seen":"2026-05-07T16:46:10.96487Z","last_seen":"2026-05-24T21:13:46.117934Z","times_seen":14738,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/index.es-DY2TpNIv.js","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"8923be65106788c32a5e4b1e615e4654","sha1":"0fa40b01e59e5d1ae7b77fc171172ea045b78b24","sha256":"6f392f487eca929ccf69d0939486cc6c5894ed26b458216eb3be0136732054d3","sha512":"605342da0cfdf66ff4c76fe953f2ba911ee9db7c75af5ffe59119d645ce58efe97b315c2e359069dc728aa8b4169b1c7ae6f21d651882b072c6e378a1708bb9c","ssdeep":"384:cPr2Mw9RW7i7+Vpl71msF4RigI34OLp3WyJwLXTJ8DVBK57bIS3zTWPF3KXP:cPB0+Pl7Qs+RCrYXTJsBKD3zatKf","tlshash":"1a62d7882260b6e542ef3688cbd4471622b44c85311e5df4707a0e766e7ed78236febd","size":14536,"data":"","first_seen":"2025-07-31T05:09:15.329787Z","last_seen":"2026-05-24T19:21:48.547302Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/index.es-NSGKIlj2.js","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b35d2ff22bd7d6439440a1fc17d3a13f","sha1":"918f40e701b26a5a378f47374fdcb0811507339a","sha256":"1d1e50d40c0ee275c055185e5ea505f358b72911bc8ff2bdb00a055774275021","sha512":"54abffbfb4162f0fcd806391775aa5ff3cf5c3b6f2fe22ad72a042e42e79ed756e6806fdae64b96abab365fc6ce465558ba17eaa150480f6ba0540328640c515","ssdeep":"","tlshash":"6dd02359559c531d57609761f7387134175d512473f5919cdd4f47410506140ef4b914","size":225,"data":"","first_seen":"2025-07-31T05:09:15.587159Z","last_seen":"2026-05-24T19:21:48.64934Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/index.es-C7NLXiMk.js","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c9d7707701edc9fb7990e03c0ea20a0","sha1":"ebce3a8411b57d261851646aa770f0aeebdeeb65","sha256":"bff649ff296a845476d28188f35f4a79f2933e26484f4cdff11c9391aa537caa","sha512":"f403b6753eda9abd4e4f86609441e7899696c0b1dca4ee4ed82b02610eb0d97a3f3c401db59737b56ac064b0d81e7085fe1906daa27cdc30af49f4ccd4a6b147","ssdeep":"","tlshash":"911154d94b70849899aaa496fe1085c8118f6cb6ef7213be665fcb04c046f80e30d9a4","size":942,"data":"","first_seen":"2025-07-31T05:09:15.461686Z","last_seen":"2026-05-24T19:21:48.661506Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ab2208a25f7d7f39de2e45f287611c92","sha1":"a890d9b9a8d00fbb7ad6324ecd5f3fe48594e612","sha256":"a1a98a51a172a1a99c59cec7819029b2cb9036ac2f76af71a4125b1c2720e71b","sha512":"6cc5050f708c64fff62f61d980254f7454491c38a252c44a77d646b8800af6ba29f639d576c9a7cdca3c13f3978326c931fb10f9222d1f03a29b9adae6f02491","ssdeep":"","tlshash":"a6b0120c14a7a0106791300c1505ea2cf3168067009d0d31fdf889592f4840ff1ec3dd","size":106,"data":"","first_seen":"2025-07-31T05:09:15.679279Z","last_seen":"2026-05-24T19:21:48.684373Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/js/config.js","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f8b10e80afca68829db6e7df87b82b0","sha1":"77a96d22594986810b47b45bbbafc42e567bf2f1","sha256":"b190c4d67a7fc2ae523cec21a8e73f9d230a7b1c4e62d6b965ddeae333bdecd1","sha512":"53b95f7b754c225dbd6f9fccd60753caa7c5ad08bb378b2973d6cf5006c9e6b1f39081995b13a37abe4415f696bf179349bf0bfadf657b736470ec37258cf214","ssdeep":"384:CHBXdGBhPje5pqDBZYoyhVWkgR4PHiWi0Zy6hy1:CBMje5gA2X4PHiheg","tlshash":"55b256a8037465fde8289381225d338b7855f66f49cace68fdf44d8c97e532ca888537","size":25132,"data":"","first_seen":"2025-07-31T05:09:15.312925Z","last_seen":"2026-05-24T19:21:48.508505Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/index-B9cTUicF.js","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"259b9cb2c8ac6a1e25297a1932327bcf","sha1":"61062d6322b33cb671fa89c00876afd0f079f9d3","sha256":"0ac60dad0946babd10e9b4c44a521d6c8f8a08d110b06ff99e3df9d8b391cb5a","sha512":"9fb96b2715e413859bc2f6a02b74377db7aa0ea8e78e9f1f000678489b4e21d83cf7e51d39738568e804a294f46e6b6560f216d7d62304c0a7cb1a5d15a7cc9a","ssdeep":"49152:ythPF6gl9on3fzYYOOJOzxpJkcwC5mfUe8LesKEhKpaG+Ih+Vc6g9vKr8xucqFvc:EhPf7kQLqaGl+W6g9vKrC2LbFlor","tlshash":"b2268ede728e24b2128341a278bb310ab23594277544d0d8f66de5f829f4e1d523ffb9","size":4505369,"data":"","first_seen":"2026-04-09T04:49:40.898697Z","last_seen":"2026-05-24T19:21:48.686071Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/index.es-BBHhX1sC.js","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"2a0be953c35fbf328da84b2823907a9d","sha1":"46a606453494a5a97fe421679fa2c7225b4d3fb9","sha256":"8944fd84b1b137cb1e80a96b27473e7dcb5825b5bd46b401c485cfcb51be48a1","sha512":"d1ff0f4fe4cd47303d78cdc56b0a1ab54dd4e8edc82c6ffa9ebdaa9445ae9058d8f687c2b2311e7f10ea7f76dcd902767d863bac4f4f9c0d48d47dd7550e5e2f","ssdeep":"","tlshash":"3ff078d4dc357aaa095f92dc6621c4898377e53fbb23cbace30121600eed98421ae750","size":654,"data":"","first_seen":"2025-07-31T05:09:15.369262Z","last_seen":"2026-05-24T19:21:48.510452Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/index.es-CrMYF0zS.js","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b51757686fcb8b9fc1843138b579434","sha1":"b653134e3184bb5acc9cb9686b3bfbb6d17512c3","sha256":"4ce2835b77106394f5e6fec6859da7d06e0b5d4c0fc77f4ba881dc42b8686182","sha512":"fcdc5405f26e17425f5dfb2990d7ba0cc072af8fa4946ea3a702b8364310a9afee31ad3a7338f54f73b6d07e3ed1a0182e1b7658e38770bb694b7f37fe0a4334","ssdeep":"","tlshash":"f9d097ecc40cda4c8a418331ca385bc0bb3eb94c362c20acb1d42e702407991e81c645","size":249,"data":"","first_seen":"2025-07-31T05:09:15.380452Z","last_seen":"2026-05-24T19:21:48.487292Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/index.es-DW6-_W8u.js","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b72b9b373cadedb1044f7bc95bc50e8","sha1":"8a68f37deb0ce78a8444a47973827f3624f29e07","sha256":"6952eb9cf0a112edd6822a209122ee97340416c1330c7eec22d5c702996b42f5","sha512":"edd7b0c73af1d9ec288d0b144ab5209319ed846fb5ae8d8678af46047c6fe663c914977528e7a635f31d05fde771dff7a9a819b0e050975ae0df499ce230b381","ssdeep":"","tlshash":"2cd097249b97fbb1818d4b208f3a3ae1320ab189a35819dea5a012221201835b60aea5","size":258,"data":"","first_seen":"2026-04-09T04:49:40.734695Z","last_seen":"2026-05-24T19:21:48.573211Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/index.es-BJODB19i.js","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ccceb4cd3790cc064999e2e4196cc3e","sha1":"1d88f01b8ab7b48e44056f2806b657cfad4f625f","sha256":"9904d90416f220deb3dcee7226794ac705743ad4e4af490e67662650748452a6","sha512":"661d71b86100422362370b8ef73d2d923d947a2816811884cd63f1bd28fc6f45f93a8489a4357c8cb1498659f3ec87a698783a02ea4a8ec5e31060fb6dab8a7b","ssdeep":"","tlshash":"ab01f49583205f44d5e399cedf7a6e88320d11e64b3bb0dca9d2e50594d3380bf08d10","size":674,"data":"","first_seen":"2026-04-09T04:49:40.889972Z","last_seen":"2026-05-24T19:21:48.615841Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c8dfdffd5b431a2efa22a19b5e9ec546","sha1":"bd3ab4853969149390936c07c7599030647b5606","sha256":"bc8758bb0dfb4bc6d0542935349c0972bcb19365124263a049e1612c23adaabf","sha512":"3fc829a145c17994dc6a6f51ec0bc3d553ca7caaafd7f99e76aef17355ae963f22a837c72640c0dd179919f3dc4ad4a143829260ecda8ffbe234d40a674174ea","ssdeep":"","tlshash":"47f0d4fc70961d7e17ee0ba00534b740e75560af83440cf6fcf09e94a56f1af6412088","size":486,"data":"","first_seen":"2025-07-31T05:09:15.685051Z","last_seen":"2026-05-24T19:21:48.687242Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/js/protocolcheck.js","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"582bb6a03c7cd4686b8910a445cd0d1b","sha1":"4e260a3f94f4a4d67f2a65ec9f8667a8c1dee3fc","sha256":"90a4847d54a523130ebef3c72c9c5dc2fa8504156fd41146d3b1a9c9f1d24dec","sha512":"13ee077e23f9173a91011ee4bc516a7760b85baf05d13211e8fff2a27d469f28d494c1be3c9c8a2338801d5bf8595460a09d7bca30ad6568f39beb1dae16cc79","ssdeep":"192:BbjR1Ga+lMwpkkj4c6LcP6CO/iUdfWfTqCAOEKuscrIjkhoXtZP2/4n/nDECSn/r:NUv4RcS/iofe0OEK/ZQhoXHlMn/hN","tlshash":"5f02218a6af260a25323743a84ef41087671819ba40c8d44fd4da3a49f5553973ebfec","size":8546,"data":"","first_seen":"2025-07-31T05:09:15.316322Z","last_seen":"2026-05-24T19:21:48.632422Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/contiQuery-YtB1kzRf.js","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"276b66ba84c7cbb4cab0032871280235","sha1":"81016fbf7bfc173400e4c2253106f7d5b4687785","sha256":"5905c21a5c48158408eafb64092909a1bc13c03e5b114fe687b987115d90e05e","sha512":"9a7d4cc33b810995a2169c0c5b9672da5dd4f423d8e6d5b8a6582daa40decdfb057aa2fc084a69b74b447796fe19b9375193e8233ede92a3a5ab40d7dc46a0e7","ssdeep":"","tlshash":"7d6182d82196e1a35a7b44d2e07b4157e234a490708d8aa06dd8ceff2c9441e12a3f3e","size":3334,"data":"","first_seen":"2025-07-31T05:09:15.497059Z","last_seen":"2026-05-24T19:21:48.480466Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/index-CM0pqhPq.js","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"215a20ea83d90f10dcfca215e12d16f7","sha1":"d74ab8f5eed0493e5c9862947f29dd37aa77d346","sha256":"9212c4d40c548eb2353b38a9596404a30e83e4b08b137e5e93e728a2aa87b0b8","sha512":"3a4e2f3b69202c63a9f651561ce538036ec9c285b67d86d7e735c8443eec9e36118da6ca130127c5385baa1e8e5296f85764c61e27e57e162c460ab246daaab4","ssdeep":"49152:tuOKuEBhPvk2Q9V32mspWLgnQaPnpyZg/v8:tuOK3k2wnjH","tlshash":"02b5afab5289203706420397f54f3645b3b8487ab753a0e294ddf83932f6759c137eba","size":2453835,"data":"","first_seen":"2025-07-31T05:09:15.675102Z","last_seen":"2026-05-24T19:21:48.69192Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/uikit/ncui/1.7.20/js/ncui-cookielayer.js?v=1","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"08e3847ab936c60822138a99c09a3772","sha1":"799fbf69418f5d0496d526a478fec3bfdca28e97","sha256":"c111876fe14a246fdfbf00ac33649c6717e6cfa896878c309ad064835763d979","sha512":"8366418d93a824592bc58a90f53d4e5c7cf5ff552e34d476779c8b4fd7101288619632d16f0d38f42f57b629e5ac5691758a0a1152a1b42d7790ced781eeb7ec","ssdeep":"3072:MdDj342GscIxQH4vXf7SIC2j8YXXV18Z5I21D/HVX:0/xGscVkf79/8YXXV18ZJZ","tlshash":"a90409cdbad2f07903a35690c42f540ae23b2a64b44d94e0f69dd8d16ab8d4f8137f79","size":188047,"data":"","first_seen":"2025-07-31T05:09:15.525043Z","last_seen":"2026-05-24T19:21:48.466431Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/purple/vendor/googleAnalyticsBuilder.1.0.0.js","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"72a37343b4b27a8935613410805e24f9","sha1":"7429d59f2f75ef7087b7c8c8957bf55f7b7fb4ac","sha256":"0548c8a2647fac9cb081a89cc5c92cae324603d0c4db4ac32f1f3daa83e20512","sha512":"b2eb467d996bd4df2f408fd1ef7d145c42f1bf10455155903cbe42278120fc092062b748ebe3d50cc088908a241fe4ba4ca71775b9be924c230499a0d6f5d15d","ssdeep":"96:FpFad0eoGuiQI0CEqSd/LCBM9udT8MA/ksn9EdT0MAT9pva9EdTb:cqviQI0CEqZMYdTc/kWWdT0nvaWdTb","tlshash":"5a9165183bf501ac18cb70ba2f89a1013232c027d6966e267edd86a84f90d715fd1fb4","size":4323,"data":"","first_seen":"2025-07-31T05:09:15.606165Z","last_seen":"2026-05-24T19:21:48.527022Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ncpurple.net/s/notosans/v39/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7duw.woff2","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:09.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /s/notosans/v39/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7duw.woff2 HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncpurple.net/css2?family=Noto+Sans+KR:wght@400;500;700\u0026family=Noto+Sans:wght@400;500;700\u0026family=Noto+Sans+JP:wght@400;500;700\u0026family=Noto+Sans+Thai:wght@400;500;700\u0026family=Noto+Sans+TC:wght@400;500;700\u0026display=fallback\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:09 GMT\r\ncontent-type: font/woff2\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 22 Jan 2026 08:48:41 GMT\r\netag: \"6971e469-8c00\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncontent-length: 35840\r\ncache-control: max-age=2678400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DCgNdT1487a1NiLlrQASb2NlcGN2PK8rJMzh595n8Ztmf7ErN23fkp88%2Fyoft%2BOnA3GuC%2BwR63jT7cZ%2BOIL4U5x5g0TDmJLK8WJKwbaDItg8LvU10AbQxIm8QO9KJw%3D%3D\"}]}\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00ea96ae80db505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35840,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35840, version 1.0","md5":"00427f129772e9f049050a50407952d1","sha1":"0f9e19ecc1d89758fd59d187f35b5a73e499eb45","sha256":"086bfcad0e112af1c9ac0cdea1744dfb11dfdda61906ceee1b32439437096add","sha512":"26478f6744d0875901f6c20b13f4303abe0d579ac2ffe02b74a5cee4a6af48b23a6d611116fc5f1f1b9aa6ef8b083a992e80aa1675e3a211b5332c480050e90c","ssdeep":"768:haAL1lUUxZ+mIxfVJ5tYBU+ma5q71y9SWeGt7UMaVJc2PtupNFtpXjN:NLEkxyJjUUza6ygxGWMaV67/LjN","tlshash":"c3f2f15f368e8e17f4d8691c5a667d523e022dfc9e30c622504f5efd3939320946ceaa","first_seen":"2024-12-04T23:04:18.137977Z","last_seen":"2026-05-24T19:21:48.454989Z","times_seen":2035,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":243,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/api/conti/content?service=PurpleStore\u0026alias=PurpleStore_Cookie\u0026language=ko-KR","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /api/conti/content?service=PurpleStore\u0026alias=PurpleStore_Cookie\u0026language=ko-KR HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nGateType: ApiGate\r\nX-CountryCode: TW\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:10 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\nmd5: d5c404dca68248314e5cc415e2fdc2fa\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KuiqyayyZwuM2ox1NXLSxI8yvfkBZ3JLvCRJCe8ZRLt9EtuT7F9sew2V%2B4s%2F0KNg%2BK9xQLC85xSGI6DRlY0sDGoNFBQCx8hhaXJ34XDh3XYd8cQIAiID%2F%2BoLjwU0NQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a00ea96eb88ab505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2719,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f0b588e76c478ad3172d726148c60106","sha1":"1cde77b77c504ba8b28534f1a9d97782b0000ee0","sha256":"da6b89dbd35e275a1c8e2eff2faa67abf7609ae017ddb0b0f4cdf51a01ca75d9","sha512":"81026bc14622d4a6cdfb490c150db861e7d2b3a56309d3b6619d5f7073a179b31610f883b6e77aa5ea0ded66945a479c6ab58fa5b61924fd04fb29a10250593c","ssdeep":"","tlshash":"1351a199e4282e0a13cba6783d2f9c32b41423e7d5a8448d3f8dd52c430d93dba527da","first_seen":"2025-07-31T05:09:15.542509Z","last_seen":"2026-05-24T19:21:48.457023Z","times_seen":3,"resource_available":false,"data":null}},"time_used":540,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":540,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.116.woff2","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.116.woff2 HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncpurple.net/css2?family=Noto+Sans+KR:wght@400;500;700\u0026family=Noto+Sans:wght@400;500;700\u0026family=Noto+Sans+JP:wght@400;500;700\u0026family=Noto+Sans+Thai:wght@400;500;700\u0026family=Noto+Sans+TC:wght@400;500;700\u0026display=fallback\r\nCookie: country=TW\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:10 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 71672\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-117f8\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 0\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9%2BQxGOGrj4MWk67xWBKcvnkQvDYa29ValYWUTZxbAKm6YbFPr1ATP7yfaP%2BlRZMOZEI4Wj%2FpBtORr3XV1GdXRO2Y7AH21bjsotIl8fVNFfJA63blKJYsmss9lOKLSA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: a00ea972e934b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":71672,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 71672, version 1.0","md5":"f2fa4cadf0b68b868b744e813fd23860","sha1":"7bf9c03148e342b289ec5990c099a2de5bc410ce","sha256":"304dafaa54b29dfbe7c4715b59c26bc40163ddd887275d3b4c2cc2cd09c8b873","sha512":"5764a94fb5f2a34df8740ffef083cd4fc8be6666dcf6285e52c0951eb3bd51dc69cbd43fc5af7612838bea350f6cabf07ed3ae2a465229182c53a2a5108e762f","ssdeep":"1536:YGPSxM1QomyFXwaJzp5N98RntoQwAtm0W2HS3uCj:OKQo7wud6toQtB5HS3j","tlshash":"bc630261393e1b41983a9e7191b9e2b11880687fcbf51a65b12ef67cb18c18eccd75c3","first_seen":"2024-08-02T10:54:25Z","last_seen":"2026-05-24T19:21:48.460384Z","times_seen":904,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.107.woff2","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.107.woff2 HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncpurple.net/css2?family=Noto+Sans+KR:wght@400;500;700\u0026family=Noto+Sans:wght@400;500;700\u0026family=Noto+Sans+JP:wght@400;500;700\u0026family=Noto+Sans+Thai:wght@400;500;700\u0026family=Noto+Sans+TC:wght@400;500;700\u0026display=fallback\r\nCookie: country=TW\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:10 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 73140\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-11db4\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 0\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q8y0CrTwjCNXEh%2Bdvzz%2Fv50%2Bv%2FPpSpuh6eJy4%2FeojyDJaBKXZpxtv8D3umP%2FuC%2FKi%2FuMMz0rANYM04Y8t3d145tdOhRIn6pYllIzQl6OSPeQub9%2FBtwbscWCZZheRg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: a00ea972f93bb505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73140,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 73140, version 1.0","md5":"e5e0e0ff6b47dd02e8a978e2ce6d37f4","sha1":"536523dc9b24be05924312de98836e93506533f7","sha256":"768cbb9dab1f998630152bf220e7635f369a5cbfb47847f27b0a9628d256c09e","sha512":"650246ee513aee54d6599ae5a4c1980c3ab844f20a204e44cefddcbbc009b9d72d1505deedd2ad0251499f4d66135405457e72eddaf09d0482531f88be46b186","ssdeep":"1536:7ko9ohMoEuE+NuYJwdEAK9jLKcTnc4Z9V0F8aDSkqAHOLI:o2oCFJYWdEACj5BvVg8ar","tlshash":"0c6301142c07cba7c19d27bdb522f4a15e1071c55d29e6f3039c896b845ef6f2a21b78","first_seen":"2024-08-02T10:54:25Z","last_seen":"2026-05-24T19:21:48.46383Z","times_seen":643,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/uikit/ncui/1.7.20/js/ncui-cookielayer.js?v=1","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /uikit/ncui/1.7.20/js/ncui-cookielayer.js?v=1 HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:11 GMT\r\ncontent-type: application/javascript\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 25 May 2026 04:22:37 GMT\r\ncache-control: max-age=2678400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\netag: W/\"6971e46a-2de96\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bWmOlmyIRSDpXeO241BJzEhu3CWXFyruIOuH4YGpNlPMqL30VixLhTJypaxbrQzLrPefjWjQZumd1eTmFPvRuMgvYKHFRQ4U4Gr%2B%2BpBWb%2FvMe9F8HalrxxOWHchW8A%3D%3D\"}]}\r\nx-content-type-options: nosniff\r\ncf-ray: a00ea9733947b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":188054,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (56610), with LF, NEL line terminators","md5":"08e3847ab936c60822138a99c09a3772","sha1":"799fbf69418f5d0496d526a478fec3bfdca28e97","sha256":"c111876fe14a246fdfbf00ac33649c6717e6cfa896878c309ad064835763d979","sha512":"8366418d93a824592bc58a90f53d4e5c7cf5ff552e34d476779c8b4fd7101288619632d16f0d38f42f57b629e5ac5691758a0a1152a1b42d7790ced781eeb7ec","ssdeep":"3072:MdDj342GscIxQH4vXf7SIC2j8YXXV18Z5I21D/HVX:0/xGscVkf79/8YXXV18ZJZ","tlshash":"a90409cdbad2f07903a35690c42f540ae23b2a64b44d94e0f69dd8d16ab8d4f8137f79","first_seen":"2025-07-31T05:09:15.525043Z","last_seen":"2026-05-24T19:21:48.466431Z","times_seen":3,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/cookie?k=geoLocationInfo\u0026v=%7B%22isGDPRCountry%22%3Afalse%2C%22geoLocation%22%3A%22TW%22%7D\u0026expires=1795202472","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:11.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /cookie?k=geoLocationInfo\u0026v=%7B%22isGDPRCountry%22%3Afalse%2C%22geoLocation%22%3A%22TW%22%7D\u0026expires=1795202472 HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:12 GMT\r\ncontent-type: text/plain\r\ncontent-length: 0\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-0\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P5cVnHnYDgvjsAoG9g3mfZgD6faqHr%2BaOZgzXKEdrQEizxvqtr8oJsNgZZrln8KtwAf%2FPQr9TLzlDQOXx16mvsX02Ywa6Gt4S%2BYAcQTDArhaH70BJ8OopqLXKxBwgg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00ea979d9a1b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-24T21:08:01.202482Z","times_seen":15673710,"resource_available":true,"data":null}},"time_used":463,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":463,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/download/v2/buckets/test/files/19135b3b705-11c7b901-3012-4fe7-85e4-ebcfbefe1171?format=webp","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:12.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /download/v2/buckets/test/files/19135b3b705-11c7b901-3012-4fe7-85e4-ebcfbefe1171?format=webp HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-24T21:08:01.202482Z","times_seen":15673710,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/swiper-slide-Crj74V-o.js","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:08.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /store/static/swiper-slide-Crj74V-o.js HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:09 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5dwDv06TeevYNQEYVLJtntrwdW20vD%2F9INNGPRjNYpe1ssh9QojW9sYtS0jh7Qh63LwzN6Y1%2BPiJ1kNNp4KzVR%2FPDLOCL66sgU7hC1efqpBi2nYurlWxzLqd0L5oZw%3D%3D\"}]}\r\nexpires: Mon, 25 May 2026 07:21:08 GMT\r\ncache-control: max-age=2678400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: br\r\netag: W/\"6971e46a-12be1\"\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00ea961cecbb505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76769,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5933adff27028213d34493b98d6c3af0","sha1":"9f70272913e4f5034b2d9b417f479e0343b84905","sha256":"fa2ccb143620d2da57257a0e1dbf0b90fb9ed671c171769bf569be0d480ceee0","sha512":"f36b01c38ddf0743e09da106df7cb7d1259e36f75402db23f1a07b2c39615dd9306dffda811481391b6edb17f25d20fff195b587a7ec26816bbef19e4d7d960b","ssdeep":"1536:wQyal2X1uCE63fAeM4Uwphwuolguxmd4KgTDlOI02Uwqij1:nX68XPA3DQ1","tlshash":"48732a95b261717ad3e716db62a9c101b3b609447409c4a4b1bc8cab686e95c03ffffc","first_seen":"2025-07-31T05:09:15.436507Z","last_seen":"2026-05-24T19:21:48.470047Z","times_seen":3,"resource_available":true,"data":null}},"time_used":923,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":922,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/s/notosanskr/v36/PbykFmXiEBPT4ITbgNA5Cgm20xz64px_1hVWr0wuPNGmlQNMEfD4.84.woff2","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /s/notosanskr/v36/PbykFmXiEBPT4ITbgNA5Cgm20xz64px_1hVWr0wuPNGmlQNMEfD4.84.woff2 HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncpurple.net/css2?family=Noto+Sans+KR:wght@400;500;700\u0026family=Noto+Sans:wght@400;500;700\u0026family=Noto+Sans+JP:wght@400;500;700\u0026family=Noto+Sans+Thai:wght@400;500;700\u0026family=Noto+Sans+TC:wght@400;500;700\u0026display=fallback\r\nCookie: country=TW\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:11 GMT\r\ncontent-type: font/woff2\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-d3f4\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncontent-length: 54260\r\ncache-control: max-age=2678400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SBpPkk84xUXGIqEZTvrk72%2FIV6GeaDH55tDGqgb9YJj0%2F8CwPJbYQblvYM2WdD8TxTLH2eHShBxRoKxztR7qhueVJjX1SPoIWn7urWegLzGODTpu%2FEZAZaUk5amk4g%3D%3D\"}]}\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00ea972f93ab505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":54260,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 54260, version 1.0","md5":"10f2b89b14698f269caed2bf324220c9","sha1":"3ef8f6cfb318473616763c42ee4c5244a4ce46f7","sha256":"4bfca0a5e37d2514034460a8f436bc215fd9bbf1cdce76e416e22db4cd2c92c6","sha512":"41b7c93e5a173fdab8b77bdff107bb07e39868ff10487d0751545d60593be2caf0879f68318d420a41c401588d257222e5946a23286b209a733e24dfdb00e4cc","ssdeep":"1536:6qOvSI4MbW5Z0aIEdthozDo4/1keS9DyyD6z32fLV5R:6qOOMbWX0vEugi1S9Gy832fd","tlshash":"cb3301238b6c7106d37c7ab977f4816a4efe994917c17ca5b6c8b60a7212d320f520b2","first_seen":"2023-11-01T20:12:16Z","last_seen":"2026-05-24T19:21:48.472421Z","times_seen":20,"resource_available":false,"data":null}},"time_used":876,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":872,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.26.woff2","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:12.182Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.26.woff2 HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncpurple.net/css2?family=Noto+Sans+KR:wght@400;500;700\u0026family=Noto+Sans:wght@400;500;700\u0026family=Noto+Sans+JP:wght@400;500;700\u0026family=Noto+Sans+Thai:wght@400;500;700\u0026family=Noto+Sans+TC:wght@400;500;700\u0026display=fallback\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:12 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 22856\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-5948\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DhRtc8bBp5aK2CqpxkfEvH2AuyrZ%2FBXo1MXR70mXNpSR1e%2B2M5sDU5UbpMP2w1tJUAZSgo%2BBma7G0VLuDf5bD9xUOEHI8g1m32QOmPpu8EILp3sPxk9aqnxNQ6RL0A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: a00ea97b29cab505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22856,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22856, version 1.0","md5":"53443a9c8c609665b722647217a6f1f2","sha1":"61686c239b37653f185da61823e2547520d3a3f2","sha256":"509332c3447255328309d8273a922f11c755e0891dbfe1189af41b7be40d3066","sha512":"ea06501e7f1d346dc5ecafe82cffa1bbddd1e70b5e5478df1ea6d7c9727aa476a9a739c96f22416dba64290624fbfdcf5a9b29f77175d22f7583874e929cefef","ssdeep":"384:SayvULvVj9UoPc5GtOuSGFl5gweRS9wnjtXuKQxb1yYbZcUJU7jzSBqw+Ms6JIhB:SNw9jq5GQuD5gpHlxwbQYqnj6qwvswI7","tlshash":"39a2e0a6aaa95473cc02c0af37cae076eb8ed5a07ac19c052e8d5943771f8d33c114b5","first_seen":"2024-12-02T07:58:01.184696Z","last_seen":"2026-05-24T19:21:48.473737Z","times_seen":46,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/static/pic/001.webp","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:12.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /static/pic/001.webp HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 29994\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-752a\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\ncontent-range: bytes 0-29993/29994\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rMU3dOLCApKRjHFFKCDaHY1aF8K00TXav8GCKC4kv0ejx9OCRunDuw4de4%2BxHRX6TXwi4Zv7088QZtymzqneePrWRiV%2Bf841wfu%2BhWE7L1NozXK8OTwaQ3CD%2FpRatg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: a00ea97bfa07b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29994,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"58caf2e68fee9871124499a0fa95c39f","sha1":"b67888c97155e15472f2b6e867f62445c1e44324","sha256":"595a7b4ef71bbe60beaeddffa8e023bbcfebe08947facb6a64ede866a27be7ce","sha512":"7c21809df6e82052fa0ad69880e5dd5d495106ce6de56df236a037774e4f6a52d7b6888f1bcb53449e4fcf893dfd0bfa67f2f4612c2a4b3a683d8e7b6b5799f0","ssdeep":"768:TNA5f0zoaCrUuZz4rMHfNBYLqPtram4QY0+9FtlhM:RA5c0Yu+rwB/Za0M","tlshash":"41d2f141011c56bce8d28e7111207fd6d8563d6a8d5aae6b3d1f8307270b3befb88d88","first_seen":"2026-04-09T04:49:40.710027Z","last_seen":"2026-05-24T19:21:48.476055Z","times_seen":2,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vod.plaync.com/PURPLE/2023/store/L2M/L2M_TW_JP_NR_01.mp4","fqdn":"vod.plaync.com","domain":"plaync.com","tld":"com"},"ip":{"addr":"3.167.8.90","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:12.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.plaync.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sat, 19 Jul 2025 00:00:00 GMT","end":"Mon, 17 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:F4:CA:BA:19:28:7E:5F:EF:F0:BD:28:39:57:94:56:2E:47:65:1B","sha256":"C0:63:94:54:91:29:48:B1:DF:D5:1E:5C:28:CA:92:EA:18:15:D5:90:C2:AC:7F:9F:C0:FA:A7:D8:CE:9A:38:67"}}},"request":{"raw":"GET /PURPLE/2023/store/L2M/L2M_TW_JP_NR_01.mp4 HTTP/1.1\r\nHost: vod.plaync.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ncontent-type: video/mp4\r\ncontent-length: 13685472\r\nserver: AmazonS3\r\ndate: Sun, 24 May 2026 19:21:14 GMT\r\nlast-modified: Mon, 18 Sep 2023 01:42:33 GMT\r\netag: \"8d7b5ea003903b26d297c8c418c4aab7-2\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: e78919dff17937adfcfdf76bb56a99381b7ad80dc73405b46bd0f054a372b9e3\r\nx-amz-meta-s3b-last-modified: 20230918T013940Z\r\naccept-ranges: bytes\r\ncontent-range: bytes 0-13685471/13685472\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0dab08166aa7b915b2e3314728d79750.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: iAaRGntkDZb7n76kPJHtb_i4CaVlICiMZ2klE3HzHJnas3pkEWivMw==\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":13685472,"size_decoded":0,"mime_type":"video/mp4","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-24T21:08:01.202482Z","times_seen":15673710,"resource_available":true,"data":null}},"time_used":4403,"timings":{"blocked":428,"dns":144,"connect":4,"send":0,"wait":730,"receive":2812,"ssl":280},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/s/notosanskr/v36/PbykFmXiEBPT4ITbgNA5Cgm20xz64px_1hVWr0wuPNGmlQNMEfD4.87.woff2","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /s/notosanskr/v36/PbykFmXiEBPT4ITbgNA5Cgm20xz64px_1hVWr0wuPNGmlQNMEfD4.87.woff2 HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncpurple.net/css2?family=Noto+Sans+KR:wght@400;500;700\u0026family=Noto+Sans:wght@400;500;700\u0026family=Noto+Sans+JP:wght@400;500;700\u0026family=Noto+Sans+Thai:wght@400;500;700\u0026family=Noto+Sans+TC:wght@400;500;700\u0026display=fallback\r\nCookie: country=TW\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:11 GMT\r\ncontent-type: font/woff2\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-aec8\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncontent-length: 44744\r\ncache-control: max-age=2678400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JLbkWe17QSvM8kBlIAKz%2FMQauFSpZ%2F%2Fpj3CttdInxuj2WujH1ctRpWWYfr4pp0xxDJdMkBwHCANM%2Fn619nwBPIv1ly%2Fv0k3xNsbwNJGw2UmFiP%2FIWFEbkUQlW%2FYXyA%3D%3D\"}]}\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00ea972e938b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44744,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 44744, version 1.0","md5":"ce8a8622268733a4d1aac40e91bf4b16","sha1":"cf72faff29970710c14b45c0ef464af0d1be170a","sha256":"82de17d62528a677a9d4eb9259b63205902db153a27027f7af318cc575dfdeb1","sha512":"0c452916ca232f1b6ef945b085a5e3b1f2df5c9d90671f7e97c68818abcf3a3250784fbf351fd31d25453a6a4fec0b4f0b5f6d3b6806a0332f464bebd5a914e9","ssdeep":"768:0XlaOWy9MT7M1q7ZuW7gfgbwjb4iRsdxQ7HbqljMjeC/qS1uuPvE0vf:yWgQb7XbwY58jb4Y6RSv3Lvf","tlshash":"9513f1735df1a5a3ed638071b20af22f2646852e73ddc9b38a7f901ee90a55cdc1431a","first_seen":"2023-09-17T16:59:38Z","last_seen":"2026-05-24T19:21:48.478152Z","times_seen":23,"resource_available":false,"data":null}},"time_used":787,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":785,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/contiQuery-YtB1kzRf.js","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:08.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /store/static/contiQuery-YtB1kzRf.js HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:09 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t7KCG7%2BYqE69KRg3w3w51Z%2FPWuTrMXAq7km9KbOqebu%2BPKZ3lLypQmKxQi9kPgekBXbFfMHmIt%2BQgon8mEUz0qVGrcvV7meKDt8vLxHrZXca2bf660ZZRBtJf7Eq%2BQ%3D%3D\"}]}\r\nexpires: Mon, 25 May 2026 07:21:09 GMT\r\ncache-control: max-age=2678400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: br\r\netag: W/\"6971e46a-d09\"\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00ea961cecab505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3337,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3333)","md5":"276b66ba84c7cbb4cab0032871280235","sha1":"81016fbf7bfc173400e4c2253106f7d5b4687785","sha256":"5905c21a5c48158408eafb64092909a1bc13c03e5b114fe687b987115d90e05e","sha512":"9a7d4cc33b810995a2169c0c5b9672da5dd4f423d8e6d5b8a6582daa40decdfb057aa2fc084a69b74b447796fe19b9375193e8233ede92a3a5ab40d7dc46a0e7","ssdeep":"","tlshash":"7d6182d82196e1a35a7b44d2e07b4157e234a490708d8aa06dd8ceff2c9441e12a3f3e","first_seen":"2025-07-31T05:09:15.497059Z","last_seen":"2026-05-24T19:21:48.480466Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/css2?family=Noto+Sans+KR:wght@400;500;700\u0026family=Noto+Sans:wght@400;500;700\u0026family=Noto+Sans+JP:wght@400;500;700\u0026family=Noto+Sans+Thai:wght@400;500;700\u0026family=Noto+Sans+TC:wght@400;500;700\u0026display=fallback","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:07.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /css2?family=Noto+Sans+KR:wght@400;500;700\u0026family=Noto+Sans:wght@400;500;700\u0026family=Noto+Sans+JP:wght@400;500;700\u0026family=Noto+Sans+Thai:wght@400;500;700\u0026family=Noto+Sans+TC:wght@400;500;700\u0026display=fallback HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6971e46a-f11fd\"\r\nexpires: Mon, 25 May 2026 07:21:08 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iaVBPpu7kPK1tuvE5HenF0kMEQyUcoqG4zcfr6%2F%2FcWRb%2BcW9c4Hv33Op45i1ufeQoOioTeqruhUS%2BolSKCTc2%2Bv3eLFfgIFIU2Wu8cJkIa%2By%2FlNGQ%2FV6SkuM%2BOS27Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a00ea9609eb9b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":987645,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1981)","md5":"af1e57c96d77db65631d15fa45018a17","sha1":"227a63fb69a4add67ab94ae36a88554451386d34","sha256":"b3ef0512d1c8f4186d2170cd77b87fb1bd2525cc26ae3ac34f6d6841f321a2ee","sha512":"b800d06372c24bad1df5c91dd1df734c27ebcfe5e600e03a571a6041c5884d8ecf44f84b6f7bdccdb28edec0c3e040a5b349be3dc1c9a4c14083e831d91d321c","ssdeep":"6144:QCxRJVKmAZOqs+VgN56oU5mFA1o0AmClQ268b:5xQmGsv","tlshash":"24251da0490799dffee75ce652ced522beac24b8f941893c52f50983ac0a01dd1d7b8d","first_seen":"2025-07-31T05:09:15.44643Z","last_seen":"2026-05-24T19:21:48.48283Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1527,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":979,"receive":548,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.107.woff2","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.107.woff2 HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncpurple.net/css2?family=Noto+Sans+KR:wght@400;500;700\u0026family=Noto+Sans:wght@400;500;700\u0026family=Noto+Sans+JP:wght@400;500;700\u0026family=Noto+Sans+Thai:wght@400;500;700\u0026family=Noto+Sans+TC:wght@400;500;700\u0026display=fallback\r\nCookie: country=TW\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:10 GMT\r\ncontent-type: font/woff2\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-11db4\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncontent-length: 73140\r\ncache-control: max-age=2678400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BE2tdW8ajqVv%2FBe45GtAwEBzYtL8qaD1VvS%2B1Y7jJ6tNcyYfbw7x248s8EKfhs%2BbfZWyYJfUGfgmnLK9gysVOHdjAXqbBc5TyQ3Q9nPmU5SJwXFb58u%2BJsli4N9iZw%3D%3D\"}]}\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00ea96ed895b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73140,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 73140, version 1.0","md5":"e5e0e0ff6b47dd02e8a978e2ce6d37f4","sha1":"536523dc9b24be05924312de98836e93506533f7","sha256":"768cbb9dab1f998630152bf220e7635f369a5cbfb47847f27b0a9628d256c09e","sha512":"650246ee513aee54d6599ae5a4c1980c3ab844f20a204e44cefddcbbc009b9d72d1505deedd2ad0251499f4d66135405457e72eddaf09d0482531f88be46b186","ssdeep":"1536:7ko9ohMoEuE+NuYJwdEAK9jLKcTnc4Z9V0F8aDSkqAHOLI:o2oCFJYWdEACj5BvVg8ar","tlshash":"0c6301142c07cba7c19d27bdb522f4a15e1071c55d29e6f3039c896b845ef6f2a21b78","first_seen":"2024-08-02T10:54:25Z","last_seen":"2026-05-24T19:21:48.46383Z","times_seen":643,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":249,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/api/store/games?keySets=storeList%2CstoreListNC\u0026sort=releaseDate%2Cdesc","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.330Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /api/store/games?keySets=storeList%2CstoreListNC\u0026sort=releaseDate%2Cdesc HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: zh-TW\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nlime-api-version: 163\r\nlime-device-id: DF-MmbnrEOKQ73QFY8Ak8GOyPaFFN5qe\r\nlime-locale: zh-TW\r\nlime-trace-id: e3a6663f8bdd31946fee9d8a9794fec6\r\nx-countrycode: TW\r\nx-nc-publisher: NCK\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:12 GMT\r\ncontent-type: application/json\r\nlast-modified: Fri, 13 Mar 2026 01:19:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69b36636-573f\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WqCyhxUFB0UWPev2bvxcMWjlfUeve4s9Vs1nzAqwy5hz%2FysarFQ3AGnNoow8sVSZMYS437fAGQbO41LBYpl5WeFfd1EbDxdnqsn8HHEs1TI8O8NKPQAhldcgV%2BZ1Ww%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a00ea96f98adb505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22335,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a375a6a2367070c9ac6309adf1029422","sha1":"8c90c8fbb8780cb3cf4e79b8a2ae0a011f8af58d","sha256":"ad650491704ea71dd8ede2a2777fcae21327fbaf8ce4985b516ebbfb1aa5b590","sha512":"7bc22201f65b69d56bde3a18380332398d594a92377369d1a9f804e502e2ffe4168024f4ef16c74cb224049bef4bba178dcb0f5abac83acb627a5b2783a128e4","ssdeep":"192:ILfdY0ytI1wLe8HqKEBuXAK6J5FpesJKZOSG9Rl2kscLJbTnKmJGbPFJIsDmBcYY:UsXXm5FpFmOxL24lbzKS2PzIsnYY9lX","tlshash":"20a2846fe9618cab2b3103aa74a51314f41147ff16808d1bb87d5e8c8f375ab2641e7e","first_seen":"2026-04-09T04:49:40.80897Z","last_seen":"2026-05-24T19:21:48.484923Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1685,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1685,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/index.es-CrMYF0zS.js","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /store/static/index.es-CrMYF0zS.js HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:11 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vFZ%2BY2iBuhoQ6%2BpGsnc%2FA7Na1wW1X%2F%2FOwCFXwU1pSw1G6jdsHD1UM4IoANpJNDD%2F3bnEzrXkh8o4CynF5z9DTnAl5yHGX%2FvP2rw6g44RUhXCaCU9TayG4L87GOMbdw%3D%3D\"}]}\r\nexpires: Mon, 25 May 2026 07:21:11 GMT\r\ncache-control: max-age=2678400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: br\r\netag: W/\"6971e46a-fc\"\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: a00ea96fa8aeb505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":252,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"3b51757686fcb8b9fc1843138b579434","sha1":"b653134e3184bb5acc9cb9686b3bfbb6d17512c3","sha256":"4ce2835b77106394f5e6fec6859da7d06e0b5d4c0fc77f4ba881dc42b8686182","sha512":"fcdc5405f26e17425f5dfb2990d7ba0cc072af8fa4946ea3a702b8364310a9afee31ad3a7338f54f73b6d07e3ed1a0182e1b7658e38770bb694b7f37fe0a4334","ssdeep":"","tlshash":"f9d097ecc40cda4c8a418331ca385bc0bb3eb94c362c20acb1d42e702407991e81c645","first_seen":"2025-07-31T05:09:15.380452Z","last_seen":"2026-05-24T19:21:48.487292Z","times_seen":3,"resource_available":true,"data":null}},"time_used":877,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":875,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/layer_on_a-SnMCN7Gx.webp","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /store/static/layer_on_a-SnMCN7Gx.webp HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 54402\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-d482\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F7IvIEtoBhiBRfAqYWdm%2FMPtCP5CGFyPByXoRAnvTFcqwUAUcMNm4UggbjHbn3N8YzgGXUKMGyGbhT5htsInqQQ5mVQs939ICcZsTMEiBAxz677La2bPQ41uOhCUPA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: a00ea970d8d6b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":54402,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"22a2d5beecde6c65773aaccfdd258753","sha1":"3685b8fce12e16f5d902231fbdc5412eee79c83e","sha256":"39c01b54f6e98c75b37a064226e0d5ff984104b83bb571334a33b5fe0e888c4d","sha512":"990c24c67383ad06f061349bb6723a0c02a9b1255084e67ff84394e674bb1b6dc089b5b56fc42f3c4ba29b6e29ce940cbc6a927f3cde7733b28a2eb9b25a9c73","ssdeep":"1536:u14YeohCtLIZz3++FSqJMt0XU1cZBbRt8:hWaLIB37FS11WRt","tlshash":"0633f18f1c31c9addd4bb53f90ddd761c89d28e4c2291a3850df59c2689e111a0eb5ee","first_seen":"2025-07-31T05:09:15.337925Z","last_seen":"2026-05-24T19:21:48.488924Z","times_seen":3,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/index-B9cTUicF.js","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:06.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /store/static/index-B9cTUicF.js HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:07 GMT\r\ncontent-type: application/javascript\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 25 May 2026 05:12:21 GMT\r\ncache-control: max-age=2678400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\netag: W/\"6971e46a-44bf1c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=20MbiN3Rnklq3KkbqWUWUkGO29lzvEOusQQgfGrV%2FG0xPmlR8EjbCREbriyhBzHWXSufRu51nROCACIaQCUtm%2BCL6q0MJUiq1C6aNrvZ8ZB1feFt7OJw1DC6g8JuWg%3D%3D\"}]}\r\nx-content-type-options: nosniff\r\ncf-ray: a00ea9599dceb505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4505372,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (40433)","md5":"9267c4bd43e7246c334a4da2f25af96b","sha1":"d4c5d852d871ec19e14482b5130a1399f2c830cc","sha256":"ac0d12296d4729ab8d17674512597b0fd3185f003b345c5edaa288c6b82127a2","sha512":"7c0a69db800591c3b4067c4557e20060aa6e3d440167fc1488215ccb4d90af0a91ed4855a5c8c13c05bdd89bf87df198357684e4c2bae6e6e23c67f66f195256","ssdeep":"12288:ytWv4FTKyviDiS7UllAdmrx6gl9on3fzYYOOJFAFtxpTuqkX:yts2eoXF6gl9on3fzYYOOJOzxpJkX","tlshash":"09254a9c615f4e62729044a5acf70a4e7a3592232455d08cf32cf1f869a4e3d23befb5","first_seen":"2025-07-31T05:09:15.612431Z","last_seen":"2026-05-24T19:21:48.490541Z","times_seen":3,"resource_available":false,"data":null}},"time_used":542,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":365,"receive":177,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/s/notosans/v39/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7duw.woff2","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /s/notosans/v39/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7duw.woff2 HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncpurple.net/css2?family=Noto+Sans+KR:wght@400;500;700\u0026family=Noto+Sans:wght@400;500;700\u0026family=Noto+Sans+JP:wght@400;500;700\u0026family=Noto+Sans+Thai:wght@400;500;700\u0026family=Noto+Sans+TC:wght@400;500;700\u0026display=fallback\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:10 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 35840\r\nlast-modified: Thu, 22 Jan 2026 08:48:41 GMT\r\netag: \"6971e469-8c00\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 0\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2ONDDYjYjDnRsa6lWzwWzF4vPVfz2S5kmp3zeTLojVpUbzxLCi444d4tSinraJyrSU96mvTA3pWq%2BkyN8n25gSAVuXl9kvjh5Bvc2jPaopPDIaKNiNePWP3ipZdTug%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: a00ea96e1869b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35840,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35840, version 1.0","md5":"00427f129772e9f049050a50407952d1","sha1":"0f9e19ecc1d89758fd59d187f35b5a73e499eb45","sha256":"086bfcad0e112af1c9ac0cdea1744dfb11dfdda61906ceee1b32439437096add","sha512":"26478f6744d0875901f6c20b13f4303abe0d579ac2ffe02b74a5cee4a6af48b23a6d611116fc5f1f1b9aa6ef8b083a992e80aa1675e3a211b5332c480050e90c","ssdeep":"768:haAL1lUUxZ+mIxfVJ5tYBU+ma5q71y9SWeGt7UMaVJc2PtupNFtpXjN:NLEkxyJjUUza6ygxGWMaV67/LjN","tlshash":"c3f2f15f368e8e17f4d8691c5a667d523e022dfc9e30c622504f5efd3939320946ceaa","first_seen":"2024-12-04T23:04:18.137977Z","last_seen":"2026-05-24T19:21:48.454989Z","times_seen":2035,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/api/session/user","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /api/session/user HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nGateType: ApiGate\r\nX-CountryCode: TW\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:11 GMT\r\ncontent-type: text/html\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cIBVjMuMT9SFhIa2r2pZYqpNJDlXIwdNYgtq8ac%2BfrgCLP736SCJUL6MJRwOAbcJvrUw1vFYX5i532ol9JAofsY8%2Fg1IQSxWvCZqs1hkKGHlrAktr4Mk1OqQIDA%2B7g%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a00ea96e8885b505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7389d931c86b3d7bb6b8af46d8c4172b","sha1":"8d2a4760aa0b47984d11cd1a66448719177fb791","sha256":"301bd9f16f94feedfae7a946a14bac38cb73c43efe6117bc5586835af03d7d6f","sha512":"dd6d1511e4fcd5bc09d821ffe091fb5946ac9654c48664aed504e479e9ac20c1cad44b6df90f42190d47e28f5f96bfb09d24056df6b950243d68ee8100a9a889","ssdeep":"","tlshash":"d9c09b5d755366449913155167c33641d196837f689a84510941c593f0cf69ac4c73a9","first_seen":"2023-03-13T12:56:15Z","last_seen":"2026-05-24T21:15:34.452455Z","times_seen":273542,"resource_available":true,"data":null}},"time_used":1668,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1668,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/layer_live_b-C7F1Tby8.webp","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /store/static/layer_live_b-C7F1Tby8.webp HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19600\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-4c90\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TH2ZHxstsDgJ71ZAZJ%2FS7G8TNHRZVEMZH0poqNBid9oDDlBP1BhhpyCmz8S6kv5cnhN%2B65pljbhQmc5G40j5r6uqmik2k0Csny0H3C%2ByIqHYbiTZugzYr%2FQjMmG8yg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: a00ea970d8cfb505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19600,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d6de4ef1622bf84b1df9a413214dd5ec","sha1":"1095bb8bfb99c7bc8d19bd13e5c7e0f29d592bcc","sha256":"0f2b520d771eb73abc9e05fc5be428a59af9ced43da692a942f327979247d7e8","sha512":"b3d45045102a43e51d02613019fcd9c68b6b615f57b46269eaecf3491285a59f0cdc9dcbd34b2f80fbceaa19c3dafce67b5e5aa9243508cb9e110e706c79bd01","ssdeep":"384:Un7il8j3M1k7TeWdJKmXg6qNEAoZQGQ7a6KrlrVssgrgI32wLiDaksvW:UOl7k7CWVXqNEAX76rzsKI3nLo","tlshash":"0b92ad8bda9d0558c8da57f14c129336ed370811dab4ec8f4005386a1aad3ec8d7eebc","first_seen":"2025-07-31T05:09:15.324231Z","last_seen":"2026-05-24T19:21:48.492671Z","times_seen":3,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/download/v2/buckets/purple/files/19a066aa88d-06aef457-0783-477d-9beb-f50ff6e788fd.jpg","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /download/v2/buckets/purple/files/19a066aa88d-06aef457-0783-477d-9beb-f50ff6e788fd.jpg HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:10 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 65898\r\nlast-modified: Thu, 22 Jan 2026 08:48:40 GMT\r\nvary: Accept-Encoding\r\netag: \"6971e468-1016a\"\r\nexpires: Wed, 17 Jun 2026 12:38:51 GMT\r\ncache-control: max-age=2678400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-bgj: h2pri,imgq:85\r\ncf-polished: format_not_supported\r\nage: 542539\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uYTVhpBkxSioGPhZFQ0zZGOq0Tw5Dur%2FgWrDtshNKTyt%2FN0bCRXKWQ%2F82hZgvwTF7FXbv3jBrqdxyKDWvo4l%2FcHF0Fpqji2wNBC20cpl1hMXWp4dZ5Eu9DkrjmuGdg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00ea972d92eb505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65898,"size_decoded":0,"mime_type":"image/jpeg","magic":"RIFF (little-endian) data, Web/P image","md5":"95bf901f02bdcac75519bbb993660c7c","sha1":"d3dea4ad3da734fd621c19c282e8ddd2ff61cf6e","sha256":"fb1fb1506930cd07d3ad7addab26ee1de46b59d4893eaec1b7d859c8fc078679","sha512":"70a3007614b43326ed8c2781ff10cc1b01d5b0b7197e8e101736ee1c6d30bea7ded078a4d72d53efa190f3a28badd967f3466c6022cc26b6c974b7d3a0872739","ssdeep":"1536:D5eiE5DXJYexpIxmVbakedSlaptOroRUAK+V4:D5ZeYmVbadSeMroRxKj","tlshash":"2953027eb235b761d4b39fbc3c9a2989e1d2b9a0f843902d83d4073272594b394dde19","first_seen":"2026-04-09T04:49:40.788582Z","last_seen":"2026-05-24T19:21:48.494455Z","times_seen":2,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cookie.bladeandsoul.com/?k=geoLocationInfo\u0026v=%7B%22isGDPRCountry%22%3Afalse%2C%22geoLocation%22%3A%22TW%22%7D\u0026expires=1795202472","fqdn":"cookie.bladeandsoul.com","domain":"bladeandsoul.com","tld":"com"},"ip":{"addr":"52.84.50.20","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:11.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.bladeandsoul.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Wed, 16 Jul 2025 00:00:00 GMT","end":"Thu, 13 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2C:1F:3C:33:A5:82:82:1F:41:BB:4D:AE:B3:96:9A:2A:26:CA:EB:D5","sha256":"8E:73:F1:5B:3D:C4:25:79:58:89:81:B2:7A:61:7B:7F:AE:98:B4:20:ED:61:53:DA:6C:59:8A:8E:08:53:EB:1A"}}},"request":{"raw":"GET /?k=geoLocationInfo\u0026v=%7B%22isGDPRCountry%22%3Afalse%2C%22geoLocation%22%3A%22TW%22%7D\u0026expires=1795202472 HTTP/1.1\r\nHost: cookie.bladeandsoul.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ncpurple.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 2\r\ndate: Sun, 24 May 2026 19:21:12 GMT\r\nx-amzn-trace-id: Root=1-6a134fa8-399f57ad2bc4fda1637731c6;Parent=4b69c6e144a66e4b;Sampled=0;Lineage=1:faca5b5e:0\r\nx-amzn-requestid: 8868a0be-38c7-405f-a5ce-495c9cc8b29e\r\nset-cookie: geoLocationInfo=%7B%22isGDPRCountry%22%3Afalse%2C%22geoLocation%22%3A%22TW%22%7D; domain=bladeandsoul.com; SameSite=None; Secure; Expires=Fri, 20 Nov 2026 19:21:12 GMT; Max-Age=15551999;\r\nx-amz-apigw-id: d4libESUPHcERqQ=\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ceb77ae2808ed96bb38d1b2c27dcb6aa.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: gbqgPJM-WaY2SqCI5QhTKpxwxqNgZnXC7xsKngUKayLj_qN8rbmQDA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-05-24T21:07:02.336114Z","times_seen":674080,"resource_available":true,"data":null}},"time_used":1276,"timings":{"blocked":396,"dns":126,"connect":4,"send":0,"wait":483,"receive":0,"ssl":265},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.115.woff2","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.115.woff2 HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncpurple.net/css2?family=Noto+Sans+KR:wght@400;500;700\u0026family=Noto+Sans:wght@400;500;700\u0026family=Noto+Sans+JP:wght@400;500;700\u0026family=Noto+Sans+Thai:wght@400;500;700\u0026family=Noto+Sans+TC:wght@400;500;700\u0026display=fallback\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:10 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 74456\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-122d8\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 0\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FFN%2ByGdR7Mhh7XYyv3OrQ2j3e688%2B8ScHobXVVlntsZj%2BWpKa4FvepZeLW3KujcNAAP9qWwkIDv9fFyWmgogiU4ZwCT%2BmkMGYF1T6NBtG3g4zPBpTtf5jYIKZWSHaQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: a00ea96e487bb505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":74456,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 74456, version 1.0","md5":"4db4fb890c0dd7f649b8b77fe93471bb","sha1":"a4c9a12e564fb4f7557b043c615e0371b306273b","sha256":"1458f29401c63c3b3d8bb17e4387e96cfa803ec81830a3f61e305fed27da5f6f","sha512":"dfe506a8f40881f1b88d8abf28c3905baa5c4136165bbf1b776cfce9955422838500bf17e837268921116c88f5f060a163d521e50e555b34a4e6f9bc0d2c7ba3","ssdeep":"1536:j0zxa5eXP4nbPwBRj2GCWjmZrY0emJ2Mw0YHtmRzCwVje9Bu:otXP4bPqSFYQteI2Z0YH+zTVjezu","tlshash":"827312a87dde2bf185f94bd12a7638c259bfeb13080211c7610c6e5e1705fa2ba15f8d","first_seen":"2024-08-02T10:54:25Z","last_seen":"2026-05-24T19:21:48.496568Z","times_seen":240,"resource_available":false,"data":null}},"time_used":439,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":200,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/static/pic/003.webp","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:12.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /static/pic/003.webp HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15634\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-3d12\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\ncontent-range: bytes 0-15633/15634\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q4ZfpiVcq7n20Dsr%2FQmvi6s3B24VpTBh7qJbeRwmziy9rvNzl9e9mtPA8DAXEBryJ6ucdgrO7%2BeKE6Tqsu12VZaOkYyYp7mmqkn7TDCjsmSJVJq5g56uBKqlU5vBwg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: a00ea97bfa09b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15634,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"df84c6c6426d4994cd9bab7b895e4017","sha1":"db3a4533dcb8ab0968393ee166bb384a27a07ee5","sha256":"47edaac126440032ceb0380bd44520fddd01991e41d83b8b69aca739a4a07ef8","sha512":"15ff31dd41dca39cf057e8debe62d12e9260e87a7e35d27e765c1619a1626f0ef2950c9a1e07eab112fa0e57dc35fd116e00d8032d811f1be986d3c291d7ef6e","ssdeep":"384:EwNZaBnlsvQU70gGGPk2YJZYRs3PJxN5ZBu:hNZcnlsIrn2S6e3hxNvBu","tlshash":"1762d16c13ed14f8f39272fda465aa0a6fce58219fcd664f507064633964ec7095bdc0","first_seen":"2026-04-09T04:49:40.744028Z","last_seen":"2026-05-24T19:21:48.498236Z","times_seen":2,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/uikit/ncui/1.7.20/css/ncui-cookielayer.css?v=1","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /uikit/ncui/1.7.20/css/ncui-cookielayer.css?v=1 HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:11 GMT\r\ncontent-type: text/css\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 25 May 2026 04:22:37 GMT\r\ncache-control: max-age=2678400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\netag: W/\"6971e46a-831e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TBTbz5qBjkKgXSDlFBPm36PERkF%2BSKHS5Dmju%2F48iG61egq%2F3ygucCcFpCc47Fkd%2BgBsGHoJY10GMkk4RBgypsGNxI8cwqmi7LgOrQX5SIQxtxnLVgwTsx%2BvRxbbUQ%3D%3D\"}]}\r\nx-content-type-options: nosniff\r\ncf-ray: a00ea9733946b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33566,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (33283)","md5":"a0a0d2346af556fa240fc3f51ef179f2","sha1":"6efd6f34194504e820c14e72211f37e8253b488a","sha256":"a23f455d6eb9a4ac91e5f72f622d79b0242b5936377af39b5efdcbf21e2248e4","sha512":"1b7d8f1e9e1c58da5fe0dcc346376423bcea127892614cf986a0e860e2cd5ba72e89b06dbef33f7a57065ffc8378a74fd76c222ecd541d6422b3a022dfd321fc","ssdeep":"384:YcgSdiR7nRKbXRPE91Q6u7CnBbtflR0bR0RApYB91F6IlW5:YcgSxEzQ6uOBbt/BzF6m+","tlshash":"cae2455a34dc1b6eb7ea4814996c9e37acc1487a41a7b7acf41637388b4c1e73c2d50b","first_seen":"2025-07-31T05:09:15.458483Z","last_seen":"2026-05-24T19:21:48.499591Z","times_seen":3,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.119.woff2","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:11.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.119.woff2 HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncpurple.net/css2?family=Noto+Sans+KR:wght@400;500;700\u0026family=Noto+Sans:wght@400;500;700\u0026family=Noto+Sans+JP:wght@400;500;700\u0026family=Noto+Sans+Thai:wght@400;500;700\u0026family=Noto+Sans+TC:wght@400;500;700\u0026display=fallback\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:11 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 34736\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-87b0\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zvRXdDcRiK6Jm8jnTcr5va2hN5j5e5IH3J1QE8XOcrSO5pSNJp4IW9pYk4wN8H%2BfNDCKRRieseRoM6NlE5KXIDDNSMOXnCLOr2VAQJmsrSjjVaWkSKcbk%2BBUfk4M5Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: a00ea9795998b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34736,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34736, version 1.0","md5":"8822610ec522feaafc5daa33311dda90","sha1":"6e72457c14d36a2dbf5796cf6ea4c5873142a3d0","sha256":"4a9850f931ed681bcb86f15dbe8d7961203af4be7bfc28b18657c27c47f1dc1f","sha512":"386da30a80bf787702527481c3e0f30c98008eeba4752850ff0e8c3b02b2899798db1b2072a68b90b31425331c528ccc43c2cf460aec6eb7d36fb2f151857040","ssdeep":"768:HtJgDM9N+9DxgS1txGEbUXeguJqkzcItQqn9NgbyR3jBc:HADS0ltxGJegkqcHPgbyR9c","tlshash":"59f2f11d750cfb6f712da77b01b233a2146aefa8f8f4ac28540ba75bfd4c200a647845","first_seen":"2024-08-02T10:54:25Z","last_seen":"2026-05-24T19:21:48.50096Z","times_seen":266,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/swiper-slide-Crj74V-o.js","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:09.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /store/static/swiper-slide-Crj74V-o.js HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:09 GMT\r\ncontent-type: application/javascript\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 25 May 2026 07:21:08 GMT\r\ncache-control: max-age=2678400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"6971e46a-12be1\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q67%2BT0uiNeEGFTP5bqzv3KwfzCJNA9%2BstizT5YGWzYgNRb5QiqpmI2sF%2Fi%2FO3m9raW6ZWMbA5HwqZBfsudtyAPz0bQS6HzOokHjiNX6mWEDP2I5O4nOQDaPlgcQfpQ%3D%3D\"}]}\r\nx-content-type-options: nosniff\r\ncf-ray: a00ea9697fceb505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76769,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5933adff27028213d34493b98d6c3af0","sha1":"9f70272913e4f5034b2d9b417f479e0343b84905","sha256":"fa2ccb143620d2da57257a0e1dbf0b90fb9ed671c171769bf569be0d480ceee0","sha512":"f36b01c38ddf0743e09da106df7cb7d1259e36f75402db23f1a07b2c39615dd9306dffda811481391b6edb17f25d20fff195b587a7ec26816bbef19e4d7d960b","ssdeep":"1536:wQyal2X1uCE63fAeM4Uwphwuolguxmd4KgTDlOI02Uwqij1:nX68XPA3DQ1","tlshash":"48732a95b261717ad3e716db62a9c101b3b609447409c4a4b1bc8cab686e95c03ffffc","first_seen":"2025-07-31T05:09:15.436507Z","last_seen":"2026-05-24T19:21:48.470047Z","times_seen":3,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/purple/resources/favicon/purple-192x192.ico","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:09.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /purple/resources/favicon/purple-192x192.ico HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:09 GMT\r\ncontent-type: image/x-icon\r\nvary: accept-encoding\r\nlast-modified: Thu, 22 Jan 2026 08:48:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\npriority: u=6,i=?0\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\netag: W/\"6971e469-2523e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9CoE%2FPgyQUrLt6D2XLrkyIV7iExrd4y%2B4L6YxoXt0xlpKOjtCH6gvyiFycs1ThiEE92i7t0EAiC0zkyRkVBdqCm1Qv3Za4GAGvQabwbfD2DNcsA06Fd54q90sh%2F2%2BQ%3D%3D\"}]}\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00ea96ab809b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":152126,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, -64x-64, 32 bits/pixel","md5":"1d2340b50302b8446c0397c93ac429fa","sha1":"842505b460acd054e8aaa5a8e4b453b6db27b137","sha256":"a08ca72894d678c109b5252e472cd299a39fdfa3adc0e090783bd64b62423d1d","sha512":"23fd6cbce7fa9486911f4c1259812ec040950b49719423cc517acdcd642d12ae540fe8690330b783d86c855cd06604ac1326b57e0191d06cd05a337c435c04cc","ssdeep":"1536:sBZ+ZouFPeGj7iK3QcddrZeUPVm+RSHfbRzcgeVZLP/MQq3p:G6FPe44cdHpPg+dgoFnMQ6","tlshash":"28e318a13747225ed8a67375cd47dab44a1abe50f992e9d330207f2e393d84bdd0284e","first_seen":"2025-07-31T05:09:15.387157Z","last_seen":"2026-05-24T19:21:48.502079Z","times_seen":3,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/img_talk-Ci99Tab0.webp","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /store/static/img_talk-Ci99Tab0.webp HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 136688\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-215f0\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MQ7VBXsOjrRCj5nDEs9pdysG%2Bw7zEg73eT7Uxal1Hm8dC9FNGLhP8Ma%2F0c%2FHuiTzDIbk2aQWMcIx5GwHk15xGix9fu4iXvKnEWifEfrwDww5BA%2FjfCg%2BXc0JSkhfdg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: a00ea970c8ccb505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":136688,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3a308bb95bdb58af785218536457dc26","sha1":"6a695e117adefd81231c4f94257a484b0e2a42fd","sha256":"32355ce452fb3ced7e9a1a28868bf2480bad8e85f82928b59b4df243f3293d64","sha512":"d141f3e7233147569154f49abf4f0769c6abdf83a3e9aec8a6a50fe98f3d1a725aa317d3f93e2a5e52213abc88fa7e8856ca6df04082e0df6671e970704c7441","ssdeep":"3072:DJ/mt9jp42F3Rv47WiVO19goIViSbYwASgJn7A0Bkr:DYt3RAHoQrAS2n8T","tlshash":"75d313833bf5a8f5af443815338ac98de8759125ba252950fe206c9e333be1f7520dd4","first_seen":"2025-07-31T05:09:15.439802Z","last_seen":"2026-05-24T19:21:48.503411Z","times_seen":3,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/download/v2/buckets/purple/files/19b9600789e-6a86cc0a-a636-4fb8-b465-6a9a7403f83f.jpg","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /download/v2/buckets/purple/files/19b9600789e-6a86cc0a-a636-4fb8-b465-6a9a7403f83f.jpg HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:11 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 49674\r\nlast-modified: Thu, 22 Jan 2026 08:48:40 GMT\r\nvary: Accept-Encoding\r\netag: \"6971e468-c20a\"\r\nexpires: Wed, 17 Jun 2026 12:38:51 GMT\r\ncache-control: max-age=2678400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: format_not_supported\r\nage: 542539\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oyZ377%2BD9k46XFUS2PzMoP8C1w8FAfVnuv93MAP9FBB13vYa41v2hgl44h4TaszPhDe8NhjwRUcE1pyn%2BfsGlEMBXIKIk%2FGxLYcPRD7bMnJ211rEYgnjA1xefSbGcg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00ea972c92cb505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49674,"size_decoded":0,"mime_type":"image/jpeg","magic":"RIFF (little-endian) data, Web/P image","md5":"27bafd698066eb21450f00831876ff7a","sha1":"020fc6139cab30591d89b9df63247a2796f15bf2","sha256":"ee425942d37241ef6bc13ed5f969e969a3fb9d4c2a1dc155a4b216cec656f875","sha512":"d67fd836f949e0f87c21b231bcde10a419a5292b8ea6ce95e8904c9a47605f5af62f3f3aa1b2a6bb30c691bacd68b53785fd1086d37379872b00496d4726ea8d","ssdeep":"768:jI6KKcrz08D7Dy+7aqYnggJvUL8kwCktrP5uy+BJtdN0yp66eftW24vtY186w:U67crw8zDlgJvSjkFcyoPde94vOK6w","tlshash":"922302e2020467bce57fb034158c8282def6e0036a948f1cecf9f254b5a75b975ba294","first_seen":"2026-04-09T04:49:40.737389Z","last_seen":"2026-05-24T19:21:48.504756Z","times_seen":2,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/s/notosanskr/v36/PbykFmXiEBPT4ITbgNA5Cgm20xz64px_1hVWr0wuPNGmlQNMEfD4.74.woff2","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /s/notosanskr/v36/PbykFmXiEBPT4ITbgNA5Cgm20xz64px_1hVWr0wuPNGmlQNMEfD4.74.woff2 HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncpurple.net/css2?family=Noto+Sans+KR:wght@400;500;700\u0026family=Noto+Sans:wght@400;500;700\u0026family=Noto+Sans+JP:wght@400;500;700\u0026family=Noto+Sans+Thai:wght@400;500;700\u0026family=Noto+Sans+TC:wght@400;500;700\u0026display=fallback\r\nCookie: country=TW\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:11 GMT\r\ncontent-type: font/woff2\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-d434\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncontent-length: 54324\r\ncache-control: max-age=2678400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fztRx5Y%2FonnD2RTlCYXaUMGLxTZfTPxulPb60rtSm1vdZ0crPLeClDXJ3qqimD5EKcSvQhOVNCxK9oFWBWNi%2BE9F5L8Wq%2Fv3CANmp3o1Qd9%2FeWcV%2BfYpJK%2FnZCHnLQ%3D%3D\"}]}\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00ea972e937b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":54324,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 54324, version 1.0","md5":"fb3d5fc840c7d1abccbc59eedb08b213","sha1":"b45e203947e24be89540a38e2219dbcd60fb92ec","sha256":"6d88053794e20177de50d14b9ae11f0f314c1e30b5595113d9b02a26ad02f76d","sha512":"138261daefc94f082a94aee59059334e58094201c06cee67e4b798ad071960616c26993543ee0cd9585a1e9bde428eb63b3d1b5bf3607f8a475a27f9dcfaf108","ssdeep":"1536:pBMm9o1tZZvjDdaf8H3jQuwvwPX23vpAfq+1:fz+PXvjDdjH3joYPXaAfq+1","tlshash":"1533027a7eb565fda28dc77e1e0b3c982f857440439fa2c440bdebc96051fe49ca45a0","first_seen":"2023-11-01T20:12:16Z","last_seen":"2026-05-24T19:21:48.505967Z","times_seen":19,"resource_available":false,"data":null}},"time_used":714,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":711,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/js/config.js","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:06.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /store/static/js/config.js HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:07 GMT\r\ncontent-type: application/javascript\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 25 May 2026 04:22:32 GMT\r\ncache-control: max-age=2678400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\netag: W/\"6971e46a-622f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fke58LMDDqjMdJA9HAvjbgarlibnJHGMqfoBeoInw%2BK4U9nrG9QpvrmNoxFNm7GRnPrW0oR208z7Y6D2m%2FQqNLFxn11X2UAuFPaU6N2X25c6umXFY2A2MCncO4JUyg%3D%3D\"}]}\r\nx-content-type-options: nosniff\r\ncf-ray: a00ea9598dcbb505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25135,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (25096), with no line terminators","md5":"0f8b10e80afca68829db6e7df87b82b0","sha1":"77a96d22594986810b47b45bbbafc42e567bf2f1","sha256":"b190c4d67a7fc2ae523cec21a8e73f9d230a7b1c4e62d6b965ddeae333bdecd1","sha512":"53b95f7b754c225dbd6f9fccd60753caa7c5ad08bb378b2973d6cf5006c9e6b1f39081995b13a37abe4415f696bf179349bf0bfadf657b736470ec37258cf214","ssdeep":"384:CHBXdGBhPje5pqDBZYoyhVWkgR4PHiWi0Zy6hy1:CBMje5gA2X4PHiheg","tlshash":"55b256a8037465fde8289381225d338b7855f66f49cace68fdf44d8c97e532ca888537","first_seen":"2025-07-31T05:09:15.312925Z","last_seen":"2026-05-24T19:21:48.508505Z","times_seen":3,"resource_available":true,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/index.es-BBHhX1sC.js","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:08.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /store/static/index.es-BBHhX1sC.js HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:09 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U80dgBdneww7uMaj5sxxb%2FnJJgcPp%2FUepa4gvsMoDLWGGwnif1b7bJZsF%2F0REsHStMOqNKm%2F2zVuHrHdXeJZ6w%2BIzZY6%2BRiKUuP46HqUXxh0lQecw5Cd4y%2FDS3MCtQ%3D%3D\"}]}\r\nexpires: Mon, 25 May 2026 07:21:09 GMT\r\ncache-control: max-age=2678400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: br\r\netag: W/\"6971e46a-291\"\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: a00ea961cecdb505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":657,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"2a0be953c35fbf328da84b2823907a9d","sha1":"46a606453494a5a97fe421679fa2c7225b4d3fb9","sha256":"8944fd84b1b137cb1e80a96b27473e7dcb5825b5bd46b401c485cfcb51be48a1","sha512":"d1ff0f4fe4cd47303d78cdc56b0a1ab54dd4e8edc82c6ffa9ebdaa9445ae9058d8f687c2b2311e7f10ea7f76dcd902767d863bac4f4f9c0d48d47dd7550e5e2f","ssdeep":"","tlshash":"3ff078d4dc357aaa095f92dc6621c4898377e53fbb23cbace30121600eed98421ae750","first_seen":"2025-07-31T05:09:15.369262Z","last_seen":"2026-05-24T19:21:48.510452Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.109.woff2","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.109.woff2 HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncpurple.net/css2?family=Noto+Sans+KR:wght@400;500;700\u0026family=Noto+Sans:wght@400;500;700\u0026family=Noto+Sans+JP:wght@400;500;700\u0026family=Noto+Sans+Thai:wght@400;500;700\u0026family=Noto+Sans+TC:wght@400;500;700\u0026display=fallback\r\nCookie: country=TW\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:11 GMT\r\ncontent-type: font/woff2\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-119b4\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncontent-length: 72116\r\ncache-control: max-age=2678400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y6hyWAgTL%2F%2F9by7%2B9W6Tx08gCVnQgZnLGZnmSj2oNEGllwg4g%2Bkopyn6lHMor2%2FDovpfzbryYR2T5RUQnOzOFCDQGGV7IUdXK4HQprLQmzX%2FUaxLOToXowW%2B%2B01dmQ%3D%3D\"}]}\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00ea972e932b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72116,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72116, version 1.0","md5":"ebc75afc40fa2dc9baadf91b01264e6a","sha1":"de5175136c44adb48c3572bff1c3d3913615e285","sha256":"eb6217a4535de0067451b407bba0541bbd2ad63f37eaaddb492b04d26666b903","sha512":"092ab5e86a7e9d33dc179064abdb3964803c4e9b12865bec00839ee684251952db6e454057762d3ed76655e2cef605edd4c0a2ac9be218ef576f3386c877e6ed","ssdeep":"1536:p3wCeb//W6qzfkrx2nDAQKQyOxKb6AfP0DGFXU/StRJ1PuaQJMpor:yCe2f++wO4N0DcjTuaQJMS","tlshash":"0d6302074087d3a5d88c9b41faeedc06f8dddb32c83bb55125a2db5afa312301ad56d8","first_seen":"2024-08-02T10:54:25Z","last_seen":"2026-05-24T19:21:48.512748Z","times_seen":205,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/download/v2/buckets/test/files/19135e85096-9f94c52b-1b68-4ee6-952f-52c8b1963517?format=webp","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:12.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /download/v2/buckets/test/files/19135e85096-9f94c52b-1b68-4ee6-952f-52c8b1963517?format=webp HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4318\r\nlast-modified: Thu, 22 Jan 2026 08:48:40 GMT\r\netag: \"6971e468-10de\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mAZN1Ol26Plh5aZFhDLVYjq6qNbujfp41gb95zQAZboasCCyOW0UDcy1roDD36LdqTkFrijeb49y7AxcGyFBT6904RgTKsVWwXWkhs%2Bq6SmeeY6w0ugOQkvwqSw3dQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00ea97a69a9b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4318,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"85a043f725ab3335e46630b8cf1bd8c7","sha1":"453b765e5fe72c757bf14a3a61bcb58071f5b9a0","sha256":"60e5dfd424d655e6b27558c33fefd3133ff1624260e8733a8ec9157aa0553d07","sha512":"973e53a1e6bb65e8fb9bdb891d05a583641d9171c2460da796ee925f90e73ca4847d73317b1b907f57b27a9deb7b63eb91549f870361877774a58ee6b4edd895","ssdeep":"96:Rlbw+iXI2Aya2kYmFOXXq49+EH9AIVcbSJlx4BMm6DYcPZG1PhcxSHL9:vwTkL2kYmYH1weAIGbyx6MmWYgGcxSHR","tlshash":"10914c55bf759166f25a633d90718bc591b4fc0e4baba24233422a230b907c65fccdaf","first_seen":"2025-07-31T05:09:15.411553Z","last_seen":"2026-05-24T19:21:48.515407Z","times_seen":3,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":379,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/download/v2/buckets/test/files/19135b2d80f-adf4fce5-a03c-41c9-b49a-e1184d6a44b2?format=webp","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:12.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /download/v2/buckets/test/files/19135b2d80f-adf4fce5-a03c-41c9-b49a-e1184d6a44b2?format=webp HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3348\r\nlast-modified: Thu, 22 Jan 2026 08:48:40 GMT\r\netag: \"6971e468-d14\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5sDP8kvqflRXQaD3h8shs7MFReMEQj0Ts79MmlMhiPxe%2B5xq59fq2M9cwVrnGizXmOHqvLE58Qp5vUPpDi9IUr4sXVuOnI2imfWs5bGV7OPZJW7LDPk5awB2jsSwIg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00ea97a79acb505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3348,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"342152513a5981f717846ce6a2773e9c","sha1":"509d1f2350050750a25cf39960aeed05898e31f0","sha256":"df45e58e374a061c59bef66f7a69a503270ec392280aeef921233a8cff87bc51","sha512":"c2574ac97b77a12d55568f57b04b41cb7c8c1aa6eb2b1e039bde46b1c7aef09ce32c50223ac401fec70e0db78b8fff8a8aa0c3332616d27a9a3eb8d0de72b415","ssdeep":"","tlshash":"e0613b62a70a92acec0027717c06eeb3f1a4ad2fcf4adc64e385a31357409865c1a98c","first_seen":"2025-07-31T05:09:15.484592Z","last_seen":"2026-05-24T19:21:48.518333Z","times_seen":3,"resource_available":false,"data":null}},"time_used":555,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":554,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/download/v2/buckets/test/files/195c5ad25b3-40588cfe-646b-4ba1-8a59-9f30d731bef5?format=webp","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:12.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /download/v2/buckets/test/files/195c5ad25b3-40588cfe-646b-4ba1-8a59-9f30d731bef5?format=webp HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5744\r\nlast-modified: Thu, 22 Jan 2026 08:48:40 GMT\r\netag: \"6971e468-1670\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i4Mx04bICesnCuPKc5A%2FJUuWlyDfAGnzNBuExJnw4zIUJbyMGDH8pWt4FhInuAzkAwgNLpVvfbNBT35Vf5GyjjjX7F3LJ72P1pJIWg1YvLKgTmeQwRvfWIszs1K2UA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00ea97a89aeb505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5744,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6e2d2caf6167b2bd5e80dcd53e0e7b82","sha1":"deca3a7618379fcf703c86284e1875df043cd83e","sha256":"47963a3dab87207f9848e09718d49e52d06ba2a75f25143c5dde58edb2ae21ae","sha512":"07be6046a934ffc3009d5d0a75dd3af798017bcb97c5d9ddb0078e78fe52dbad0216a692d018c33e0a8ea669e771f0727ce4c9f63d9bc723e7569ca0b9ed7be5","ssdeep":"96:Vlbw+imquJMit7k0LKxYnhvK6yy29bCQ96S98yH1DVfrtGJYpAS0:jwWR7k02CC7pzb98qhcz","tlshash":"45c19e51064c1b28c4d2763863e3ea63fbf73d783a72c0455a26799f83744a5a43f25b","first_seen":"2025-07-31T05:09:15.353565Z","last_seen":"2026-05-24T19:21:48.521497Z","times_seen":3,"resource_available":false,"data":null}},"time_used":548,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":545,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/static/pic/002.webp?format=webp","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:12.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /static/pic/002.webp?format=webp HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-24T21:08:01.202482Z","times_seen":15673710,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community-api.plaync.com/ncommunity/purple/notice_zh_tw/morearticle?more_size=5","fqdn":"community-api.plaync.com","domain":"plaync.com","tld":"com"},"ip":{"addr":"34.49.133.48","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:12.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.plaync.com","organization":"NCSOFT CORPORATION"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Sun, 13 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"35:4C:51:E1:DB:BF:32:F7:65:43:DA:5E:E8:2B:40:48:40:22:BD:4D","sha256":"67:02:A7:C0:CF:13:8F:82:00:71:D1:D3:B1:54:D3:4F:A2:CE:53:7F:9E:0D:61:1A:AB:AD:8F:F2:0F:17:26:C0"}}},"request":{"raw":"GET /ncommunity/purple/notice_zh_tw/morearticle?more_size=5 HTTP/1.1\r\nHost: community-api.plaync.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nCommunityAuth: eyJsYW5ndWFnZSI6InpoIn0=\r\nOrigin: https://ncpurple.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: istio-envoy\r\ndate: Sun, 24 May 2026 19:21:13 GMT\r\ncontent-type: application/json\r\ncontent-length: 3325\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ncpurple.net\r\naccess-control-allow-credentials: true\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1 ; mode=block\r\nreferrer-policy: no-referrer\r\ncontent-encoding: gzip\r\nx-envoy-upstream-service-time: 419\r\nx-proxy-server: purple-web-portunus (va/live)\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":24273,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (22709), with no line terminators","md5":"108cf2fa98359e54e48b43906b2c84c8","sha1":"dd73fd9f59ed5ce8b2d3aa6f115d3db9412a4e86","sha256":"5a85ed85abed21825acd7273dcf0a4ccc118fd847402b835e95e553dff600729","sha512":"e1607f6798be9aa87ec51d98e49bf7db056494f8c374996b4ad92ac3dbafd1adf4c936681a8fbce6cc89ca1b6e02ac56532f8781480a993f0f0cf4f49b3f4cb4","ssdeep":"192:VLLSdFOy0hv/j+DZ4v/j+iYvEWv/j+n3hhA8v/j+oGv/j+6y:VLLNMyYvE13htd","tlshash":"fcb29714106caebbc77295d3a90dbd47e19d003ba91c596e8ee4cb0c07deebd075b416","first_seen":"2026-05-24T19:21:48.524563Z","last_seen":"2026-05-24T19:21:48.524563Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1192,"timings":{"blocked":-1,"dns":66,"connect":27,"send":0,"wait":550,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/purple/vendor/googleAnalyticsBuilder.1.0.0.js","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:06.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /purple/vendor/googleAnalyticsBuilder.1.0.0.js HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:07 GMT\r\ncontent-type: application/javascript\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nlast-modified: Thu, 22 Jan 2026 08:48:41 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 25 May 2026 03:25:48 GMT\r\ncache-control: max-age=2678400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\netag: W/\"6971e469-10e6\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=55ZCJr%2BLD9dJ6caZi5lgzV%2FzTivyHUSEabo8lY2N7ltFqaKNPo%2Byf2G5G4UPs%2B5yVCmehMr3Ppg11%2F%2FZnM%2FbJ5W6TrNnIn1Q0bL3rolvBZqlWRnDlkiD07CHedfNOw%3D%3D\"}]}\r\nx-content-type-options: nosniff\r\ncf-ray: a00ea9599dccb505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4326,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"72a37343b4b27a8935613410805e24f9","sha1":"7429d59f2f75ef7087b7c8c8957bf55f7b7fb4ac","sha256":"0548c8a2647fac9cb081a89cc5c92cae324603d0c4db4ac32f1f3daa83e20512","sha512":"b2eb467d996bd4df2f408fd1ef7d145c42f1bf10455155903cbe42278120fc092062b748ebe3d50cc088908a241fe4ba4ca71775b9be924c230499a0d6f5d15d","ssdeep":"96:FpFad0eoGuiQI0CEqSd/LCBM9udT8MA/ksn9EdT0MAT9pva9EdTb:cqviQI0CEqZMYdTc/kWWdT0nvaWdTb","tlshash":"5a9165183bf501ac18cb70ba2f89a1013232c027d6966e267edd86a84f90d715fd1fb4","first_seen":"2025-07-31T05:09:15.606165Z","last_seen":"2026-05-24T19:21:48.527022Z","times_seen":3,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community-api.plaync.com/ncommunity/purple/notice_zh_tw/morearticle?more_size=5","fqdn":"community-api.plaync.com","domain":"plaync.com","tld":"com"},"ip":{"addr":"34.49.133.48","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:12.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.plaync.com","organization":"NCSOFT CORPORATION"},"issuer":{"commonName":"Sectigo RSA Organization Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 14 Nov 2025 00:00:00 GMT","end":"Sun, 13 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"35:4C:51:E1:DB:BF:32:F7:65:43:DA:5E:E8:2B:40:48:40:22:BD:4D","sha256":"67:02:A7:C0:CF:13:8F:82:00:71:D1:D3:B1:54:D3:4F:A2:CE:53:7F:9E:0D:61:1A:AB:AD:8F:F2:0F:17:26:C0"}}},"request":{"raw":"OPTIONS /ncommunity/purple/notice_zh_tw/morearticle?more_size=5 HTTP/1.1\r\nHost: community-api.plaync.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: communityauth\r\nOrigin: https://ncpurple.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\nserver: istio-envoy\r\ndate: Sun, 24 May 2026 19:21:12 GMT\r\ncontent-length: 0\r\nvary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers\r\naccess-control-allow-origin: https://ncpurple.net\r\naccess-control-allow-methods: GET,HEAD,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: communityauth\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 1800\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: 0\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1 ; mode=block\r\nreferrer-policy: no-referrer\r\nx-envoy-upstream-service-time: 381\r\nx-proxy-server: purple-web-portunus (va/live)\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-24T21:08:01.202482Z","times_seen":15673710,"resource_available":true,"data":null}},"time_used":777,"timings":{"blocked":141,"dns":64,"connect":12,"send":0,"wait":495,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/layer_crossplay_b-aaKFn3zk.webp","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /store/static/layer_crossplay_b-aaKFn3zk.webp HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15218\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-3b72\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q%2FOmHA6pjsCJ8g0%2Bg%2B3fjG%2FuzSpk%2BJYS642GUsFDwVuo%2FBkCWk7TsQZRDtAG%2FIEuxf6hCFIHBnoKHmAg4suGSaA3dBD09vHdi2hze6dQM8utiM%2F%2FA%2FqN%2FNoMZznwOw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: a00ea970d8d3b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15218,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"47cc2d571c76287dd64ceeb104b23901","sha1":"0a924c3218aff2de96f552398cb6192cd95e4a27","sha256":"2d81afa505bbdee2981071715092de374822a5585f06980d2aa9c2ec4137c5ea","sha512":"75aeffb67188c84e77741a757c5ffdaf5b9ab8ff83274527a7546856270042e9a478283c7b26f4c3a23aa06af5c8fab04d89b539e907626b12437a8d7f1bc1ac","ssdeep":"384:LvpO6TnMiHUvovHPtHBqJkKGXWPDRVcNuslhvl:L06vHqoX9BaJPs/v","tlshash":"3362b0884e60d3c7ea2b707948176d8e5c8333b27139a6ecea45955644f30e18d0ee6f","first_seen":"2025-07-31T05:09:15.473597Z","last_seen":"2026-05-24T19:21:48.529648Z","times_seen":3,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/static/pic/001.webp?format=webp","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:12.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /static/pic/001.webp?format=webp HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-24T21:08:01.202482Z","times_seen":15673710,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/static/pic/002.webp?format=webp","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:12.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /static/pic/002.webp?format=webp HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21518\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-540e\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 12\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lvAU%2BY%2FNbthepFx3zy3%2F7GqJwCgz60z7%2FzNOb3cYEhpu86LEPrqMGJESalDNz%2FhN1YbRv1zdaCTaFbjDh9MGy86GBSBPVEWE%2Bva7zMU5ZslYsOxkHUSrbOplxP4amw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: a00ea97c4a13b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21518,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7168ee68087e5912784c2299ca8e30c6","sha1":"18c83e2d0e1b5ca8d760d2133bf02f8496306053","sha256":"bbdccce280831c597f4cbfb7aa4e1a1590f4230066cac44d823ee4a02ae7f395","sha512":"b01c802c97d1b233fe66031cff3a5db14f6af37e124714eb7eb5ac2e674d1b6384be19b0ecd074eb47cfbf8e39d0be155a4966ca937381fbea1e965f89fea449","ssdeep":"384:vwTv3gdhg9q7Ok10IEi/YwMfX3VTih9vCdUc4KILsQeC:oTvnQOkSd4PMfX1ih9vC7ILsI","tlshash":"29a2df920b144796d7272bf8b24a47a99c483f661dd6e25f8d00b895c3e44b64c3dc5f","first_seen":"2026-04-09T04:49:40.715646Z","last_seen":"2026-05-24T19:21:48.544848Z","times_seen":2,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/index.es-DY2TpNIv.js","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:09.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /store/static/index.es-DY2TpNIv.js HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:09 GMT\r\ncontent-type: application/javascript\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 25 May 2026 07:21:08 GMT\r\ncache-control: max-age=2678400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"6971e46a-38cb\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jn5mWSwzj2Tw0nnFTY142ujXiuiYp%2FocOuZYw%2B7taL8wnumbLnXPbr4XdeslxHwNqCVcY2KBcX8hNu3BJF1ME3k6VxQG1P6IHnuM7C6UTT2TGAxW%2FlvKlbEtDUT3Hg%3D%3D\"}]}\r\nx-content-type-options: nosniff\r\ncf-ray: a00ea9697fcfb505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14539,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (13305)","md5":"8923be65106788c32a5e4b1e615e4654","sha1":"0fa40b01e59e5d1ae7b77fc171172ea045b78b24","sha256":"6f392f487eca929ccf69d0939486cc6c5894ed26b458216eb3be0136732054d3","sha512":"605342da0cfdf66ff4c76fe953f2ba911ee9db7c75af5ffe59119d645ce58efe97b315c2e359069dc728aa8b4169b1c7ae6f21d651882b072c6e378a1708bb9c","ssdeep":"384:cPr2Mw9RW7i7+Vpl71msF4RigI34OLp3WyJwLXTJ8DVBK57bIS3zTWPF3KXP:cPB0+Pl7Qs+RCrYXTJsBKD3zatKf","tlshash":"1a62d7882260b6e542ef3688cbd4471622b44c85311e5df4707a0e766e7ed78236febd","first_seen":"2025-07-31T05:09:15.329787Z","last_seen":"2026-05-24T19:21:48.547302Z","times_seen":3,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/s/notosans/v39/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7duw.woff2","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /s/notosans/v39/o-0bIpQlx3QUlC5A4PNB6Ryti20_6n1iPHjc5a7duw.woff2 HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncpurple.net/css2?family=Noto+Sans+KR:wght@400;500;700\u0026family=Noto+Sans:wght@400;500;700\u0026family=Noto+Sans+JP:wght@400;500;700\u0026family=Noto+Sans+Thai:wght@400;500;700\u0026family=Noto+Sans+TC:wght@400;500;700\u0026display=fallback\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:10 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 35840\r\nlast-modified: Thu, 22 Jan 2026 08:48:41 GMT\r\netag: \"6971e469-8c00\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 0\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x6YzSwvz2UkbeeJ7iWztp1pjvoYgy%2F1r%2B1pQLkWCHHp0ybkMTwztav3DbYFTLd%2FLdfgcdM3t%2BWEAJuoUoR%2BOFA%2BKA7VVjLriLYqDLxOTeRrhyeW2nvYZ%2B7H8KkzQMA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: a00ea96e3873b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35840,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35840, version 1.0","md5":"00427f129772e9f049050a50407952d1","sha1":"0f9e19ecc1d89758fd59d187f35b5a73e499eb45","sha256":"086bfcad0e112af1c9ac0cdea1744dfb11dfdda61906ceee1b32439437096add","sha512":"26478f6744d0875901f6c20b13f4303abe0d579ac2ffe02b74a5cee4a6af48b23a6d611116fc5f1f1b9aa6ef8b083a992e80aa1675e3a211b5332c480050e90c","ssdeep":"768:haAL1lUUxZ+mIxfVJ5tYBU+ma5q71y9SWeGt7UMaVJc2PtupNFtpXjN:NLEkxyJjUUza6ygxGWMaV67/LjN","tlshash":"c3f2f15f368e8e17f4d8691c5a667d523e022dfc9e30c622504f5efd3939320946ceaa","first_seen":"2024-12-04T23:04:18.137977Z","last_seen":"2026-05-24T19:21:48.454989Z","times_seen":2035,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.102.woff2","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.102.woff2 HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncpurple.net/css2?family=Noto+Sans+KR:wght@400;500;700\u0026family=Noto+Sans:wght@400;500;700\u0026family=Noto+Sans+JP:wght@400;500;700\u0026family=Noto+Sans+Thai:wght@400;500;700\u0026family=Noto+Sans+TC:wght@400;500;700\u0026display=fallback\r\nCookie: country=TW\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:10 GMT\r\ncontent-type: font/woff2\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-f7ac\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncontent-length: 63404\r\ncache-control: max-age=2678400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lDyQPA1PnGEzwWsvvc2Al8c3dHW71gNqXZ02WgiIkwvEAAGFyEjlFyW%2BG9Nfc%2Fc7Yh96438MHcMGLka49xZw%2BNBSTavg1YZSb%2BBE75Ndo11pRTXmd%2Fj08r8OwyJbLg%3D%3D\"}]}\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00ea96ed897b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63404,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63404, version 1.0","md5":"c72211110f3847c516364827d55eee12","sha1":"55debbde31af2db73706bce338c52d3602f67f14","sha256":"e16a35853963a935c2018e98cd0786d2847a5a7d0efc64f0dffd889d19229271","sha512":"7cc51ba97915224a551580f142b84e6a7a09ffd929aca669a45f81fd12bb735e9a7966a2ae4fda04f3c3ede927e41fa9b089888141bb68c6bc942301df27f787","ssdeep":"1536:p/s6EhVO1cWIK/lVlEyG1tisX5HUgB2XzmehtC:p/CUlfM2X6mC","tlshash":"8c5302dbfa603cbdd71df1d8fa3a538063164156856c891fbd4701b8493b5848aef7a0","first_seen":"2024-08-03T00:42:39Z","last_seen":"2026-05-24T19:21:48.549594Z","times_seen":118,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.26.woff2","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.26.woff2 HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncpurple.net/css2?family=Noto+Sans+KR:wght@400;500;700\u0026family=Noto+Sans:wght@400;500;700\u0026family=Noto+Sans+JP:wght@400;500;700\u0026family=Noto+Sans+Thai:wght@400;500;700\u0026family=Noto+Sans+TC:wght@400;500;700\u0026display=fallback\r\nCookie: country=TW\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:11 GMT\r\ncontent-type: font/woff2\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-5948\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncontent-length: 22856\r\ncache-control: max-age=2678400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5mCQZokDj0xqzd%2FuKSZ6ICdM6uCfuQvIbNGm72ZztzVsH3dSn1pLGawJm%2FdF9CaUywrDrP0B7GlRNS%2FjkP5Pd9T%2Br1lTHTLP4iuy4QU7D0gf5iUVOAj%2BmvR%2BvmmNoA%3D%3D\"}]}\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00ea972f93cb505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22856,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22856, version 1.0","md5":"53443a9c8c609665b722647217a6f1f2","sha1":"61686c239b37653f185da61823e2547520d3a3f2","sha256":"509332c3447255328309d8273a922f11c755e0891dbfe1189af41b7be40d3066","sha512":"ea06501e7f1d346dc5ecafe82cffa1bbddd1e70b5e5478df1ea6d7c9727aa476a9a739c96f22416dba64290624fbfdcf5a9b29f77175d22f7583874e929cefef","ssdeep":"384:SayvULvVj9UoPc5GtOuSGFl5gweRS9wnjtXuKQxb1yYbZcUJU7jzSBqw+Ms6JIhB:SNw9jq5GQuD5gpHlxwbQYqnj6qwvswI7","tlshash":"39a2e0a6aaa95473cc02c0af37cae076eb8ed5a07ac19c052e8d5943771f8d33c114b5","first_seen":"2024-12-02T07:58:01.184696Z","last_seen":"2026-05-24T19:21:48.473737Z","times_seen":46,"resource_available":false,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/index-CM0pqhPq.js","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:09.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /store/static/index-CM0pqhPq.js HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:09 GMT\r\ncontent-type: application/javascript\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 25 May 2026 07:21:08 GMT\r\ncache-control: max-age=2678400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"6971e46a-25714e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=moP3JHO9jVn2bTjk%2BvXBh0zOJAN%2BuT9KfQo1RBkZypY4OjaDl11otX%2BRrXatSn%2Bd0sLUVUzNvM%2BSRycMS%2FpstCaIKtWC1Q%2FsFMOlpVA4928V66cbMRx40DDuiGqGLA%3D%3D\"}]}\r\nx-content-type-options: nosniff\r\ncf-ray: a00ea9697fcdb505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2453838,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (50417)","md5":"9be20ba296e43baf95b9ee36b306abd6","sha1":"7fa1c37deeff51caf32162e72ff22d9a1539c68d","sha256":"73b762268c44fe3148a4f86e5dd4d791c4e4f68991bb935be732ac496b17ef60","sha512":"4e8090abed0ea0505e5adfe1c6b80b7f15bc9fedfb64cb24729db21fa16519325d5cf1e331b1e99a0758463c28b9826ae3c9efedfcf835ff05b2ea27d2a5a55e","ssdeep":"12288:tuOKiOha/VimRW7Bhwxs8rgSAbhviI9hlISnuBz2aPUA247FqSzM:tuOKutdo7BhPSAbhviIflJnuBCuUlSo","tlshash":"e755f8cad19a03770aab42a7b44137c0bd74c4e7d3cd442bc68edfac109e7d5a2679a4","first_seen":"2026-05-24T19:21:48.550342Z","last_seen":"2026-05-24T19:21:48.550342Z","times_seen":1,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/static/pic/003.webp?format=webp","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:12.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /static/pic/003.webp?format=webp HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-24T21:08:01.202482Z","times_seen":15673710,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/static/pic/001.webp?format=webp","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:12.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /static/pic/001.webp?format=webp HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 29994\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-752a\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 11\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SX8AGeCeZiA6sL%2F5wn4N%2FuYxe2fApsT2cghslt6YajDqYwOSKv%2FjDf688w2GIYOmdsq9UabXNcIPDnvulKzFN4bD2dBJXOjrUwwHUYMh2LB019MzDZyiV49JHSGB1Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: a00ea97c4a12b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29994,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"58caf2e68fee9871124499a0fa95c39f","sha1":"b67888c97155e15472f2b6e867f62445c1e44324","sha256":"595a7b4ef71bbe60beaeddffa8e023bbcfebe08947facb6a64ede866a27be7ce","sha512":"7c21809df6e82052fa0ad69880e5dd5d495106ce6de56df236a037774e4f6a52d7b6888f1bcb53449e4fcf893dfd0bfa67f2f4612c2a4b3a683d8e7b6b5799f0","ssdeep":"768:TNA5f0zoaCrUuZz4rMHfNBYLqPtram4QY0+9FtlhM:RA5c0Yu+rwB/Za0M","tlshash":"41d2f141011c56bce8d28e7111207fd6d8563d6a8d5aae6b3d1f8307270b3befb88d88","first_seen":"2026-04-09T04:49:40.710027Z","last_seen":"2026-05-24T19:21:48.476055Z","times_seen":2,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/cdn-cgi/rum?","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 639\r\nOrigin: https://ncpurple.net\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":639,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":2590,\"startTime\":1779650465497,\"versions\":{\"fl\":\"2024.11.0\",\"js\":\"2026.5.0\",\"timings\":2},\"pageloadId\":\"97905ca9-95fe-4710-abba-a0091bd5e566\",\"location\":\"https://ncpurple.net/\",\"nt\":\"navigate\",\"timingsV2\":{\"nextHopProtocol\":\"h2\",\"domainLookupStart\":28,\"domainLookupEnd\":62,\"connectStart\":62,\"connectEnd\":89,\"requestStart\":89,\"responseStart\":1097,\"responseEnd\":1098,\"domInteractive\":1570,\"domComplete\":4499,\"loadEventStart\":4499,\"loadEventEnd\":4499,\"transferSize\":2727,\"decodedBodySize\":4063},\"siteToken\":\"2ce5d2aeecca44cb9951a73774805699\",\"st\":2}"}},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://ncpurple.net\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F%2BR%2F6CgahnLkKONwh5b6Rq2qcofWCyahv%2Fg%2BwPDWN4fTUoLPJhIgGioHEI8RuseCpKIXW44xc7%2Fqr1SLfL8Sgqq8LfBxMrp%2BQlQPDaoyMd8nHqyosQHu0QICgVC1ZA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 24 May 2026 19:21:10 GMT\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a00ea96da862b505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-24T21:08:01.202482Z","times_seen":15673710,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/layer_crossplay_a-CcrBJS6m.webp","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /store/static/layer_crossplay_a-CcrBJS6m.webp HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 97454\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-17cae\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MbWRoNy4cNX18%2Fy2Mjhkb6QWH%2B5jKvHEUGSMLqfRsTWtCJ2D1GS%2Fhotn7yqYYMZPQDzg35esiHoya8AaaG46VJqH4Jb1d%2BZWzQY%2BFcwpjivUuyx8FmuQ7C8HW6jMgQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: a00ea970d8d2b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97454,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c2b8cffb5255b9651210892a69076fd5","sha1":"15c3846c38976d7fba18e6b05b75562aa62527e9","sha256":"32908f55ae45a1bec65bfbcf9c3da3ce11ec10281d70235da6860829c0d38512","sha512":"a61195f2f7b886732ae2361673406be4e7f74434391c4474669f8db4549cdfc4b05805e7e3881b81473c9c83425d498cea5192acd9c142599878bc85c061132c","ssdeep":"1536:3Ss1zmQgi9S2ls4wsNOc18SUkDIuEt15DMoVfJQfQOx0yAPfOv+kbX4J:CscSY2s3sNOAUkDmjVm/H94","tlshash":"0f93021946e31e81903b5cf892fca4bc6a97777c16509ec33e2439b117b00f1a9f9ad2","first_seen":"2025-07-31T05:09:15.648334Z","last_seen":"2026-05-24T19:21:48.552397Z","times_seen":3,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/layer_on_c-BRX_kEOo.webp","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /store/static/layer_on_c-BRX_kEOo.webp HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 141884\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-22a3c\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tQRKRyCB%2BdkLK01S62jzeUflPdQ7Mu1IzE4J%2BKY0eFDrmhge6mvivVvpYkK0VNMJ55d3CScHnjpAq0wHyEBGkEEUnO8gfIYNK6Xc8LGuQgwRh9QAFf9X6ynPucRCgg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: a00ea970d8d8b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":141884,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1c08a2491e78cb17a53afe2bcfc510b2","sha1":"8d3c5f47c93d70e7eaec950c696e1e60678e13ea","sha256":"3d6802b41a673c8e650728d6ee345cc19abaa293295c24bb41be2fdba6e597dc","sha512":"ac488dee223d81bc79dddeb22876e20c51ea0f8339ce8582b0a02b7288c9c686c60fd9df9e036b8d144e2c2b856ccc44f5fe9ee7a3fa6a7a7d55a4583ad8fe2d","ssdeep":"3072:M7mG4UB/GUxoBuphA370oJG/jCzW5k0BZvXWEIV:M7mpURQKyr0BjGWZOxV","tlshash":"05d32281d3a39e222b55737ea15342c2209addda9fd7a5e0867e8780736fe1f750f180","first_seen":"2025-07-31T05:09:15.522112Z","last_seen":"2026-05-24T19:21:48.553377Z","times_seen":3,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.112.woff2","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.112.woff2 HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncpurple.net/css2?family=Noto+Sans+KR:wght@400;500;700\u0026family=Noto+Sans:wght@400;500;700\u0026family=Noto+Sans+JP:wght@400;500;700\u0026family=Noto+Sans+Thai:wght@400;500;700\u0026family=Noto+Sans+TC:wght@400;500;700\u0026display=fallback\r\nCookie: country=TW\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:11 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 73576\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-11f68\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 0\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J4LPW3069BFn279Qd%2FCCP%2FLQ6qXroXdAWxa%2Br%2Bh%2FpMlLGqm%2FwVQR%2BegP76gcIGJhoiNZBYVJ8kSM%2Fpo5HriEb2GQ4T44y5A8dy0WUkiPWVr7CSYaQYqH6plf9IHAQw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: a00ea972e936b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73576,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 73576, version 1.0","md5":"45ca59106c7110e395eb6ef279cc992a","sha1":"aae3e11f6fe0d2a2adacb7056ac2a5e153664d59","sha256":"efbfd98f36a0d81913df4ec9d1f503e611359292c81c8f0ffbea2a824deba65f","sha512":"8d65a156f9246726b3cf43238b1c0ea31f5760870fddecfca253fdfdedb837fcff2a743fa579e3a7dbbb26222464dd5eca1365ae54b7be16304e0ec8fcaecf8e","ssdeep":"1536:NeBvRmYButYBBOUmLZLzkz8KAl6FIx9zmyYVTfFXhm:NwvRgSBBDmN3kYKAXxpMVTfhU","tlshash":"e67302fc19162180adc1b2d93103479abca4cadc6aa1ded093d85577b43cbab7b03d76","first_seen":"2024-08-02T10:54:25Z","last_seen":"2026-05-24T19:21:48.555057Z","times_seen":232,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.105.woff2","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:12.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.105.woff2 HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncpurple.net/css2?family=Noto+Sans+KR:wght@400;500;700\u0026family=Noto+Sans:wght@400;500;700\u0026family=Noto+Sans+JP:wght@400;500;700\u0026family=Noto+Sans+Thai:wght@400;500;700\u0026family=Noto+Sans+TC:wght@400;500;700\u0026display=fallback\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:12 GMT\r\ncontent-type: font/woff2\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-10ac8\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncontent-length: 68296\r\ncache-control: max-age=2678400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EBz3g6ZxqMjprMy9qgxDJZeKxMdKD6AZdAk2cLJmT9%2BW3LXn1OZwBTx%2F5KuXUvGYAtIxuKLyJTsUkjvSFa1i724g4ozdXtAM45wM0T54BC%2FhMouhpObdIwrDk9YMcA%3D%3D\"}]}\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00ea97b39cdb505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":68296,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 68296, version 1.0","md5":"354cfeb1b53b3f118c1f10de22c25620","sha1":"f7fa497228ec44d4bb812fbcebf0192d0ddbaf35","sha256":"60a98d2d66304a02dc0fddb0b8b091c90201afdd17f0e9928bb54d59d25329c2","sha512":"3e3a4114596bbf19b136db6f601fd51c824ccf85319f99a5c244624edc80f54a101511f9075bed7622de871de6a416738711baef254af475483d02ed61ee5e0a","ssdeep":"1536:AY05l/qWgYIAdqpia0VVZvbhoFm9SUXadqMnqCxU:A3l/qTYIse1CZVHXeqMqCxU","tlshash":"7b63021620030b40d855ec3d8a8fa7e61d9945579bf9d4f925f933d485723bd932388e","first_seen":"2024-08-02T10:54:25Z","last_seen":"2026-05-24T19:21:48.555622Z","times_seen":477,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":239,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/download/v2/buckets/test/files/191356b3497-2cb6632d-9103-4d21-bf06-6869beb4ca58?format=webp","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:12.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /download/v2/buckets/test/files/191356b3497-2cb6632d-9103-4d21-bf06-6869beb4ca58?format=webp HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11998\r\nlast-modified: Thu, 22 Jan 2026 08:48:40 GMT\r\netag: \"6971e468-2ede\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WQcVcpNg673wBKHyBKjHrhkiEYKRu4Tm4s5tnp%2F7sNca0qJ55dckXvOz%2BFnLUyvcn6QCQmMkCjzBeE3AJwxuUKViSZDvMKls6uvzfYxfj7umAN%2BL0yWq3bV7Tm99ZA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00ea97b59d3b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11998,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dd3fddb2ce1ad56a2b72de2018ebb0c1","sha1":"1442999fdbd527f521380b9974901a860464ba92","sha256":"db77b588558fb106cc1afb66f6d4e5ee70c30899b2767c5fdcec3212a756ea70","sha512":"ac443072557dc14f83473f8d0935094bbc4402a6695ab43631479e82a01936433a5ec121c3ad4e027e4323d6ec2ce174d4a9ac190188ed496056008681616645","ssdeep":"192:5wTcyzcqF65fgEJNhb2Q/nT4gH+b72+IaYEV8mmcpdhi/p2Q6MstGVeZwoDNI:5wTcyb6YEJNhaGz+Odtmmc5G2Q+tGVgY","tlshash":"9632cf7cb3a477bcc51f50b477820b43865046a3669e2ad689ac87dd9f511354dc0bf3","first_seen":"2025-07-31T05:09:15.609366Z","last_seen":"2026-05-24T19:21:48.556843Z","times_seen":3,"resource_available":false,"data":null}},"time_used":599,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":594,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/layer_talk_c-YWErLJsy.webp","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /store/static/layer_talk_c-YWErLJsy.webp HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 120870\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-1d826\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BjAXaQOhuCx8byAwpg2nahmQBEo1ngwFEMq9k9GABZBum%2BHeY1oyPBiaYlNiFsRUSz%2FuJiXiBfsFvpd680J0iXBo4ZkxgcrMr0raxwaxjLgxADR6uv8m900hSE0ReQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: a00ea970e8dcb505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":120870,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"910e17902108cfd333fa485aa86363c8","sha1":"bf7ee5071ddf2f6cc49b5fce4246878669d87cd6","sha256":"ea92fc033e302132b6267d15b02fd5e39f2d2ae57e8eec243cc08bb44e875705","sha512":"ef589445e171780afdd0a242ac9e82b5d0ed1129017d27176a661f51d2127306e6ad17d2b46fddf790ab3e169981451014b8b1f75c48c19c624cd3f199826101","ssdeep":"3072:2/AgjMvHwBJszOU+BqCDSjWCPyNH7DCCd7:3luszOInjVPy5DC","tlshash":"12c312e4dee3a345676d152912f1c936ad4739a8735d1292e248c51efef90fe8400ace","first_seen":"2025-07-31T05:09:15.341188Z","last_seen":"2026-05-24T19:21:48.557783Z","times_seen":3,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/static/pic/004.webp","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:12.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /static/pic/004.webp HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 28376\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-6ed8\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\ncontent-range: bytes 0-28375/28376\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ubLt0Nq%2B3X1b%2B4PklBRgM%2FBF%2BlmZSQnP1qOXrVEXgM7p4n8cdUW5TM2Nsxptl5hm1aB4b09WqyMYEE15H3pTAu442AQQjfKyRRjOgmhQvbxcT98RK2Uguk1JIEnfMA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: a00ea97c0a0ab505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16384,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3a7d26ad138aceac20b21413466ea496","sha1":"8be53d9cce5ff320d27849da01fbbf62a3c8113f","sha256":"e1b685463e19ab4af05ade157bf4a158c3938462c4f2b8cd42109a1a12d025b6","sha512":"9ebecf15ca476c364f1207c4e01f43d2b15029da56aee9a70f3fd89989164655e12f013824134244e1a288733b31537cc8f07534e30f01ff6af97a00fd56f6c2","ssdeep":"384:XwD/rIYHE50RFaASaM5++y+9fC6sJoBSqMuV0:AH40DaAL/+y0OoUqT0","tlshash":"fd72cf2627a8c4edfa66187d08ad5541e2f62e5ebb40b3107c8c431edde72602155b9b","first_seen":"2026-05-24T19:21:48.558632Z","last_seen":"2026-05-24T19:21:48.558632Z","times_seen":1,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/img_on-O2mQo5oz.webp","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /store/static/img_on-O2mQo5oz.webp HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 154834\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-25cd2\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G0176OvIHW1lVbZxHTIxvWq6rwW0rmcLRf1YoVvsGVieGdVTNZQtuUia3hkRWbCAKl95FqOLUycl0nfG4GiWiXKzDwlZ243FIKSHV8u4Jd6TZS5RoLqD3fH2PrAPsg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: a00ea970c8cab505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":154834,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b3fcc29ebdb2a6a87403f5b041d44357","sha1":"6a762d29d8564e418723f6e3309e2b71b9bb5474","sha256":"51041fd639aa6ffa9e7df1255e6616289775f4a4f697189396a607aca2fa1dec","sha512":"b9db16a0a2a420173f2658e0a8fcc2d2ad738db8cd80c36e749a2ead87546fc5393088872ad41e197b06e5dae9a92a33558386907ea83725bc1c60923651a93d","ssdeep":"3072:F7UpoPliqzqHbGo835H6FXsVVVxK8W4/GZF:F4pYzqqJkXsrvWJ","tlshash":"c4e323e3e12d163c818490bfaa9616e5c9cbc455a88226ca3938fd5ecff3e52523543d","first_seen":"2025-07-31T05:09:15.518853Z","last_seen":"2026-05-24T19:21:48.559541Z","times_seen":3,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/download/v2/buckets/test/files/19135e91b20-bfc1c674-0d57-4ded-ac6b-a6b0513dbee5?format=webp","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:12.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /download/v2/buckets/test/files/19135e91b20-bfc1c674-0d57-4ded-ac6b-a6b0513dbee5?format=webp HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 43978\r\nlast-modified: Thu, 22 Jan 2026 08:48:40 GMT\r\netag: \"6971e468-abca\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CIqiW%2FLGrG9H1Q7xkL%2F2ResriiD%2BWKp%2FOQw%2Bo%2BJo7dS%2Bi%2F47BB49Sg0ib6kbPDQBzTSRTN6HFeXOWXTYfriuE3o43WgzWyiVLQygmtbOLo1kMpq9ec0C3oOrS40Sbg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00ea97ae9bbb505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43978,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7e9722260bdfbdb7e6b5f3c9477d9c21","sha1":"5409c1b20c38d3aa914571dcf896a6bc31a8742b","sha256":"ac6192c365732bf90d686deb19e785a13335fcd09eb0b0e35324577ee2f96a44","sha512":"a6b0da9d1fceaafe00ea7c53d95bec8cafb4225e51730312ba9a78a53991c1a0377783f0c6e72d548a66d6e32907e73e1e894edf85c29f660d6befa6d71f69cf","ssdeep":"768:uK9XQ0R/wPpJVo5HpGJW3qQeVbNhczp3zawNaAcu81Wb8B+JY2Q+FMgwB5xFfd:pXjxwBHqpGJqafciAubBd2Q9Bzb","tlshash":"9813f173d7106b27f2f853f109bc0607b9a66172eb9c2052f41fa42ca8254cd6b3ce95","first_seen":"2026-04-09T04:49:40.8067Z","last_seen":"2026-05-24T19:21:48.560452Z","times_seen":2,"resource_available":false,"data":null}},"time_used":667,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":666,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/contiQuery-YtB1kzRf.js","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:09.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /store/static/contiQuery-YtB1kzRf.js HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:09 GMT\r\ncontent-type: application/javascript\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 25 May 2026 07:21:09 GMT\r\ncache-control: max-age=2678400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"6971e46a-d09\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tYa246Wpx7I%2Ba6vrVeWgK%2BQIQfVOpJ6V98hEAwLuLHlyC7wPvslI6LBxdOTUpqMeB%2BlNFW14B04SKkUTdp2HpZ%2F4kB1HA%2F6YUoFUhQ99Q0iy7rJ7%2BDGAiu3EieU2hw%3D%3D\"}]}\r\nx-content-type-options: nosniff\r\ncf-ray: a00ea9697fccb505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3337,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3333)","md5":"276b66ba84c7cbb4cab0032871280235","sha1":"81016fbf7bfc173400e4c2253106f7d5b4687785","sha256":"5905c21a5c48158408eafb64092909a1bc13c03e5b114fe687b987115d90e05e","sha512":"9a7d4cc33b810995a2169c0c5b9672da5dd4f423d8e6d5b8a6582daa40decdfb057aa2fc084a69b74b447796fe19b9375193e8233ede92a3a5ab40d7dc46a0e7","ssdeep":"","tlshash":"7d6182d82196e1a35a7b44d2e07b4157e234a490708d8aa06dd8ceff2c9441e12a3f3e","first_seen":"2025-07-31T05:09:15.497059Z","last_seen":"2026-05-24T19:21:48.480466Z","times_seen":3,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/layer_talk_a-DWYfIFUe.webp","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /store/static/layer_talk_a-DWYfIFUe.webp HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 54018\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-d302\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8EATfZRmfmSrMXjbQ7GJQD80F%2BTszVAVWzWloz4QZqisk0KoauV56enaTzvQATrUv4EnupCRHGs%2FD%2FMQUhbJZwgm04r5KJLRJ5WzB9rVMVTV9aD2TdAq%2FPYAfkjMEA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: a00ea970e8dbb505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":54018,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6af76dfbf111dc1b25a2f83691939172","sha1":"6b845135e00dcfd69e701343715931157b1831f9","sha256":"dca71ba2399142ab643061b5527c80fb873ecc9a82d0c6a60b5e639d1f28d68e","sha512":"b116d82bd642f1921947652f18c806c53c963fd35ef3cefe5200c0d92300e8fcaa2a0a72ad6801faa3cd8531fca06e677af5d7a8c4bb2d314bf37d2d5c921694","ssdeep":"1536:8TNmJ68mZAy6/MbG+XgrpnLrh/i59uO7LfUvjjn9tuSZ7:MNmJ6hZgQQpt/ib7LEnT/7","tlshash":"8833f10ade0d9005608561723a4b23dffb6cadb74c7e54c5c6acb87bb425e93d33a44a","first_seen":"2025-07-31T05:09:15.651584Z","last_seen":"2026-05-24T19:21:48.561475Z","times_seen":3,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/download/v2/buckets/purple/files/19b6edc3717-a9e6edd0-be6e-4f88-9633-7a6f4f865e97.webp","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /download/v2/buckets/purple/files/19b6edc3717-a9e6edd0-be6e-4f88-9633-7a6f4f865e97.webp HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10100\r\nlast-modified: Mon, 26 Jan 2026 00:45:38 GMT\r\netag: \"6976b932-2774\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RvEZXRN8OhyrrZ5WjSWVdqzQr7PJAWtXjyRSk6WbX4fBtF4wZZbuo5u9BM7mfffKCZ1XM2JSYPF2LqH891zPFuV6MCwXpagGu23T5n%2FZahZYcZ2BpheWp1gGKAT1Fw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: a00ea9724912b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10100,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x281, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8b8fe8b1407c65ebf615accd3427e9c0","sha1":"118b2da00a850604685040ec4a1e0022f691bab8","sha256":"24a5359ad7181fe3fedb443d46aad2c4566b94725f9d7fa0168e76b3ed40e7c4","sha512":"a61d66e4fd1bfde81222fbe495363d38747c63aab32e73597070d1f21366f564c6e50c848831a4fa93b378325fe69e71f474bb1096b0b021fe0b12f01870996c","ssdeep":"192:gzazqLVf04joshvFPNl1sBFNjgX6zywPrDcRMfg/J6pbx:uUqLhJjoshvFPNlKB86lPrwRCg/J6p1","tlshash":"fb228eb95805a6027b8f4db0ca6f34256b1e622fc532d492d15a180f9fdb712398ae32","first_seen":"2026-04-09T04:49:40.816497Z","last_seen":"2026-05-24T19:21:48.562523Z","times_seen":2,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":235,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/download/v2/buckets/purple/files/19b9600789e-6a86cc0a-a636-4fb8-b465-6a9a7403f83f.jpg","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /download/v2/buckets/purple/files/19b9600789e-6a86cc0a-a636-4fb8-b465-6a9a7403f83f.jpg HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-24T21:08:01.202482Z","times_seen":15673710,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/download/v2/buckets/test/files/19135b3b705-11c7b901-3012-4fe7-85e4-ebcfbefe1171?format=webp","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:12.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /download/v2/buckets/test/files/19135b3b705-11c7b901-3012-4fe7-85e4-ebcfbefe1171?format=webp HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 50606\r\nlast-modified: Thu, 22 Jan 2026 08:48:40 GMT\r\netag: \"6971e468-c5ae\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1eqTsONykHY3ZH3tg071DxtSzyEpD%2BlKSenCoi0cJaO2w3E9emu3jCRz2fYO2V3z0BaxiGgdqxzH%2F7jvElsPSSj54y6FEO1HZjosgZtA68bshR5NZqrDF72Y7To81Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00ea97ae9bcb505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50606,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7740706383ee5799d8ffd35b2d488844","sha1":"cad774bbaabf2a13d7dc0dafe8268c3316b43d13","sha256":"88a2b71fc488cc22299c42db0967a134c3f8f0601aa7df6e016ceb06d76c1fe6","sha512":"d307fd7289b4fc2d9ca3b130f9890aff66ed0354019d30e7b70a6508bb42a9a458d27ba9fc1a39697eead43e6771595bdcc8abe3fa58e4848ab02a3073bc3f2f","ssdeep":"1536:WSxAVFE4wb/ZY3SrNhxLAhWQG/LgpgEVeseftOiO:fv4C/rN7LA3n75HiO","tlshash":"a333014b1a969d09c3d8a77d7c692b06fa73f11382b4572361f7418e6b0fcac909db84","first_seen":"2025-07-31T05:09:15.623813Z","last_seen":"2026-05-24T19:21:48.564065Z","times_seen":3,"resource_available":false,"data":null}},"time_used":666,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":665,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/download/v2/buckets/test/files/195c5ad4540-531902b4-07ea-42f1-bc03-f29a4282100a?format=webp","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:12.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /download/v2/buckets/test/files/195c5ad4540-531902b4-07ea-42f1-bc03-f29a4282100a?format=webp HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 67594\r\nlast-modified: Thu, 22 Jan 2026 08:48:40 GMT\r\netag: \"6971e468-1080a\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tK60dO34twcMPCCvOvvNzS53GKSVOHW5YFKrR5RXo%2FLAmMgUp4gIoT66WlCiALYfmDYPEk%2Beh88GvpfoLnUzm0gL7RiGxHtkNGNlQsbOB38Dsqrwa8pe0reCSWi8mA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00ea97ae9beb505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67594,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"258f0ce0ee683d1957ae2240586f7b25","sha1":"13bb77ce20f3829cd5fe38861bfdb34fbc86e083","sha256":"5ad3fc6ff168066441b93245a21cdb63984a737f111b2a49e321407f7f31e062","sha512":"728d1acea2ca663f373f58adda2f5f89bd6a0309e974518b60128da612144ca138174b6933f3d757e67efa560fec28da842ae4c1dd59f405e6020e00dfd5e5a1","ssdeep":"1536:VsGlmY+o1JefxynKyLanfPey0RvugtGHmDtYQ7DNBUe2jG:mk7+o1Je4sHb0UGDaQ7p6+","tlshash":"ca63122df6feaeecea2ddd3d1246415b84684c13de33232b5d68d00803fe0d951a9a1e","first_seen":"2026-05-24T19:21:48.565119Z","last_seen":"2026-05-24T19:21:48.565119Z","times_seen":1,"resource_available":false,"data":null}},"time_used":666,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":662,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.110.woff2","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:12.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.110.woff2 HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncpurple.net/css2?family=Noto+Sans+KR:wght@400;500;700\u0026family=Noto+Sans:wght@400;500;700\u0026family=Noto+Sans+JP:wght@400;500;700\u0026family=Noto+Sans+Thai:wght@400;500;700\u0026family=Noto+Sans+TC:wght@400;500;700\u0026display=fallback\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:12 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 79328\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-135e0\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XcQruupVC0sFl%2Bsulm3yRYphFkcsG1AIF9MV%2BV21fF44ejfFBkboWSOEcPvHixC0RLNp8QvkLr0B8ad3XJQHeuRRGaRH0eQufz%2BCh33ouFcpOIz6gcMY%2F6c15aoK3w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: a00ea97b09c4b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79328,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 79328, version 1.0","md5":"e48c8ffba5cc6942099f47fa16a4fa81","sha1":"792bd1537445436a57fba7fef3005108288d388b","sha256":"794fe44f598b687899e9315b4082fb19d413a24109503ea0abfddfbaa6836da9","sha512":"a7619449819dd8ab362d5174dc313f23c8ecca2a6e652dd3e772b0580be0a17bda848a0ad8c9200a310e238f3f72f000cc3d5a88e08c45b84e7900867ebea1d1","ssdeep":"1536:VS0XJTIbcd7I5pIrjx8zlcY2TPaVaoMj47jzHM/AHRtTsTq:VS0X1F32zl2uV6jMjvCq","tlshash":"3e7302058d47ad15abfd4d7dba1ea24f7bcd9d603edd6c0616503e88bd2c18b60290f2","first_seen":"2024-08-02T10:54:25Z","last_seen":"2026-05-24T19:21:48.566783Z","times_seen":746,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v833ccba57c9e4d2798f2e76cebdd09a11778172276447","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:06.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Apr 2026 18:57:25 GMT","end":"Thu, 16 Jul 2026 19:57:22 GMT"},"fingerprint":{"sha1":"AB:25:45:8F:55:B6:2B:26:B5:B1:EF:90:E0:60:64:9C:56:47:0F:B5","sha256":"47:83:31:CC:5E:02:0E:51:A7:52:AC:83:1B:8A:A8:4C:74:11:A5:F1:61:8D:C5:6D:29:3C:9D:6A:C9:29:AF:7F"}}},"request":{"raw":"GET /beacon.min.js/v833ccba57c9e4d2798f2e76cebdd09a11778172276447 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ncpurple.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 24 May 2026 19:21:06 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2026.5.0\"\r\nlast-modified: Thu, 07 May 2026 16:44:36 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a00ea959dfd332fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33228,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (33228), with no line terminators","md5":"3ec2f610910f9dfd8e87975604e5e34c","sha1":"10d61ee41e8fe816ca08616159d7b6b8294a2011","sha256":"aca73fc574e12740e3368860b88a284d01b643456f3ed6a06322ecb47750563f","sha512":"e7b30399c71c25762d3671fe662070cc2e236f6aef815084a2460df8bfe72e598ef2b7d84ff808a56d80e7af6227fddbfb45046ac8218ee647fe66b7c08b3f11","ssdeep":"384:qVCILwCiUg1IX33sDycq+AgMXUQKxrhxIZOGNG620vbgZLTE5egwolSV0yuuokwz:AwCiUqHmcd/5xdKZdt8Z3Cer2yuuDPQB","tlshash":"6ce219e9b595713613f350b2406f220bb33a7562588e8018e22bd7c16c78eded267f6d","first_seen":"2026-05-07T16:46:10.96487Z","last_seen":"2026-05-24T21:13:46.117934Z","times_seen":14738,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":29,"dns":25,"connect":1,"send":0,"wait":20,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.118.woff2","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.118.woff2 HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncpurple.net/css2?family=Noto+Sans+KR:wght@400;500;700\u0026family=Noto+Sans:wght@400;500;700\u0026family=Noto+Sans+JP:wght@400;500;700\u0026family=Noto+Sans+Thai:wght@400;500;700\u0026family=Noto+Sans+TC:wght@400;500;700\u0026display=fallback\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:10 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 60392\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-ebe8\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 0\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gVu%2FHcGsmadVB1G%2FbBrVyHv45q68KTXt3QgRwpIRcOrJ3BKFU4QFz0b23%2FdXuyyl1i%2FXHTdqUw2WOxi75uzpQmyHF6Upb23ucnmwT%2FwXRjmiAGJfsfVZByvBQLMlsg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: a00ea96e3872b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60392,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 60392, version 1.0","md5":"f8aca6ed71a0e762c288e42f6bd2ae05","sha1":"5248c522c0d1d500f6a1ee2266a482bb61bfe7de","sha256":"e4b63b4b428294f9315339496162012eb40497dd9b84e1e52d5d7abcf6338a48","sha512":"03839633576bf208b8e291feec1e927e5b1dbfcb5b27111193250ae57b6e9d4185e3dec7c9ed4d5d07bbe3dc8991e1ee299e72d51b3412ef22a2798962a24313","ssdeep":"1536:rMDNusnjSUnO7LSXghxnOQ2zPx1YqHB1IbisUllR:rMpzSUnO7L1hxOQqPxmqh++sUlj","tlshash":"714302c13799b86d9ac45973fc7bf90ed89e1c10136b42a1e27ec85e948798c8537788","first_seen":"2024-08-02T10:54:25Z","last_seen":"2026-05-24T19:21:48.569229Z","times_seen":255,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/layer_on_b-Dc6Qzhw-.webp","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /store/static/layer_on_b-Dc6Qzhw-.webp HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 47762\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-ba92\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UTl5mK15ACq%2FZJ55t2NvzNIfjoyuf8uDHhoH7%2F8gNpuJ%2BhkUWvaJKypJyxtt9MbS38gZkwSWoFvcgSwL3rSwqg2RYXNIZwcCB4oY%2FSM5AB0XUJBr4R2doxXZz0qybg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: a00ea970d8d7b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47762,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"df7eafe83386b4cc0bcc5e4381cd7d0b","sha1":"9b3e6599e0ac9a0ce247c6cbced862ce8b7caeb1","sha256":"9c3dfd43d511105cf64a0acb82b329a90f44c4ea17da85560e99b9cb2177502e","sha512":"38095db9ff22dda63fc00275f569e45cf9caa3fc3fca0555b74d328f19e035aec4201412f91352ab717ba1ddfa016d98d27bbfab49d78778b68263758868d2b6","ssdeep":"768:kpGU5AKhGVqjMp4zwTTLrQzmha2CkhFezfTFbrhTbQw8hbdnmC97z20UAP44Q1Zr:kIKgqjMp4ETQqhNTubdhT0wIV1BFPP6x","tlshash":"3123f1fc905e9b37c4140ff481c0160071e49769beb11903762aeb62af9f53afbb1a48","first_seen":"2025-07-31T05:09:15.574271Z","last_seen":"2026-05-24T19:21:48.569995Z","times_seen":3,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":236,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/download/v2/buckets/test/files/1953669c2e4-a6e0ecbf-9834-48e1-9a2c-d421160440cd?format=webp","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:12.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /download/v2/buckets/test/files/1953669c2e4-a6e0ecbf-9834-48e1-9a2c-d421160440cd?format=webp HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-24T21:08:01.202482Z","times_seen":15673710,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/index-CM0pqhPq.js","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:08.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /store/static/index-CM0pqhPq.js HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:09 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YBrdLygIzgXqpdGzRDB8%2FIkWiK%2FD4OHc8%2B5815AKIiC28mO5lBJxc73m0D9lxwdVnbiCrk1%2FhASio5PjBXTOhYrObjwVdlxVu5kk%2B1lkETv2FNp9Vo%2BqnF2VRGonew%3D%3D\"}]}\r\nexpires: Mon, 25 May 2026 07:21:08 GMT\r\ncache-control: max-age=2678400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: br\r\netag: W/\"6971e46a-25714e\"\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00ea961cec9b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2453838,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (50417)","md5":"2dc43e80be7b302c2c201768778c97ed","sha1":"5b67b3a967609b448d3df2bf6bff1ebbd76a0485","sha256":"1b92f451a218646756e5aa78df93fb1829692ac4f88dae08b54ddbe13d785eeb","sha512":"3fa3586c534ea8f2134f8d7653223a943a908ba17afe5e193a93dc1ebb36727148a784ba7587d403527bce7272ac90dae6325e115f62221a388685ace8d1c349","ssdeep":"24576:tuOKutsb7BhmIAbhviIflJnuB8/ZOg6WCvvf/OYKwD9Fm27qW:tuOKuABhmIAbhviIflJnuBPk2n","tlshash":"93555cc795cb033b0a9242eab84573c0b6bdc0fb938d493746bddc6c20be59591abd94","first_seen":"2026-05-24T19:21:48.571188Z","last_seen":"2026-05-24T19:21:48.571188Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1075,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1050,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.117.woff2","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.117.woff2 HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncpurple.net/css2?family=Noto+Sans+KR:wght@400;500;700\u0026family=Noto+Sans:wght@400;500;700\u0026family=Noto+Sans+JP:wght@400;500;700\u0026family=Noto+Sans+Thai:wght@400;500;700\u0026family=Noto+Sans+TC:wght@400;500;700\u0026display=fallback\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:10 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 65560\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-10018\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 0\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l8zz%2FJ0ndtY3L3u3q6Jp5SzzHKqiAP4mWJ5J2iJb8sbtoWd1tzr06ZQf%2B5pauuV0ItVWzT6%2BcYEB2gWGUlX8GtJsvij00Cjn2ldw85WPO35VbrQeVsHfpxpxnYPkLA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: a00ea96e286db505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65560,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 65560, version 1.0","md5":"0235e10363bf82c8f4e201c6a01918df","sha1":"c415a428b6e1c05c94e4bdcf7b0e597b930953ce","sha256":"9ab69e66ed399a0646bc494fc668570e59b2a27354367acda9109bb6de550201","sha512":"45939d30e6d8f197cdde7d644eeebc828a3dc8a8bbf68fab3df7298df63a95443308fc203bfe268d31a713c4ba955c662d534377e14120968c3c9bb575789285","ssdeep":"1536:aFkY2VmKG64Ypi2XjPnjI/GrQXVanvD1puWf8fJ0ckH+2Or:a+UKG8VfDQXsnvDXnUzqOr","tlshash":"965302a201876301f48fbc72b3d03da5b56ca01eb11d16bb021b2b5e2b5794f2c61dbb","first_seen":"2024-08-02T10:54:25Z","last_seen":"2026-05-24T19:21:48.572507Z","times_seen":251,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/index.es-DW6-_W8u.js","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /store/static/index.es-DW6-_W8u.js HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:11 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tX0P%2FoD%2F13KNvvYpONKZmxwf%2B83nkPKmOyw%2Bcc01WF21P%2BhhiFgJDH7tJvSzM%2BxvyTtUT%2FO5NOTH65haDjkY32ewHHVS2%2BHAlPvlObhX3VRM1j%2FqU2REoefnIlefAw%3D%3D\"}]}\r\nexpires: Mon, 25 May 2026 07:21:11 GMT\r\ncache-control: max-age=2678400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: br\r\netag: W/\"6971e46a-105\"\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: a00ea96f98abb505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":261,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"9b72b9b373cadedb1044f7bc95bc50e8","sha1":"8a68f37deb0ce78a8444a47973827f3624f29e07","sha256":"6952eb9cf0a112edd6822a209122ee97340416c1330c7eec22d5c702996b42f5","sha512":"edd7b0c73af1d9ec288d0b144ab5209319ed846fb5ae8d8678af46047c6fe663c914977528e7a635f31d05fde771dff7a9a819b0e050975ae0df499ce230b381","ssdeep":"","tlshash":"2cd097249b97fbb1818d4b208f3a3ae1320ab189a35819dea5a012221201835b60aea5","first_seen":"2026-04-09T04:49:40.734695Z","last_seen":"2026-05-24T19:21:48.573211Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1432,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1432,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.110.woff2","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.110.woff2 HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncpurple.net/css2?family=Noto+Sans+KR:wght@400;500;700\u0026family=Noto+Sans:wght@400;500;700\u0026family=Noto+Sans+JP:wght@400;500;700\u0026family=Noto+Sans+Thai:wght@400;500;700\u0026family=Noto+Sans+TC:wght@400;500;700\u0026display=fallback\r\nCookie: country=TW\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:10 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 79328\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-135e0\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 0\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uOk6xzeQJQqQH%2BwkG3r9shIIOzLvUbruatceO4QlBknBVtiS50YcAIqS6Js5gT6NUwTan8rH8Ne2xt73Ex%2F%2FJxYxeDGhDHLHcuErQEiSiR8W5F8f3w13XogtbEQvNA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: a00ea972e930b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79328,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 79328, version 1.0","md5":"e48c8ffba5cc6942099f47fa16a4fa81","sha1":"792bd1537445436a57fba7fef3005108288d388b","sha256":"794fe44f598b687899e9315b4082fb19d413a24109503ea0abfddfbaa6836da9","sha512":"a7619449819dd8ab362d5174dc313f23c8ecca2a6e652dd3e772b0580be0a17bda848a0ad8c9200a310e238f3f72f000cc3d5a88e08c45b84e7900867ebea1d1","ssdeep":"1536:VS0XJTIbcd7I5pIrjx8zlcY2TPaVaoMj47jzHM/AHRtTsTq:VS0X1F32zl2uV6jMjvCq","tlshash":"3e7302058d47ad15abfd4d7dba1ea24f7bcd9d603edd6c0616503e88bd2c18b60290f2","first_seen":"2024-08-02T10:54:25Z","last_seen":"2026-05-24T19:21:48.566783Z","times_seen":746,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/download/v2/buckets/test/files/191356b3497-2cb6632d-9103-4d21-bf06-6869beb4ca58?format=webp","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:12.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /download/v2/buckets/test/files/191356b3497-2cb6632d-9103-4d21-bf06-6869beb4ca58?format=webp HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-24T21:08:01.202482Z","times_seen":15673710,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.115.woff2","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:12.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.115.woff2 HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncpurple.net/css2?family=Noto+Sans+KR:wght@400;500;700\u0026family=Noto+Sans:wght@400;500;700\u0026family=Noto+Sans+JP:wght@400;500;700\u0026family=Noto+Sans+Thai:wght@400;500;700\u0026family=Noto+Sans+TC:wght@400;500;700\u0026display=fallback\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:12 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 74456\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-122d8\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=glXdiwtfY3jseFeRZ5%2F8lp%2BpckCQr%2BIDrX9czqjANvZ13MJSoizqmsFWFDCW1i0WsnPAzH1gcio%2FYGCcaLg6uHTdkh1ge2PxdlxLrWh7FU%2BZ0ILIuO8ouuZjJiBIYA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: a00ea97b09c5b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74456,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 74456, version 1.0","md5":"4db4fb890c0dd7f649b8b77fe93471bb","sha1":"a4c9a12e564fb4f7557b043c615e0371b306273b","sha256":"1458f29401c63c3b3d8bb17e4387e96cfa803ec81830a3f61e305fed27da5f6f","sha512":"dfe506a8f40881f1b88d8abf28c3905baa5c4136165bbf1b776cfce9955422838500bf17e837268921116c88f5f060a163d521e50e555b34a4e6f9bc0d2c7ba3","ssdeep":"1536:j0zxa5eXP4nbPwBRj2GCWjmZrY0emJ2Mw0YHtmRzCwVje9Bu:otXP4bPqSFYQteI2Z0YH+zTVjezu","tlshash":"827312a87dde2bf185f94bd12a7638c259bfeb13080211c7610c6e5e1705fa2ba15f8d","first_seen":"2024-08-02T10:54:25Z","last_seen":"2026-05-24T19:21:48.496568Z","times_seen":240,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vod.plaync.com/JM/teaser/INTRO_PC.mp4","fqdn":"vod.plaync.com","domain":"plaync.com","tld":"com"},"ip":{"addr":"3.167.8.90","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:12.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.plaync.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sat, 19 Jul 2025 00:00:00 GMT","end":"Mon, 17 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:F4:CA:BA:19:28:7E:5F:EF:F0:BD:28:39:57:94:56:2E:47:65:1B","sha256":"C0:63:94:54:91:29:48:B1:DF:D5:1E:5C:28:CA:92:EA:18:15:D5:90:C2:AC:7F:9F:C0:FA:A7:D8:CE:9A:38:67"}}},"request":{"raw":"GET /JM/teaser/INTRO_PC.mp4 HTTP/1.1\r\nHost: vod.plaync.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ncontent-type: video/mp4\r\ncontent-length: 6865633\r\ndate: Sun, 24 May 2026 19:21:14 GMT\r\nlast-modified: Thu, 12 Sep 2024 04:49:46 GMT\r\netag: \"c1954801ace8b2ba1df99f5287871a7a\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: 14f490506b04276e6925c5497c2f9bce1cb82fad16ac7f623fd2b1fc60d05425\r\nx-amz-meta-s3b-last-modified: 20240912T044800Z\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ncontent-range: bytes 0-6865632/6865633\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0dab08166aa7b915b2e3314728d79750.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: XmBmwoF39gHOwQbmXAPlxfM0p8TqHyoF3C-JL2JsSTSuZZFIIaVhrA==\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":6865633,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"2833ec323a2899296ee0c90f7606867a","sha1":"755f2fc08b9dae57a8bc6075980a4503ac28f36e","sha256":"e61c30da415afc4dd773937651ac4d855b4b70bfa41f48e42c48477f998616d1","sha512":"e6c25465041c87fc3c4f757bd3a403202efa7ce281bb74c4c779fd81691aba8be3bade6b7102be3f37b7312650722e5733c01af845b06cbd0ec9663cd1f9249d","ssdeep":"24576:Ok/a+PA+t7/7uBW8EUIle5F5qltdX4fe/5kywctx:Ok/a+PA+d+sUIwFsd2dmtx","tlshash":"192523587de5ad82f664e2bca14cd300d023bd761e950d43f79d21212f264951caeaff","first_seen":"2026-05-24T19:21:48.574338Z","last_seen":"2026-05-24T19:21:48.574338Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3787,"timings":{"blocked":492,"dns":142,"connect":1,"send":0,"wait":820,"receive":1979,"ssl":348},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.116.woff2","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.116.woff2 HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncpurple.net/css2?family=Noto+Sans+KR:wght@400;500;700\u0026family=Noto+Sans:wght@400;500;700\u0026family=Noto+Sans+JP:wght@400;500;700\u0026family=Noto+Sans+Thai:wght@400;500;700\u0026family=Noto+Sans+TC:wght@400;500;700\u0026display=fallback\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:10 GMT\r\ncontent-type: font/woff2\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-117f8\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncontent-length: 71672\r\ncache-control: max-age=2678400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4ASoonokndLvjxSWf61O1iLbizb7FhO%2FbUIkz65a3zjFXwctRm6a8s3pIMXaXZjDyyxItvtfgIMlqKuxwXsxfJqBaI1D6rntPfWawkgePNVyHdpgp2FhUravgTtvOg%3D%3D\"}]}\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00ea96e4875b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71672,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 71672, version 1.0","md5":"f2fa4cadf0b68b868b744e813fd23860","sha1":"7bf9c03148e342b289ec5990c099a2de5bc410ce","sha256":"304dafaa54b29dfbe7c4715b59c26bc40163ddd887275d3b4c2cc2cd09c8b873","sha512":"5764a94fb5f2a34df8740ffef083cd4fc8be6666dcf6285e52c0951eb3bd51dc69cbd43fc5af7612838bea350f6cabf07ed3ae2a465229182c53a2a5108e762f","ssdeep":"1536:YGPSxM1QomyFXwaJzp5N98RntoQwAtm0W2HS3uCj:OKQo7wud6toQtB5HS3j","tlshash":"bc630261393e1b41983a9e7191b9e2b11880687fcbf51a65b12ef67cb18c18eccd75c3","first_seen":"2024-08-02T10:54:25Z","last_seen":"2026-05-24T19:21:48.460384Z","times_seen":904,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":252,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.52.woff2","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.52.woff2 HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncpurple.net/css2?family=Noto+Sans+KR:wght@400;500;700\u0026family=Noto+Sans:wght@400;500;700\u0026family=Noto+Sans+JP:wght@400;500;700\u0026family=Noto+Sans+Thai:wght@400;500;700\u0026family=Noto+Sans+TC:wght@400;500;700\u0026display=fallback\r\nCookie: country=TW\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:10 GMT\r\ncontent-type: font/woff2\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-a5c4\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncontent-length: 42436\r\ncache-control: max-age=2678400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TDgcLXSEieb8gOM%2F1Rpph%2FnxjQG9lCqScIya0vXcbFUGIeS8gp7gIEEuaCpOwSLieKLGHHpS1lpHhhGTlR5xA3bdwuOEfnaMBWTRJzVVGY9ZZTLDLbRj9s7KJN4qiw%3D%3D\"}]}\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00ea96ed898b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42436,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 42436, version 1.0","md5":"12667d47eef47ef8cfa8b28b826a4544","sha1":"0ba394e27e3e396289094c966fd53402f49383f7","sha256":"09ee3de3bee039439c6c236fed657786f7e976fb31afa3a56d215b69f9b0d447","sha512":"35bd2ac67c8794b612857e1f49f53b49fd90ae03696218b9f01c209bcc952c13d20b3e28cc6042c50f3e058d932650ebf847ec0e74bdacfbf110c5f0ccceedd3","ssdeep":"768:Ab6DyCJgPM4oZRO/PKtOB9ma9Qzr8JV6HVHYmafwZF4gd61e604B:Ab6Dy4hPZA/bQHWVQHYmafq2gd61HvB","tlshash":"9e13f18e7bd292afc4522b33412206351f5a0d1ea963499caafeb6c47d5f43d8da007d","first_seen":"2024-08-05T00:51:05Z","last_seen":"2026-05-24T19:21:48.576095Z","times_seen":59,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/api/categories/purpleWeb/contents/purple-store?keySets=TW-store-main-banner","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.335Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /api/categories/purpleWeb/contents/purple-store?keySets=TW-store-main-banner HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: zh-TW\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nlime-api-version: 163\r\nlime-device-id: DF-MmbnrEOKQ73QFY8Ak8GOyPaFFN5qe\r\nlime-locale: zh-TW\r\nlime-trace-id: 8946f161d968070a5b0e4e8a8b58f3cf\r\nx-countrycode: TW\r\nx-nc-publisher: NCK\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:10 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\nmd5: 5ac76f55e68bbf40bfb24653ea9d0a48\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pELGOp2vhjiBv7yc7uw6rmD1TSHf%2FRKucJ28yabLJFUVfJpN1JFkDqGZfBtlhj0gQkP6PdSQ1S13tDRlzo2SZh73koLWxdoLKkTXuaaB9Yz2J2Q7hsVZFVWylIwXAQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a00ea96fa8afb505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12282,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"bf7c3bd6e8b0f792d295965392f51834","sha1":"c35d6a4491b5c5b5113527dee2f765a427dcf134","sha256":"0434f3b8bd79386a2d643051be9e257f50ea5eec168b3e05a5321e9db4b950cf","sha512":"fb924e9ff7865de232ed785374a6dca7ff3bf18dd928d4b280d55cb64d81b13ed49fc7ee7f2cd12177cc06784c0af33c6a3e1279f5d34b02838a7df8a18942e9","ssdeep":"192:lrvcj8CSDig8gMiCSDyg8gESD9g8g4lVqSDwSD94g8gwrSDnjtSD+yH5SD02GQS1:lhXRV7XTcl","tlshash":"9142cc7bc4a44d6b02b563799c99260af126439f1a81da0bf47c1a4c0ff706b6d85b3e","first_seen":"2026-04-09T04:49:40.735845Z","last_seen":"2026-05-24T19:21:48.577883Z","times_seen":2,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":387,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-24T19:21:05.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 24 May 2026 19:21:06 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\nvary: Accept-Encoding\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=27,cfOrigin;dur=965\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=htj9bymFjEdmu78RHUJSm6RiiyTNjjmIlK6Wn7qPg%2BKBxPz1YnsWvk8nO2bYMEbEZkDNjcCWJ0l9Z0M8eKg0%2Fv3B78OStdy9VueOsY1GdM%2FDb7tbdJ%2BOPVvIDTmPHg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncontent-encoding: br\r\ncf-ray: a00ea951fca84c11-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4063,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1536)","md5":"134c3aa721f0fc093b72c185643be3fd","sha1":"f5d451a11600173a966e9096c71da9e58e3c232b","sha256":"33b7b881937f05f8163d79d273fa815c888e76d4438f8aef4052c5e939b5bc79","sha512":"9fde248144fb8ec2d5509371130c0d25537ab8be7bdba307d6889b178f03ce3ab6aa3c3ccbba575af980a0b93fc2bd1c0cc913ba3bf964e883e91128918fd7d2","ssdeep":"","tlshash":"418164a71c40d82e272707227976b20873e1d05b81659c41f4dce87d0fd6feec9a3a5a","first_seen":"2026-05-24T19:21:48.579167Z","last_seen":"2026-05-24T19:21:48.579167Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1129,"timings":{"blocked":60,"dns":34,"connect":3,"send":0,"wait":1009,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/index.es-Bc8NyCZk.js","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /store/static/index.es-Bc8NyCZk.js HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:11 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=El29nRMWdSYte7PMrmJnUkT9xqSt0ckl9UZIcWSdpdO1gQNEZRqUFOmAMW5%2FwmMtBQGdBnowJK5IMmJvv69f7CfWhjmUIZuJ1agFuVhf4JI%2BlNWpABTr9EtzqvT%2BWw%3D%3D\"}]}\r\nexpires: Mon, 25 May 2026 07:21:11 GMT\r\ncache-control: max-age=2678400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: br\r\netag: W/\"6971e46a-3eece\"\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00ea96f98acb505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":257742,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"f6290439758225d02c8c2f9a07f74046","sha1":"307ed4cb96a20ecf4be0975698b8b0a07f143a74","sha256":"24ae94998161e1f9e4d0beb7dc88dc9cc51867328d007548d0edc8c82be562c9","sha512":"6743a6aa6c15354d11889745538538738d015cabeef6e2da169a4f1f8e8502d9090174713b5036be634b04db1964bb9486ab258fd95e7dedcf00f496d8adf15c","ssdeep":"6144:P1fwvy/elILjTybRU+15tVuTNFdnoFMVJXKpw6e:P1oq/elRdDuhbdOE","tlshash":"194412e69a36e5cd4bccef1c05bf5eb0c8d52ac8c21cdddc82217e53a055977a82b524","first_seen":"2025-07-31T05:09:15.470298Z","last_seen":"2026-05-24T19:21:48.580266Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1208,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/bg_live-CyfqenYk.jpg","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /store/static/bg_live-CyfqenYk.jpg HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:10 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 62554\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\nvary: accept, accept-encoding\r\netag: \"6971e46a-12e37\"\r\nexpires: Wed, 17 Jun 2026 12:38:51 GMT\r\ncache-control: max-age=2678400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Agf1P37bbPmORze1EaoIusuqXrAvFHyL47sFAVTvr6fZwQHrQjaXGj71jx4Zb6Q7awsPcwCeV11kZBtxh4zWDAfmtOfjXj4E%2B8VBRe5dbM%2FL1R4L7IHC55kJ%2BbbWTA%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-bgj: h2pri,imgq:85\r\ncf-polished: ok, orig_size=77367\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\ncf-ray: a00ea970c8cdb505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62554,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 5120x960, components 3","md5":"3e2b586f72919745396293e8f615b801","sha1":"eadfc685072c8ed7e7f485795ab2f6100458eea8","sha256":"0f8b9afbb860ceb720ca694b681ec40e6e25b19b52e7b6d8a4bfaf22eba1b158","sha512":"d5b2d54dacddc43c275914eb7015438a5586d3d5c8a2734f62a6f5c96d37c6f6262ef016e29ee73aedde3e7379ee989b363639c05e221ace6550abf9d50943e6","ssdeep":"1536:s6boNCJjTA4BAv4nahf7vZV7sXaraDmA6hEhGrw/b6:7osJjT/mL5ZCXaraDmAEEh9/b6","tlshash":"9c53029af56bd802c1f04af0a6b8be1d55126b8261f79d93df20b44164bdcf82c8dad4","first_seen":"2026-05-24T19:21:48.581345Z","last_seen":"2026-05-24T19:21:48.581345Z","times_seen":1,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/layer_live_a-DzaDGuEX.webp","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /store/static/layer_live_a-DzaDGuEX.webp HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18322\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-4792\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l6lYez825CGbkII8pm98NQdTWcm35X3JgbYxiI7fdt0Uu94%2FuBlE9DofWvC3Ru4SfJnagX7rBh3nGRK9%2BTSNcF9Y7Wn%2FldiH1zDAx7kkHeMJG2gnOQHjLX7g8m6dsg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: a00ea970d8ceb505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18322,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"56c11be635441c0cf2c8e9aa0210474d","sha1":"a91b6a8ae099bc281a8d9b0227ffdbc981aecaff","sha256":"4f3bdfe4fd4d6a32ddf979f088ca079744d557a5fc51e030adc47572aa1fe5ce","sha512":"d13ae7579d8109e566f6d463d6c461e0f12b93b7fb467fb6cc7e2163311ff110bbacf374c3bcc6b0d30a3e4ba6e2435168227425dcbd9d66e5425714774980e9","ssdeep":"384:HgFegNMBi9djoe/1FzGGcPZXeKMehzEW1gvqYyMnX0svX8zR/wUAP:Hggpk92ePrcNe8N1SyMnXV8t/7A","tlshash":"5e82bf64adf5309dea264ff85aa250d72f32d48028630a4d38e6ed21a097735d4fc4f5","first_seen":"2025-07-31T05:09:15.293633Z","last_seen":"2026-05-24T19:21:48.582542Z","times_seen":3,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.117.woff2","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:11.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.117.woff2 HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncpurple.net/css2?family=Noto+Sans+KR:wght@400;500;700\u0026family=Noto+Sans:wght@400;500;700\u0026family=Noto+Sans+JP:wght@400;500;700\u0026family=Noto+Sans+Thai:wght@400;500;700\u0026family=Noto+Sans+TC:wght@400;500;700\u0026display=fallback\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:11 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 65560\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-10018\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 1\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MUNHTaA3r4OydC3cv%2BpJHKvlTud%2BRa8Qw6U%2BtP1UCfu9Iw7BHGJemt55LwNLrZn%2BZkr%2F6JWF7BZvJRY2OPbbXCgm07pynLfzkn1WadTYoJ4zL1eKkxQ1xpBsGq8dXA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: a00ea9795999b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65560,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 65560, version 1.0","md5":"0235e10363bf82c8f4e201c6a01918df","sha1":"c415a428b6e1c05c94e4bdcf7b0e597b930953ce","sha256":"9ab69e66ed399a0646bc494fc668570e59b2a27354367acda9109bb6de550201","sha512":"45939d30e6d8f197cdde7d644eeebc828a3dc8a8bbf68fab3df7298df63a95443308fc203bfe268d31a713c4ba955c662d534377e14120968c3c9bb575789285","ssdeep":"1536:aFkY2VmKG64Ypi2XjPnjI/GrQXVanvD1puWf8fJ0ckH+2Or:a+UKG8VfDQXsnvDXnUzqOr","tlshash":"965302a201876301f48fbc72b3d03da5b56ca01eb11d16bb021b2b5e2b5794f2c61dbb","first_seen":"2024-08-02T10:54:25Z","last_seen":"2026-05-24T19:21:48.572507Z","times_seen":251,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.119.woff2","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.119.woff2 HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncpurple.net/css2?family=Noto+Sans+KR:wght@400;500;700\u0026family=Noto+Sans:wght@400;500;700\u0026family=Noto+Sans+JP:wght@400;500;700\u0026family=Noto+Sans+Thai:wght@400;500;700\u0026family=Noto+Sans+TC:wght@400;500;700\u0026display=fallback\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:10 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 34736\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-87b0\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 0\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BaTz9hgcdS98Sis31j2r7i8g5CN%2BdbpOTWCUcCac5dgXq0s1YcMwuoUyw1wnuL0UgYlwuxjse6F95z7s4f2yUdWC90L98eD9bPn0d8HiynF0kUuSISfAbNKgg9pS6A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: a00ea96e3870b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34736,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34736, version 1.0","md5":"8822610ec522feaafc5daa33311dda90","sha1":"6e72457c14d36a2dbf5796cf6ea4c5873142a3d0","sha256":"4a9850f931ed681bcb86f15dbe8d7961203af4be7bfc28b18657c27c47f1dc1f","sha512":"386da30a80bf787702527481c3e0f30c98008eeba4752850ff0e8c3b02b2899798db1b2072a68b90b31425331c528ccc43c2cf460aec6eb7d36fb2f151857040","ssdeep":"768:HtJgDM9N+9DxgS1txGEbUXeguJqkzcItQqn9NgbyR3jBc:HADS0ltxGJegkqcHPgbyR9c","tlshash":"59f2f11d750cfb6f712da77b01b233a2146aefa8f8f4ac28540ba75bfd4c200a647845","first_seen":"2024-08-02T10:54:25Z","last_seen":"2026-05-24T19:21:48.50096Z","times_seen":266,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.104.woff2","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.104.woff2 HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncpurple.net/css2?family=Noto+Sans+KR:wght@400;500;700\u0026family=Noto+Sans:wght@400;500;700\u0026family=Noto+Sans+JP:wght@400;500;700\u0026family=Noto+Sans+Thai:wght@400;500;700\u0026family=Noto+Sans+TC:wght@400;500;700\u0026display=fallback\r\nCookie: country=TW\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:10 GMT\r\ncontent-type: font/woff2\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-10d08\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncontent-length: 68872\r\ncache-control: max-age=2678400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KePkvKMt%2FALcEBBCzyptATJlM3QAY%2Bo8mArVHaBQBiWDaGeWWIWnxJIBCE0Efrpj4OcHZekK%2FKmf7n4hEbeOHGCD7TJeT3l28zwVOnckku54PIgaqS%2Flnxy18FJs5g%3D%3D\"}]}\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00ea96ed896b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":68872,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 68872, version 1.0","md5":"904d06e8892f4083805dbf784e0c1a5f","sha1":"b3e177959523eca86ea28587cac83e127e05182c","sha256":"cc7a2029bc9be1ae09429ff560b2809e23ba061374c021c6ea5d4b5002c9eed5","sha512":"fab6e0a2dbcbc197b4fd1619180102b337529070a9be4e87da5072edc98e8670a47676d579e402d74efbf891dfcff109d73b2067058a279d39ca58faf045afec","ssdeep":"1536:7deTXYZBldP7H+tt+5A8Dd7qRg6aGIXCReuhQ2kE:ATX4/Dd7qVJReiQa","tlshash":"92630215f5f2178fda4c0be052176d13235edf39ae73d8948325e8825b90accdee8296","first_seen":"2024-08-03T11:00:29Z","last_seen":"2026-05-24T19:21:48.58835Z","times_seen":125,"resource_available":false,"data":null}},"time_used":598,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":582,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.110.woff2","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.110.woff2 HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncpurple.net/css2?family=Noto+Sans+KR:wght@400;500;700\u0026family=Noto+Sans:wght@400;500;700\u0026family=Noto+Sans+JP:wght@400;500;700\u0026family=Noto+Sans+Thai:wght@400;500;700\u0026family=Noto+Sans+TC:wght@400;500;700\u0026display=fallback\r\nCookie: country=TW\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:10 GMT\r\ncontent-type: font/woff2\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-135e0\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncontent-length: 79328\r\ncache-control: max-age=2678400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n1tAR3xnLSFKmEe%2FNRHhv9fdloc4tRZn%2Bk%2FPAvocjiL9MjZwDrcAxZns9hOloBFYl0VnHDK2y4ou%2FgohJa7EGowzdo5HHfgwlEvTSG4xxNgjiA%2BGjESAzF1MYEEN7A%3D%3D\"}]}\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00ea96ed89ab505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79328,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 79328, version 1.0","md5":"e48c8ffba5cc6942099f47fa16a4fa81","sha1":"792bd1537445436a57fba7fef3005108288d388b","sha256":"794fe44f598b687899e9315b4082fb19d413a24109503ea0abfddfbaa6836da9","sha512":"a7619449819dd8ab362d5174dc313f23c8ecca2a6e652dd3e772b0580be0a17bda848a0ad8c9200a310e238f3f72f000cc3d5a88e08c45b84e7900867ebea1d1","ssdeep":"1536:VS0XJTIbcd7I5pIrjx8zlcY2TPaVaoMj47jzHM/AHRtTsTq:VS0X1F32zl2uV6jMjvCq","tlshash":"3e7302058d47ad15abfd4d7dba1ea24f7bcd9d603edd6c0616503e88bd2c18b60290f2","first_seen":"2024-08-02T10:54:25Z","last_seen":"2026-05-24T19:21:48.566783Z","times_seen":746,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/bg_crossplay-BiLKu7MK.jpg","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /store/static/bg_crossplay-BiLKu7MK.jpg HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:10 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 61409\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\nvary: accept, accept-encoding\r\netag: \"6971e46a-125c9\"\r\nexpires: Wed, 17 Jun 2026 12:38:51 GMT\r\ncache-control: max-age=2678400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8r%2F%2FeHdMrn9y29HiNUWzkCVq5yBLfpsAh8NJiJs2b3dxtTY3CRxQk1hBN6xiyX3D4Wf6YRWmHs29wMHfTdxX4OX3UjQJBRIV70lPmBqwQ5BBg23fQ190rboUs84jZA%3D%3D\"}]}\r\ncf-polished: ok, orig_size=75209\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-bgj: h2pri,imgq:85\r\npriority: u=1,i=?0\r\ncf-cache-status: HIT\r\ncf-ray: a00ea970d8d1b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":61409,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 5120x960, components 3","md5":"d7082dd64c73d9981371ef1180442ed3","sha1":"3faf827e70ef9c61658353a512b618ff6583c20e","sha256":"eae6d54e73f493c21c703e812c3aa83b55309e3522e1ee222a816160fc7715a6","sha512":"3809d1be96391d3d04e8d9958fa4d68788687e3a21f4fb36a7bd4135e9cb2e8c44abe1ce647e433674d20af8fc1c6fc002f77253a9b2c08af0aad5eca49f0d9d","ssdeep":"1536:RdvdC1owwYTCH8l0OQfDiHJyZ4TrMH5sf:Rd1HwqcZQ7KJyZ4H","tlshash":"7d53e14199ca6a51d0f71630f5df12779e018ab66e20cec9ff367874076677ac88b9c0","first_seen":"2026-05-24T19:21:48.593667Z","last_seen":"2026-05-24T19:21:48.593667Z","times_seen":1,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cookie.aiononline.com/?k=geoLocationInfo\u0026v=%7B%22isGDPRCountry%22%3Afalse%2C%22geoLocation%22%3A%22TW%22%7D\u0026expires=1795202472","fqdn":"cookie.aiononline.com","domain":"aiononline.com","tld":"com"},"ip":{"addr":"52.84.50.64","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:11.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.aiononline.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Wed, 16 Jul 2025 00:00:00 GMT","end":"Thu, 13 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"42:B1:0B:54:8A:19:C3:B6:F7:5B:58:CF:AD:AC:98:72:CE:7D:A9:CB","sha256":"11:7A:E1:3A:E7:DF:42:A0:F6:D0:BE:86:48:8F:ED:02:2C:F3:56:59:22:12:8A:F3:FB:3C:54:05:24:AC:88:B7"}}},"request":{"raw":"GET /?k=geoLocationInfo\u0026v=%7B%22isGDPRCountry%22%3Afalse%2C%22geoLocation%22%3A%22TW%22%7D\u0026expires=1795202472 HTTP/1.1\r\nHost: cookie.aiononline.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ncpurple.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 2\r\ndate: Sun, 24 May 2026 19:21:12 GMT\r\nx-amzn-trace-id: Root=1-6a134fa8-3a7b5a5c21fe30fc5feb13f7;Parent=566a14febb7caa60;Sampled=0;Lineage=1:faca5b5e:0\r\nx-amzn-requestid: 16c3d2ab-0727-408b-885d-865af12d6b08\r\nset-cookie: geoLocationInfo=%7B%22isGDPRCountry%22%3Afalse%2C%22geoLocation%22%3A%22TW%22%7D; domain=aiononline.com; SameSite=None; Secure; Expires=Fri, 20 Nov 2026 19:21:12 GMT; Max-Age=15551999;\r\nx-amz-apigw-id: d4libEycPHcEOFg=\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 652549e0dcae9775148cb207792b2a40.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: WS6Xv-WItLqPbxS29uM2GkvC3J_Ojf08fnzg3h3AB8Um4XViCTtmKQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-05-24T21:07:02.336114Z","times_seen":674080,"resource_available":true,"data":null}},"time_used":1336,"timings":{"blocked":424,"dns":126,"connect":2,"send":0,"wait":485,"receive":0,"ssl":296},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.103.woff2","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:12.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.103.woff2 HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncpurple.net/css2?family=Noto+Sans+KR:wght@400;500;700\u0026family=Noto+Sans:wght@400;500;700\u0026family=Noto+Sans+JP:wght@400;500;700\u0026family=Noto+Sans+Thai:wght@400;500;700\u0026family=Noto+Sans+TC:wght@400;500;700\u0026display=fallback\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:12 GMT\r\ncontent-type: font/woff2\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-113d4\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncontent-length: 70612\r\ncache-control: max-age=2678400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W9ytKi%2BK8Nz61h25itJbtasQ9gKza5UnicUamffVjygvQe2avtQbkr4A2uVTZL0Tklm3BUeiZxX1yrHNjB27G%2FEzmA0T%2B%2Bo0LUcs33ZhnHAW23Rh12YKQf%2F%2BECbm2A%3D%3D\"}]}\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00ea97b29cbb505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70612,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 70612, version 1.0","md5":"f70b2658f92816602615e08bfb1c3546","sha1":"7779c939171241b26eb6d5a078922778ffc28c95","sha256":"c0e41ee358ec232b10c5db34b3e419a46697231d8bce7af8a382bce755b783bb","sha512":"5ef47c45f2a7cbe36cb1c2943823c149b29c429ebfb6c77c60edfbc756409623786fa03c7dcdf38ff511e95f2538b80a239269d5b74441f37342edd213185663","ssdeep":"1536:yMgS//fn6DCT/MCw7ae2oO/J1M2WJATXmpAxN5NqCnbiLhK/ih:3/CDIMCRxoU1M2WJIZNZnVih","tlshash":"6963027e7b6131ae66be148d5043f513784a2350ce89115492fe6e3a381aeee34f3727","first_seen":"2024-08-02T10:54:25Z","last_seen":"2026-05-24T19:21:48.595832Z","times_seen":425,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":233,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/static/pic/004.webp?format=webp","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:12.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /static/pic/004.webp?format=webp HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 28376\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-6ed8\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jGB8wuJ2Q5fbKtW3FWQ9KIHYVuOFSh1SSZCA2D6NqrBmVAj%2B%2BwhJ%2FurRQ1ffQabjIoV24GvnEH72DmZCy2cnADC5Xgic4m6tW1jg9Ms1ow8Ily10I2ptyqoQ1U9%2B7w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: a00ea97c5a15b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28376,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5dd037592d9aff5da11ea156f7e2eb32","sha1":"3d51ed8061d778637586fe92e2b3b24c84b3b5de","sha256":"b10499e1de5d2a9d53ab4f20fdecd3aa9996dc64573711429b051908c44ae7db","sha512":"a8a8cae3ccdd201447732b9691e122274dae818b9c53f4b4b1be56a1156135dbdcad647ea78a6cb36261b548b20f6e4c4460472b0f96094b9f462f224aff3362","ssdeep":"768:AH40DaAL/+y0OoUqT87FMiwD7NMtWS69Mpui:7gL/+yA87FiXNY6Sui","tlshash":"a7d2f1612368d0edf1711e3e5d6969c2e1ea2f043e9893403cec069edee7a1129d57cb","first_seen":"2026-04-09T04:49:40.769469Z","last_seen":"2026-05-24T19:21:48.597235Z","times_seen":2,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cookie.ncsoft.com/?k=geoLocationInfo\u0026v=%7B%22isGDPRCountry%22%3Afalse%2C%22geoLocation%22%3A%22TW%22%7D\u0026expires=1795202472","fqdn":"cookie.ncsoft.com","domain":"ncsoft.com","tld":"com"},"ip":{"addr":"52.84.50.4","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:11.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.ncsoft.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Wed, 16 Jul 2025 00:00:00 GMT","end":"Thu, 13 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"37:94:5D:86:5D:6D:9F:80:F4:BF:8B:A7:2D:49:45:10:01:6C:62:67","sha256":"1B:35:46:75:87:AC:EC:CF:75:BD:AE:47:71:2F:AF:2F:4D:46:A8:FF:86:1B:6E:7B:C6:99:11:92:63:32:1D:68"}}},"request":{"raw":"GET /?k=geoLocationInfo\u0026v=%7B%22isGDPRCountry%22%3Afalse%2C%22geoLocation%22%3A%22TW%22%7D\u0026expires=1795202472 HTTP/1.1\r\nHost: cookie.ncsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ncpurple.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 2\r\ndate: Sun, 24 May 2026 19:21:12 GMT\r\nx-amzn-trace-id: Root=1-6a134fa8-248d5f9104a9c66d27ea7765;Parent=69efb41b8ee3b30d;Sampled=0;Lineage=1:faca5b5e:0\r\nx-amzn-requestid: 3fb24bb6-636c-48d2-bfbb-450e89a3f576\r\nset-cookie: geoLocationInfo=%7B%22isGDPRCountry%22%3Afalse%2C%22geoLocation%22%3A%22TW%22%7D; domain=ncsoft.com; SameSite=None; Secure; Expires=Fri, 20 Nov 2026 19:21:12 GMT; Max-Age=15551999;\r\nx-amz-apigw-id: d4liZEqqvHcEaAw=\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 42f63300fbd68ad2da1e182d0d6d6948.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: Vkg-URkfezLGVH367mauJdSORfFK1zwa6Aq-ZtvnCO6YNY4LrtdzHA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-05-24T21:07:02.336114Z","times_seen":674080,"resource_available":true,"data":null}},"time_used":905,"timings":{"blocked":204,"dns":127,"connect":1,"send":0,"wait":496,"receive":0,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cookie.lineage2.com/?k=geoLocationInfo\u0026v=%7B%22isGDPRCountry%22%3Afalse%2C%22geoLocation%22%3A%22TW%22%7D\u0026expires=1795202472","fqdn":"cookie.lineage2.com","domain":"lineage2.com","tld":"com"},"ip":{"addr":"52.84.50.7","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:11.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.lineage2.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Wed, 16 Jul 2025 00:00:00 GMT","end":"Thu, 13 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"F6:30:7E:ED:2B:93:F6:96:ED:ED:D6:B9:1F:AF:D5:2F:FC:29:19:B8","sha256":"7D:90:EC:38:C8:F0:72:7E:2F:96:49:C6:7C:72:D7:4B:99:8F:23:D0:44:A8:39:1A:DE:D7:30:48:D9:17:FD:F2"}}},"request":{"raw":"GET /?k=geoLocationInfo\u0026v=%7B%22isGDPRCountry%22%3Afalse%2C%22geoLocation%22%3A%22TW%22%7D\u0026expires=1795202472 HTTP/1.1\r\nHost: cookie.lineage2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://ncpurple.net\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ncontent-length: 2\r\ndate: Sun, 24 May 2026 19:21:12 GMT\r\nx-amzn-trace-id: Root=1-6a134fa8-77e7eb895744eccd5b5c2d6a;Parent=0df92e7fba8d0462;Sampled=0;Lineage=1:faca5b5e:0\r\nx-amzn-requestid: fb3e036b-51be-461f-a13b-e61f925ab7bf\r\nset-cookie: geoLocationInfo=%7B%22isGDPRCountry%22%3Afalse%2C%22geoLocation%22%3A%22TW%22%7D; domain=lineage2.com; SameSite=None; Secure; Expires=Fri, 20 Nov 2026 19:21:12 GMT; Max-Age=15551999;\r\nx-amz-apigw-id: d4liXGR5PHcENiA=\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 dab692ab133f98758992c9457836e846.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 6orALX9nWurepNO2RFYqS1OO7FD5R1ld7IzFxz2oerDftBuvY23_4A==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-05-24T21:07:02.336114Z","times_seen":674080,"resource_available":true,"data":null}},"time_used":924,"timings":{"blocked":294,"dns":155,"connect":1,"send":0,"wait":334,"receive":0,"ssl":136},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/index.es-D4Q69uTg.js","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:08.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /store/static/index.es-D4Q69uTg.js HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:09 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=38Bw47Edvfn1kpxGllPPiHlbfV4Oh8c4WRDDOurzEhxGgtUHDuG8iuN52RlZCdXhZklWbVMFuUW7Zf0O3DiwydZ2Cnbv9XIpR5kg3iU1PSbJX7USjSbfSTCfy%2Fxkuw%3D%3D\"}]}\r\nexpires: Mon, 25 May 2026 07:21:08 GMT\r\ncache-control: max-age=2678400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: br\r\netag: W/\"6971e46a-3a4\"\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: a00ea961ceceb505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":932,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"70ed0e6f4c327656bbd042d4f6e3016e","sha1":"fedc3c5ade0355774d7be3e4d5a59a0797ea44e7","sha256":"098f8de53a93fd086239d81d56f696cd7f7e8195e21b2699fdb8bd0480ddcfab","sha512":"50bfa8a67d6f571b2303f606f78bec3f402bf5bfdb8654cd998b797f92f44ed1889ea40772df0d1db5ea8498424a3cd72999bde223d4802a16cbf73c8543f0fd","ssdeep":"","tlshash":"331110fb45227515be3781a87466c14fb363141a2324c675fbc4311e4f891964437b72","first_seen":"2025-07-31T05:09:15.321178Z","last_seen":"2026-05-24T19:21:48.601496Z","times_seen":3,"resource_available":true,"data":null}},"time_used":892,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":892,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.114.woff2","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.114.woff2 HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncpurple.net/css2?family=Noto+Sans+KR:wght@400;500;700\u0026family=Noto+Sans:wght@400;500;700\u0026family=Noto+Sans+JP:wght@400;500;700\u0026family=Noto+Sans+Thai:wght@400;500;700\u0026family=Noto+Sans+TC:wght@400;500;700\u0026display=fallback\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:10 GMT\r\ncontent-type: font/woff2\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-14e40\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncontent-length: 85568\r\ncache-control: max-age=2678400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mcJd6ad2%2BiSv%2FYFIgBzfyq%2FqGF4ivYaqL8OCaVrmeVy4NRCZj31AOQLOuBiO0UV99CfJkuRAd6gFv%2Fm2WPPVgFUQ3SGF3ao0inRUqjKP4Xr1X%2F9GtuyyieDU4XMMng%3D%3D\"}]}\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00ea96e4874b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85568,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 85568, version 1.0","md5":"c3e49b4f6b4b115d718a6410f060dd1a","sha1":"57923c6ec288a3bfc347b1dd3c941da6a00be758","sha256":"acc15d5d02082ca940e801c7747f25d1aac7e28ba2d8d0af4436c13c1478cbe4","sha512":"82e175888bc77013f324b3e366c11fc0547c276289109573469db77689de202c045e625c3f24e5ba337836e5590246f919ec1c369498dc2e8d74878fbcaa5853","ssdeep":"1536:tL0+yrGYHN2ro0c0OTNdZg2Fes/G1G2NGgT61LqOyJsdw:tLbyq/rFNOPZhes/GZ4qtJf","tlshash":"4583129fdf3ab027deb8f51b64e7fb855231826136f0856c9942e2f0be249406a950cd","first_seen":"2024-08-02T10:54:25Z","last_seen":"2026-05-24T19:21:48.605738Z","times_seen":817,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/img_crossplay-CBVBDtPM.webp","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /store/static/img_crossplay-CBVBDtPM.webp HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 90834\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-162d2\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vil7nZfm%2FTmNAUSrW5bBU2%2FqpJ%2FLWOOyIvLmB9XTC1jFFeF%2BHW7ziLI1Kck9BR1xnApWQEY0MEJhEOplwgNONi7Fhn6lHXxJd0CQYA4rNpzFWZwqhkbQUKCBYaGlHA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: a00ea970c8cbb505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":90834,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b5928c3dcd7fc82cded69e623ee46fc1","sha1":"d2d5452555d5edd2d919a98af7529fb8e9cb2ac0","sha256":"a9c5845c3bc1e1ad88ee2856d52778d1a360d741fbe8c075acdcf2d8f285cc77","sha512":"d5d88706e9ba800f26a8b3cce030935f1c9bb133d9eca99610aba4439e26c6eae18376d832165e6f83d9fc3e1e2185212e063936a02d7f5d8e0feb7d59cd87d9","ssdeep":"1536:JmkBu474OAGQaBjrz4sQVEVg8Ae3yWsjq+T6HIhgN+7NZp1VaytVi/VK:Rs40OAGFkTSg8fnCLaui","tlshash":"5c9312413284b825bc8e75b3920155f7d262ac28242d51ce598be457b33b872bff7cd8","first_seen":"2025-07-31T05:09:15.49169Z","last_seen":"2026-05-24T19:21:48.609206Z","times_seen":3,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/StorePage-dGq9tRt-.js","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:08.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /store/static/StorePage-dGq9tRt-.js HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:09 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0iE3bKtFfU9VdvVSlIXZknwpybIwr2B%2FB8FmyQn9JlEESd9%2FNUj5xNIGpUzX722rUbD9KANVGe4dksVxhXhSezJWP8z3%2B7Hb9UhiGIAAR8xr%2Fc38xuGb691sdxImGw%3D%3D\"}]}\r\nexpires: Mon, 25 May 2026 07:21:09 GMT\r\ncache-control: max-age=2678400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: br\r\netag: W/\"6971e46a-44a4a\"\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00ea961cec7b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":281162,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (24759)","md5":"276fc5eb3a6b698f78762d6ad116755f","sha1":"4338e39c5f90a4e51d0a97cff69fd4f2ac9e8fe8","sha256":"5e17225055beb5c49bcb664a03f56a52abcf6da6d8a5b41681bd3cf5c6d8c280","sha512":"8b533ff2d3162994134f0cd527eda4a7c4cb7fe65b4e8eddafe320fd7955fcc4fa310ceacc1e6b1d6000574706adbb4e6930f65952dd160c5e0a80760295ffe7","ssdeep":"6144:aMXUl65Zj6TbvrVRjpHJU1aGp0VENj5Kwxw:a6UlKZgbvPzVENj5Kwxw","tlshash":"1254f9faa63b31453d6ba89896b3c2083e33b40fa115c0f4b79d19554f9c781b6a37e4","first_seen":"2025-07-31T05:09:15.421206Z","last_seen":"2026-05-24T19:21:48.611145Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1092,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1090,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/index-Bk-9oulT.css","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:06.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /store/static/index-Bk-9oulT.css HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:07 GMT\r\ncontent-type: text/css\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 25 May 2026 04:22:33 GMT\r\ncache-control: max-age=2678400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\netag: W/\"6971e46a-1fdc8\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a%2FXK9Erj4dQtnT1Bk193SW8G1juJm0qn9FUKgOWvRB1YCZOSv0s2qP5FDo8j2xLTdj13FMFyVln4YbF1BkjV8PLyp8NHbR1B95dJB9YXcds3dC2xhMzMya6DHM8mLw%3D%3D\"}]}\r\nx-content-type-options: nosniff\r\ncf-ray: a00ea9599dcfb505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":130504,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65236)","md5":"573e2fb12766d483357f1befcc2fc1e8","sha1":"9bf39d4513446dad7e355a06f60b75a5e81f9f70","sha256":"aa3c0b4f960619f7ab5f4b36eeab403af2970f289c6416bec8f9e9c88e7a4a79","sha512":"af8a53228d132127beaab0f3ea2730a7df2047ff9b0dfece2b955b17d9c8da0c7353cfbd4ba4a86d15afae5302d83d77949b87570cd35d89dcf294d906556abf","ssdeep":"3072:9pW7ZzqQCJyewp45y/v4h6jMIpmH3X2YYvB0s5Qz:Gwyl/v4h6jMIpmH3X2YYvB0s5y","tlshash":"1cd31a397595206fa12fc671e8827e8e203bf753fbd146bdf06a7b74824d1d52222d28","first_seen":"2025-07-31T05:09:15.398132Z","last_seen":"2026-05-24T19:21:48.612902Z","times_seen":3,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.115.woff2","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.115.woff2 HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncpurple.net/css2?family=Noto+Sans+KR:wght@400;500;700\u0026family=Noto+Sans:wght@400;500;700\u0026family=Noto+Sans+JP:wght@400;500;700\u0026family=Noto+Sans+Thai:wght@400;500;700\u0026family=Noto+Sans+TC:wght@400;500;700\u0026display=fallback\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:10 GMT\r\ncontent-type: font/woff2\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-122d8\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncontent-length: 74456\r\ncache-control: max-age=2678400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LO5XH%2FMm2PN7jZTjsB0XVctYlL4zgomL%2BtTjMwhZZI2mkyiWEdbl2wM7Ks6uKeUbiKJSG6qPixoFY3PmzsiitFfdGmCR43BTjm4ponNrObDBlagutd6b5YA115tdcA%3D%3D\"}]}\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00ea96e4876b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":74456,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 74456, version 1.0","md5":"4db4fb890c0dd7f649b8b77fe93471bb","sha1":"a4c9a12e564fb4f7557b043c615e0371b306273b","sha256":"1458f29401c63c3b3d8bb17e4387e96cfa803ec81830a3f61e305fed27da5f6f","sha512":"dfe506a8f40881f1b88d8abf28c3905baa5c4136165bbf1b776cfce9955422838500bf17e837268921116c88f5f060a163d521e50e555b34a4e6f9bc0d2c7ba3","ssdeep":"1536:j0zxa5eXP4nbPwBRj2GCWjmZrY0emJ2Mw0YHtmRzCwVje9Bu:otXP4bPqSFYQteI2Z0YH+zTVjezu","tlshash":"827312a87dde2bf185f94bd12a7638c259bfeb13080211c7610c6e5e1705fa2ba15f8d","first_seen":"2024-08-02T10:54:25Z","last_seen":"2026-05-24T19:21:48.496568Z","times_seen":240,"resource_available":false,"data":null}},"time_used":448,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":171,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/layer_live_c-PLPU0xMN.webp","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /store/static/layer_live_c-PLPU0xMN.webp HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 73490\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-11f12\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bd3qptdrywSgiIAN1IDxSvmI37ACXklBc%2Fvut2EAiN94ECxnKYUmQwaKd%2FCfLIeqIrw12rYkpqgLAfczGJgbEAs2RRFBEHIIxGb7mKQRXpC4wiOqoQRZuKMOE6U0sQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: a00ea970d8d0b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73490,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"53e931faf190259c6a1956c95c50e6b0","sha1":"765dd0d9c749178470c5cf69794db42f2460edca","sha256":"28cdaf742d1e270c4941e52489e9030c1b00344c94da62ab5359ee80f4055965","sha512":"7455fdcd16ccae7912e99a23b252a561972866721eb6095f652bd240afc5ad8462955a29c5a818bf63ce153cc449e5ebc1af77ec5e2863cf4da95679b3c499b7","ssdeep":"1536:C+sP4kSVJzeMO6FKy+NFAIZyx6aw1Yw4IBDehJC7PvehOVxE:ssJzFrsFFZJj1Yw1Kb0M","tlshash":"f473028e13b6b489c335d0a9c41847b3f8c77d33f3a81694abb81ea0711437da7665d9","first_seen":"2025-07-31T05:09:15.549433Z","last_seen":"2026-05-24T19:21:48.614349Z","times_seen":3,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/index.es-BJODB19i.js","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:12.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /store/static/index.es-BJODB19i.js HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:13 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LBO%2Bv3SJxPBPt8%2FvL2Gjh9DTmUhSaHnG7047qjenGmZ346yfMJzpEg2MiZ24%2Br%2FibaIb7gxGyFV%2BDgUlBcZ8LgZKvYbxQYcklzLvJ4k9w0UFerCYRCk3U%2FyGgJ2osA%3D%3D\"}]}\r\nexpires: Mon, 25 May 2026 07:21:12 GMT\r\ncache-control: max-age=2678400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: br\r\netag: W/\"6971e46a-2a5\"\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: a00ea97b69d7b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":677,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (673)","md5":"6ccceb4cd3790cc064999e2e4196cc3e","sha1":"1d88f01b8ab7b48e44056f2806b657cfad4f625f","sha256":"9904d90416f220deb3dcee7226794ac705743ad4e4af490e67662650748452a6","sha512":"661d71b86100422362370b8ef73d2d923d947a2816811884cd63f1bd28fc6f45f93a8489a4357c8cb1498659f3ec87a698783a02ea4a8ec5e31060fb6dab8a7b","ssdeep":"","tlshash":"ab01f49583205f44d5e399cedf7a6e88320d11e64b3bb0dca9d2e50594d3380bf08d10","first_seen":"2026-04-09T04:49:40.889972Z","last_seen":"2026-05-24T19:21:48.615841Z","times_seen":2,"resource_available":true,"data":null}},"time_used":779,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":779,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.108.woff2","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.108.woff2 HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncpurple.net/css2?family=Noto+Sans+KR:wght@400;500;700\u0026family=Noto+Sans:wght@400;500;700\u0026family=Noto+Sans+JP:wght@400;500;700\u0026family=Noto+Sans+Thai:wght@400;500;700\u0026family=Noto+Sans+TC:wght@400;500;700\u0026display=fallback\r\nCookie: country=TW\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:10 GMT\r\ncontent-type: font/woff2\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-11c04\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncontent-length: 72708\r\ncache-control: max-age=2678400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6T4qqCI%2BWgxsvHeZlpqXmrlDEla3GQy0GGoFHD2LinLZeyrUHLJ9mEAxcXvK0XbIOaIt2Lc84X2q8kAKd294D9xYzpB7hlOkvrkKKT74RmwZDN11IPBxOCNCCY6K1g%3D%3D\"}]}\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00ea96ed899b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":72708,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72708, version 1.0","md5":"cab273a430e6b01307bb19643c5aee4f","sha1":"39763d70b12ad0ba32ce359ee22951731b4a7212","sha256":"69565d6922a4cc92aef313ec30a2ddb49900dba0d0a19e43e3dc8440323b2b31","sha512":"d1eccc426d2e5eb4da15833aa5e2d2486d7955c3125555e2009d7768eecb9a371d493c04a40d83f2fbba3365950fd7d388ea2461a16edeb65decb62183b201cd","ssdeep":"1536:2A0ndl/d1hYysGpz8buW2E884R8HlHoYTcP7EC3RG6gf:2A01YysGl3Wb884i6rPnG62","tlshash":"f26302e31a3010f9f57b92e689d65ee3634917ccdb6d360a6da36fff6212001a70562c","first_seen":"2024-08-02T10:54:25Z","last_seen":"2026-05-24T19:21:48.617142Z","times_seen":689,"resource_available":false,"data":null}},"time_used":669,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":663,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/bg_on-DBR8Wj5n.jpg","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /store/static/bg_on-DBR8Wj5n.jpg HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:10 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 63442\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\nvary: accept, accept-encoding\r\netag: \"6971e46a-13c61\"\r\nexpires: Wed, 17 Jun 2026 12:38:51 GMT\r\ncache-control: max-age=2678400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T6p9%2B0ARlJjYWJXOv1wZszQHUAqFdtGJ5yeGRnOHw9qkiE1377PFg3MZ92V4bjtbqBUlWRLXBrSdfjqWCvcPrx4bpCR5%2FP0aOLB%2BsZgpkzmXRPwCeOuHfXpWcjNC6Q%3D%3D\"}]}\r\nx-content-type-options: nosniff\r\npriority: u=1,i=?0\r\ncf-polished: ok, orig_size=80993\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-bgj: h2pri,imgq:85\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\ncf-ray: a00ea970d8d5b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63442,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 5120x960, components 3","md5":"df7c40ce5a4fbb55e7f851b195da4ddf","sha1":"327d05c462ec8fdddca8cdd2cc1b59b9130708a5","sha256":"236eb3ec1cd35df7d5ce762aacac0a0cbfef2485161872a5d417d092c4ef9b80","sha512":"5b72a1d5e5b9a11c431d5621c18d7fe8a2d7928ce0324d6e0ed911037a9105918331ed3e7dc23621aad60a63d58b9fe912bd505dbf7074e4541c1a9c3a031714","ssdeep":"1536:DBQm+O7cRIunmFH2IiV1JwjxhaZzXcgIJ2:1h+O7FQmFH2F1JvMt2","tlshash":"635301a50348a143dc9e5ef57efa3b07f1172bb33d44e5d3bba8254298eb2284d84381","first_seen":"2026-05-24T19:21:48.617787Z","last_seen":"2026-05-24T19:21:48.617787Z","times_seen":1,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/download/v2/buckets/purple/files/19a75640d3e-2ce02019-e98a-485f-879c-dbba32efe982.jpg","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /download/v2/buckets/purple/files/19a75640d3e-2ce02019-e98a-485f-879c-dbba32efe982.jpg HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-24T21:08:01.202482Z","times_seen":15673710,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/s/notosanskr/v36/PbykFmXiEBPT4ITbgNA5Cgm20xz64px_1hVWr0wuPNGmlQNMEfD4.66.woff2","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /s/notosanskr/v36/PbykFmXiEBPT4ITbgNA5Cgm20xz64px_1hVWr0wuPNGmlQNMEfD4.66.woff2 HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncpurple.net/css2?family=Noto+Sans+KR:wght@400;500;700\u0026family=Noto+Sans:wght@400;500;700\u0026family=Noto+Sans+JP:wght@400;500;700\u0026family=Noto+Sans+Thai:wght@400;500;700\u0026family=Noto+Sans+TC:wght@400;500;700\u0026display=fallback\r\nCookie: country=TW\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:11 GMT\r\ncontent-type: font/woff2\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-d9e8\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncontent-length: 55784\r\ncache-control: max-age=2678400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6a6q8YKAOtQM3Pwq%2BkI1TXexA7hIVjuTnUG2PWhBjzgN8dvgmehDu%2Bm94%2B56KOs0rHiAPKbUbf3SZI49g2QLp5lpQ3XiMiQRAkUWq1tg37ypuNuurWMGsdLxkLhM%2BA%3D%3D\"}]}\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00ea972f93eb505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":55784,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 55784, version 1.0","md5":"67aced3410e43a0f64c0ca8e2338fcce","sha1":"ff730333f60777adaea6cec792ddaea160b790c4","sha256":"bc9a18655c6757141b19a398c8abf47def644a34c652867e65c23635c0090dca","sha512":"eb15e92d8b409dac60b424d67ef0df86ebcf0be3a1d9cb24e83d56c9e6512595a2a882d78e20c70c0f5054c372007add5a811bb7f68f3692dbb0f330db026b77","ssdeep":"768:paNYsV3pZvZNcQpB9Ui6Xsl3d8MsSKRf+D/Y6CYgG3cc0zqd0Cz/uF57Xb58h1zB:MMQP9Pgw3d8MsPm1glWdp/uXbOL8iky","tlshash":"654301b993f749e04aa3c4390a84c444aafc96e55aee0bbc9c4ceb512b444327f7173d","first_seen":"2023-11-01T20:12:16Z","last_seen":"2026-05-24T19:21:48.618942Z","times_seen":17,"resource_available":false,"data":null}},"time_used":758,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":757,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/index.es-D4Q69uTg.js","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:09.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /store/static/index.es-D4Q69uTg.js HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:09 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 25 May 2026 07:21:08 GMT\r\ncache-control: max-age=2678400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"6971e46a-3a4\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s3V97l6ARGAGChzb%2FqB0NgdSfSGD3twZSB5RzT2ygdHUj74yZe7vn3axr3SSV1G45qn7MKxhMzOfyOnN6XRLS%2BCQcSNr9N4beEVkJQBVray5JrFE8Un6AwV%2BB3iMUQ%3D%3D\"}]}\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00ea9697fd1b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":932,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"70ed0e6f4c327656bbd042d4f6e3016e","sha1":"fedc3c5ade0355774d7be3e4d5a59a0797ea44e7","sha256":"098f8de53a93fd086239d81d56f696cd7f7e8195e21b2699fdb8bd0480ddcfab","sha512":"50bfa8a67d6f571b2303f606f78bec3f402bf5bfdb8654cd998b797f92f44ed1889ea40772df0d1db5ea8498424a3cd72999bde223d4802a16cbf73c8543f0fd","ssdeep":"","tlshash":"331110fb45227515be3781a87466c14fb363141a2324c675fbc4311e4f891964437b72","first_seen":"2025-07-31T05:09:15.321178Z","last_seen":"2026-05-24T19:21:48.601496Z","times_seen":3,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.119.woff2","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.119.woff2 HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncpurple.net/css2?family=Noto+Sans+KR:wght@400;500;700\u0026family=Noto+Sans:wght@400;500;700\u0026family=Noto+Sans+JP:wght@400;500;700\u0026family=Noto+Sans+Thai:wght@400;500;700\u0026family=Noto+Sans+TC:wght@400;500;700\u0026display=fallback\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:10 GMT\r\ncontent-type: font/woff2\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-87b0\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncontent-length: 34736\r\ncache-control: max-age=2678400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xtuCpYC1l3az3a72V9i5C5hxI%2Ft1YrgoAY9hNSe0Rix78N%2F112jJxKNucUGeMAUPmH9tlFewr7TZIVbtDNxI6ZyHNCzaDm0K%2FAYU2aJei5WeU%2BBws6uu%2BtkKuUROog%3D%3D\"}]}\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00ea96e186cb505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34736,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34736, version 1.0","md5":"8822610ec522feaafc5daa33311dda90","sha1":"6e72457c14d36a2dbf5796cf6ea4c5873142a3d0","sha256":"4a9850f931ed681bcb86f15dbe8d7961203af4be7bfc28b18657c27c47f1dc1f","sha512":"386da30a80bf787702527481c3e0f30c98008eeba4752850ff0e8c3b02b2899798db1b2072a68b90b31425331c528ccc43c2cf460aec6eb7d36fb2f151857040","ssdeep":"768:HtJgDM9N+9DxgS1txGEbUXeguJqkzcItQqn9NgbyR3jBc:HADS0ltxGJegkqcHPgbyR9c","tlshash":"59f2f11d750cfb6f712da77b01b233a2146aefa8f8f4ac28540ba75bfd4c200a647845","first_seen":"2024-08-02T10:54:25Z","last_seen":"2026-05-24T19:21:48.50096Z","times_seen":266,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.113.woff2","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.113.woff2 HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncpurple.net/css2?family=Noto+Sans+KR:wght@400;500;700\u0026family=Noto+Sans:wght@400;500;700\u0026family=Noto+Sans+JP:wght@400;500;700\u0026family=Noto+Sans+Thai:wght@400;500;700\u0026family=Noto+Sans+TC:wght@400;500;700\u0026display=fallback\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:10 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 71492\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-11744\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 0\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RCVWtHBUK7K6dlSeTL4kqcd5EnGhKTp86Ymul7Vcy79UH7m2rJUk9pMXUPFq%2BPjoYVYQpn42Bp83Q6p%2FSNX8I56vxzP0Wveq4JS0ssyBjnKMK%2BS%2BWUZBPtX3LEBU0g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: a00ea96e4879b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":71492,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 71492, version 1.0","md5":"4ec1408e893b4c0cb5fe1b625cbb4534","sha1":"aa9154947f7ecf8d4c8d75be89983229b8f814e9","sha256":"6c445faaf9a67202172fada7218dc052407a166bf483166742785ab51f2549cf","sha512":"ff8c7b94e022081fcf997321ad3a26d809375f0d69e8f0a0b4c31676c45b0198b1937bac6dd4b9e9bc9bc5a84e8cacfa70dd6e95952f33a107091a833144fd1b","ssdeep":"1536:5DW833Hw1uckod2UqRsZCo8S6GZ9HIeJfl2/KlLC4bPuLE7PKc:5q83w17kWqRgN8WIkflWKlsLUPKc","tlshash":"3e63128c2320b68fe63910e485ddd9d681f5cf55b89769062c9eef6936c8cc93707e22","first_seen":"2024-08-02T10:54:25Z","last_seen":"2026-05-24T19:21:48.61956Z","times_seen":240,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/StorePage-dGq9tRt-.js","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:08.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /store/static/StorePage-dGq9tRt-.js HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:09 GMT\r\ncontent-type: application/javascript\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 25 May 2026 07:21:09 GMT\r\ncache-control: max-age=2678400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"6971e46a-44a4a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B%2BWM1nvOYRepc0io38XNUt1yxQ024MF9J48la8G4drF%2F3iaUzdPCja6C9VD7lxdqQArSjZgyRV1X5Y%2FPs9rpy4kKMGmmGQesqq5NmnVDceIeDHiTQi246zV7g1cUKQ%3D%3D\"}]}\r\nx-content-type-options: nosniff\r\ncf-ray: a00ea961ded0b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":281162,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (24759)","md5":"276fc5eb3a6b698f78762d6ad116755f","sha1":"4338e39c5f90a4e51d0a97cff69fd4f2ac9e8fe8","sha256":"5e17225055beb5c49bcb664a03f56a52abcf6da6d8a5b41681bd3cf5c6d8c280","sha512":"8b533ff2d3162994134f0cd527eda4a7c4cb7fe65b4e8eddafe320fd7955fcc4fa310ceacc1e6b1d6000574706adbb4e6930f65952dd160c5e0a80760295ffe7","ssdeep":"6144:aMXUl65Zj6TbvrVRjpHJU1aGp0VENj5Kwxw:a6UlKZgbvPzVENj5Kwxw","tlshash":"1254f9faa63b31453d6ba89896b3c2083e33b40fa115c0f4b79d19554f9c781b6a37e4","first_seen":"2025-07-31T05:09:15.421206Z","last_seen":"2026-05-24T19:21:48.611145Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1082,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1080,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/layer_crossplay_c-ps7rfUS4.webp","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /store/static/layer_crossplay_c-ps7rfUS4.webp HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 39250\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-9952\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iNcgFoLL8MdX%2BgV%2BU2yM6oKBTpkQPd4B57DkB63m%2F%2BagrKHzEZKv1WMTihtwlT51FeZrMoEmikja9dh7yV1ktUAbcOJm9J0TJlCF%2FkXFBN61BgqTJQ%2BCjwmaWSxF2g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: a00ea970d8d4b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39250,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c1bec51b04539c69fcd6c5cf3969a9d0","sha1":"d65d7399bedd7a6486349f3b729f2991173aa938","sha256":"23960cd0dfb38d5f7be31e3ccddff846393d9f2765b00d9203b1f0de64983b8e","sha512":"7e623f6ab448c58a36a8274501a8fb588addd85a5895118e7cbeaa8f4de80b109328e018ca044e440e0f005940933a2261ed5ad24964cd6c8a538a61f6dece06","ssdeep":"768:Z8io32O8+g2f0aBv9XIt1CkIL5VB6akEbKr7iE7X20TWa2rtEgupK8+:Zq32oxLYtckMBJxa7iqX3ibEXx+","tlshash":"8d03d0da282efe33fcb722ba936ef0da0202d9749d3194f2572ae1514141d4ad57bcc4","first_seen":"2025-07-31T05:09:15.455438Z","last_seen":"2026-05-24T19:21:48.620799Z","times_seen":3,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/layer_talk_b-Cuml7xsJ.webp","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /store/static/layer_talk_b-Cuml7xsJ.webp HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15846\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-3de6\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WTFFiGb%2B6sJfgGyD%2BJy4qAFAOoBVI1yceJ13hqaz3SeNfnFGC%2Bm4pijct0%2FgcsB4ZERddY8V8lTRS5tWT3SU%2FYvd%2F8ByVckobjmj9TWozvUyU4BogVyZVQpod6P%2F0Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: a00ea970e8dab505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15846,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3522ee0f315248bf7f18cdbd443a15aa","sha1":"8b2c1c263e9c603f211c08cc0779f192c11de0d3","sha256":"ded718da7e4abbf240408fadbcb807f478c873c5134ae067616092dbcf2b231c","sha512":"c2ecc207dc78789cf63243de360b15833e24ce3532a150c4c279a955cf02531c2e829419b5828c19312cc9f46addcf5c5af0b464c9e94adcba520c956fba9756","ssdeep":"384:ZgV+0syBrBfi6PienXejeScUJtfeDCcjj4Oy:Za+tmNzPiEe6dUJRaZd","tlshash":"bb629db8b715189cd277553022dcc12514e0efcff46ee0acc25aea589b623217a74bec","first_seen":"2025-07-31T05:09:15.29858Z","last_seen":"2026-05-24T19:21:48.622455Z","times_seen":3,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/conti/getContentGroup?service=plaync\u0026groupAlias=global-cookie-list-group\u0026subAlias=en-US","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:11.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /conti/getContentGroup?service=plaync\u0026groupAlias=global-cookie-list-group\u0026subAlias=en-US HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:11 GMT\r\ncontent-type: application/json\r\nlast-modified: Thu, 22 Jan 2026 08:48:37 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6971e465-16b80\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GkAOHcJci6pgF%2BnK2nVUZdpNJ%2Ftppxv7Bz1yIdoVZ%2FWLx0OtB7MsoAjqH3uleD6E8jLi6F%2F9QgRJV4hfb5YEeTIXva4EHQ2ZctyEgzvV77bYSGpzhAeqdr9uYVMiZw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a00ea975195fb505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93056,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"dd57983db5a3f3e89b7b8fda729370e8","sha1":"06fb1de0d2ed6e0b892fadab376cd9c6db89892d","sha256":"0dae6b4ae42791d55e1a1d5015f6430ec0e29b6a6537d417c12b23b3332dc918","sha512":"3648eed42597da5565fd084ba25d54a4f26ee3163f9184b1003f7218a79973051a9ce9624cb7a0d5b653358e2173858f895d003877ada32a36548e27f62b2e47","ssdeep":"384:gqqUCqqUci8KxG6PVeF/YF6+jivJi8KxG6PVeF/YF6+jivt:XqUpqUci7I2pAJi7I2pAt","tlshash":"94937b64d0386ea007ce69bc3a4f4c73ba2511dbd6d8469c3b5ed5ad831d82ca97c3c9","first_seen":"2025-07-31T05:09:15.345054Z","last_seen":"2026-05-24T19:21:48.628589Z","times_seen":3,"resource_available":false,"data":null}},"time_used":759,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":759,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/js/protocolcheck.js","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:06.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /store/static/js/protocolcheck.js HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:07 GMT\r\ncontent-type: application/javascript\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 25 May 2026 04:22:33 GMT\r\ncache-control: max-age=2678400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\netag: W/\"6971e46a-2165\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ucPWwZ4QQF0OIxj%2B36bB5d1O6FiuV3djyjkcTIVZYhYD201XUVufWjbTafhPPlFW6Bd%2Fnzp6xrVND9jgwgLgSdSVpkDXnowHpzPn0tLdu%2FHJLKzna4gqG3ML%2FQkKCQ%3D%3D\"}]}\r\nx-content-type-options: nosniff\r\ncf-ray: a00ea9599dcdb505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8549,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"582bb6a03c7cd4686b8910a445cd0d1b","sha1":"4e260a3f94f4a4d67f2a65ec9f8667a8c1dee3fc","sha256":"90a4847d54a523130ebef3c72c9c5dc2fa8504156fd41146d3b1a9c9f1d24dec","sha512":"13ee077e23f9173a91011ee4bc516a7760b85baf05d13211e8fff2a27d469f28d494c1be3c9c8a2338801d5bf8595460a09d7bca30ad6568f39beb1dae16cc79","ssdeep":"192:BbjR1Ga+lMwpkkj4c6LcP6CO/iUdfWfTqCAOEKuscrIjkhoXtZP2/4n/nDECSn/r:NUv4RcS/iofe0OEK/ZQhoXHlMn/hN","tlshash":"5f02218a6af260a25323743a84ef41087671819ba40c8d44fd4da3a49f5553973ebfec","first_seen":"2025-07-31T05:09:15.316322Z","last_seen":"2026-05-24T19:21:48.632422Z","times_seen":3,"resource_available":true,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":229,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/index.es-BBHhX1sC.js","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:09.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /store/static/index.es-BBHhX1sC.js HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:09 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Mon, 25 May 2026 07:21:09 GMT\r\ncache-control: max-age=2678400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"6971e46a-291\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pu8XkFQGTiLMe1uDMwsSfgRS2EKWuSM5bj775UBqI8meBVXI%2F6aOiGpotr6v0UoDNBgo%2FukoPS0oqushYzbzP6zbDogUgAZxI4AT%2FhZ5o52uZA4VPT0Y6VfUDsAFxA%3D%3D\"}]}\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00ea9697fd0b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":657,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"2a0be953c35fbf328da84b2823907a9d","sha1":"46a606453494a5a97fe421679fa2c7225b4d3fb9","sha256":"8944fd84b1b137cb1e80a96b27473e7dcb5825b5bd46b401c485cfcb51be48a1","sha512":"d1ff0f4fe4cd47303d78cdc56b0a1ab54dd4e8edc82c6ffa9ebdaa9445ae9058d8f687c2b2311e7f10ea7f76dcd902767d863bac4f4f9c0d48d47dd7550e5e2f","ssdeep":"","tlshash":"3ff078d4dc357aaa095f92dc6621c4898377e53fbb23cbace30121600eed98421ae750","first_seen":"2025-07-31T05:09:15.369262Z","last_seen":"2026-05-24T19:21:48.510452Z","times_seen":3,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.117.woff2","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.117.woff2 HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncpurple.net/css2?family=Noto+Sans+KR:wght@400;500;700\u0026family=Noto+Sans:wght@400;500;700\u0026family=Noto+Sans+JP:wght@400;500;700\u0026family=Noto+Sans+Thai:wght@400;500;700\u0026family=Noto+Sans+TC:wght@400;500;700\u0026display=fallback\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:10 GMT\r\ncontent-type: font/woff2\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-10018\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncontent-length: 65560\r\ncache-control: max-age=2678400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YJxQcp4O%2Ftt86eyxPbfWFSPG6oNbyiHCPrDz7tPw81ltWyLIJ0s6oRYsJ7KXpyJovLiW10yQLtVb9whaNirmwA5uY24icMtMQa%2F5TqfQxhK7VQesQ5%2BeTZYT%2FLyuKQ%3D%3D\"}]}\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00ea96e186ab505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65560,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 65560, version 1.0","md5":"0235e10363bf82c8f4e201c6a01918df","sha1":"c415a428b6e1c05c94e4bdcf7b0e597b930953ce","sha256":"9ab69e66ed399a0646bc494fc668570e59b2a27354367acda9109bb6de550201","sha512":"45939d30e6d8f197cdde7d644eeebc828a3dc8a8bbf68fab3df7298df63a95443308fc203bfe268d31a713c4ba955c662d534377e14120968c3c9bb575789285","ssdeep":"1536:aFkY2VmKG64Ypi2XjPnjI/GrQXVanvD1puWf8fJ0ckH+2Or:a+UKG8VfDQXsnvDXnUzqOr","tlshash":"965302a201876301f48fbc72b3d03da5b56ca01eb11d16bb021b2b5e2b5794f2c61dbb","first_seen":"2024-08-02T10:54:25Z","last_seen":"2026-05-24T19:21:48.572507Z","times_seen":251,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.113.woff2","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.113.woff2 HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncpurple.net/css2?family=Noto+Sans+KR:wght@400;500;700\u0026family=Noto+Sans:wght@400;500;700\u0026family=Noto+Sans+JP:wght@400;500;700\u0026family=Noto+Sans+Thai:wght@400;500;700\u0026family=Noto+Sans+TC:wght@400;500;700\u0026display=fallback\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:10 GMT\r\ncontent-type: font/woff2\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-11744\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncontent-length: 71492\r\ncache-control: max-age=2678400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1vpkgowpXmsR6F8UF%2BlQr5BC505lFfbbs%2FSx%2FzAK7c1kOcWkzyN6jO%2Bt45O5601j2%2FstUnWoTO9WFBXBb3fUT670hgaEmKwM01thdFmes%2FrvaP3Vw0JncBMgu5GGRQ%3D%3D\"}]}\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00ea96e487ab505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":71492,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 71492, version 1.0","md5":"4ec1408e893b4c0cb5fe1b625cbb4534","sha1":"aa9154947f7ecf8d4c8d75be89983229b8f814e9","sha256":"6c445faaf9a67202172fada7218dc052407a166bf483166742785ab51f2549cf","sha512":"ff8c7b94e022081fcf997321ad3a26d809375f0d69e8f0a0b4c31676c45b0198b1937bac6dd4b9e9bc9bc5a84e8cacfa70dd6e95952f33a107091a833144fd1b","ssdeep":"1536:5DW833Hw1uckod2UqRsZCo8S6GZ9HIeJfl2/KlLC4bPuLE7PKc:5q83w17kWqRgN8WIkflWKlsLUPKc","tlshash":"3e63128c2320b68fe63910e485ddd9d681f5cf55b89769062c9eef6936c8cc93707e22","first_seen":"2024-08-02T10:54:25Z","last_seen":"2026-05-24T19:21:48.61956Z","times_seen":240,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.112.woff2","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.112.woff2 HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncpurple.net/css2?family=Noto+Sans+KR:wght@400;500;700\u0026family=Noto+Sans:wght@400;500;700\u0026family=Noto+Sans+JP:wght@400;500;700\u0026family=Noto+Sans+Thai:wght@400;500;700\u0026family=Noto+Sans+TC:wght@400;500;700\u0026display=fallback\r\nCookie: country=TW\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:11 GMT\r\ncontent-type: font/woff2\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-11f68\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncontent-length: 73576\r\ncache-control: max-age=2678400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tDVd0TEuk%2FD6F17AsR26li85TvLyOebsOcM2ZqaQLHw5oH6ALmgBRcR%2BLSqDkXRCAHIQtqt0h8Yinujb9BX21656giWCpI6Kj%2FCLtXF%2FYL4OcTE7SFifR8JGRztdvw%3D%3D\"}]}\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00ea972e931b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73576,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 73576, version 1.0","md5":"45ca59106c7110e395eb6ef279cc992a","sha1":"aae3e11f6fe0d2a2adacb7056ac2a5e153664d59","sha256":"efbfd98f36a0d81913df4ec9d1f503e611359292c81c8f0ffbea2a824deba65f","sha512":"8d65a156f9246726b3cf43238b1c0ea31f5760870fddecfca253fdfdedb837fcff2a743fa579e3a7dbbb26222464dd5eca1365ae54b7be16304e0ec8fcaecf8e","ssdeep":"1536:NeBvRmYButYBBOUmLZLzkz8KAl6FIx9zmyYVTfFXhm:NwvRgSBBDmN3kYKAXxpMVTfhU","tlshash":"e67302fc19162180adc1b2d93103479abca4cadc6aa1ded093d85577b43cbab7b03d76","first_seen":"2024-08-02T10:54:25Z","last_seen":"2026-05-24T19:21:48.555057Z","times_seen":232,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/user/location","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:11.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /user/location HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:11 GMT\r\ncontent-type: application/json\r\ncontent-length: 20\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-14\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sgkGadJpw%2FCuEkcCmV5HWJmadqFec68KrLxnTVK%2Bb1kY%2F3ypIiZfLZ4q7O%2BHkTIoqtWtwXoPjVE5xev1MtPD37o1g0k0voiyrtV83i4mZs58JcsH3mu9cyXu6pCv3Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00ea9751963b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"77e994bd5075c09020070f17a0c4f59c","sha1":"bd79a9b7c3b05d2975b00ef8d460656a2ad93f78","sha256":"ef108315cd8c9ddaeaa612cf724928cf2b0993cd9bf8d076e891f5bc136fe6cc","sha512":"43fb9a3f57f0aabf940c19b4ee2a4a3644c1d4df29b77c46e874eab1b7b9cc51741b14d0da254ae9a549331464251cd7e85b26a8ac44ec0d2e460edf39ec3bdb","ssdeep":"","tlshash":"2a6000b2000020000282030288000c000022008e0800200a0a22280a000822c220a008","first_seen":"2025-07-31T05:09:15.596847Z","last_seen":"2026-05-24T19:21:48.635712Z","times_seen":3,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":197,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vod.plaync.com/PURPLE/2023/store/LW/LW_02_LOOP.mp4","fqdn":"vod.plaync.com","domain":"plaync.com","tld":"com"},"ip":{"addr":"3.167.8.90","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:12.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.plaync.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Sat, 19 Jul 2025 00:00:00 GMT","end":"Mon, 17 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:F4:CA:BA:19:28:7E:5F:EF:F0:BD:28:39:57:94:56:2E:47:65:1B","sha256":"C0:63:94:54:91:29:48:B1:DF:D5:1E:5C:28:CA:92:EA:18:15:D5:90:C2:AC:7F:9F:C0:FA:A7:D8:CE:9A:38:67"}}},"request":{"raw":"GET /PURPLE/2023/store/LW/LW_02_LOOP.mp4 HTTP/1.1\r\nHost: vod.plaync.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ncontent-type: video/mp4\r\ncontent-length: 6536912\r\ndate: Sun, 24 May 2026 19:21:14 GMT\r\nlast-modified: Mon, 18 Sep 2023 01:44:16 GMT\r\netag: \"cb46975b182f4751a24e39ca33d6c7a6\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-sha256: cd18dd8ea9c6acfadf84e1ddd58c190a5df4e63be46aec11b5cd7d7156ec0f30\r\nx-amz-meta-s3b-last-modified: 20230918T013940Z\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ncontent-range: bytes 0-6536911/6536912\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 0dab08166aa7b915b2e3314728d79750.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: PQbZQtYHqv34blj0cvxS4lhJc5Ybby5W7KfY3a-3TmyY5E12DcS77w==\r\nvary: Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":6536912,"size_decoded":0,"mime_type":"video/mp4","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-24T21:08:01.202482Z","times_seen":15673710,"resource_available":true,"data":null}},"time_used":3232,"timings":{"blocked":330,"dns":146,"connect":1,"send":0,"wait":736,"receive":1831,"ssl":185},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/purple/resources/favicon/purple-192x192.ico","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:09.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /purple/resources/favicon/purple-192x192.ico HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:09 GMT\r\ncontent-type: image/x-icon\r\nvary: accept-encoding\r\nlast-modified: Thu, 22 Jan 2026 08:48:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\npriority: u=6,i=?0\r\nage: 12\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\netag: W/\"6971e469-2523e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FCxeYIdaPNShXsAo2aJpIbxrACJjWqzXtYnloHhL%2Bj8FyD%2BIm5V3YPAP0sI5rEhqi2g%2B6JQVwBOToWdnKCSXwRtE%2Bm5bv65JC9GKlH%2F7jEN5ST0d%2F197XU%2FpIqoGbA%3D%3D\"}]}\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00ea96ac80ab505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":152126,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, -64x-64, 32 bits/pixel","md5":"1d2340b50302b8446c0397c93ac429fa","sha1":"842505b460acd054e8aaa5a8e4b453b6db27b137","sha256":"a08ca72894d678c109b5252e472cd299a39fdfa3adc0e090783bd64b62423d1d","sha512":"23fd6cbce7fa9486911f4c1259812ec040950b49719423cc517acdcd642d12ae540fe8690330b783d86c855cd06604ac1326b57e0191d06cd05a337c435c04cc","ssdeep":"1536:sBZ+ZouFPeGj7iK3QcddrZeUPVm+RSHfbRzcgeVZLP/MQq3p:G6FPe44cdHpPg+dgoFnMQ6","tlshash":"28e318a13747225ed8a67375cd47dab44a1abe50f992e9d330207f2e393d84bdd0284e","first_seen":"2025-07-31T05:09:15.387157Z","last_seen":"2026-05-24T19:21:48.502079Z","times_seen":3,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.106.woff2","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.106.woff2 HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncpurple.net/css2?family=Noto+Sans+KR:wght@400;500;700\u0026family=Noto+Sans:wght@400;500;700\u0026family=Noto+Sans+JP:wght@400;500;700\u0026family=Noto+Sans+Thai:wght@400;500;700\u0026family=Noto+Sans+TC:wght@400;500;700\u0026display=fallback\r\nCookie: country=TW\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:11 GMT\r\ncontent-type: font/woff2\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-11bb0\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncontent-length: 72624\r\ncache-control: max-age=2678400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2pTqc7J2VD9JaBbSatHZcdDx%2FicfoMDkgOcQqSg%2FE9hnk34ozAn9c5YpNZX26eEaa1DDugTQDuzGS23z5mSp5QqDJP%2BD1TjJeMoPbf9U9RyN14Xllm9XNlQPX3nx5g%3D%3D\"}]}\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00ea972f93db505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72624,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72624, version 1.0","md5":"df0449e2075f60fea7deb3b624fda937","sha1":"f86ca5fab0d2397647ec9200d5884e1330b832fa","sha256":"fccfd7a3a3fcb722533b682026eb3b9b63794801d73a3d40d5d41b417efc1678","sha512":"220e150767d5e59c2eee2d6e2f477bf8ae04b367e687e5d157946ac62cdd53d629657c8fa75cb84a7721ea78fd6cbfabf457cad25f5be1fcd75f1f6f01e68435","ssdeep":"1536:kdpawIDcygQbQF9LSZpREAnz62Ebu0g8X81kbG:NvQ8gu38X81kbG","tlshash":"3e6312cc7a53ef10941c8c79dbc7ba6e19e404435a06b8d99ecff960255f886d902e7c","first_seen":"2024-08-02T10:54:25Z","last_seen":"2026-05-24T19:21:48.637864Z","times_seen":559,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/static/pic/002.webp","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:12.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /static/pic/002.webp HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21518\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-540e\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=4,i=?0\r\ncontent-range: bytes 0-21517/21518\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zHTJDKh%2F%2BYgFc3Ioo3%2FzGTiJ6S882XVeF%2Fo7QfOpnorFMt6Zm5D%2FihRozlPLNsy%2B9T26%2F%2Fgi1HIlATk5f7P26AD0VxHjEaWnbrW0P0vbrvTRW6JRh7lpkMxZUiwSHQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: a00ea97bfa08b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21518,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7168ee68087e5912784c2299ca8e30c6","sha1":"18c83e2d0e1b5ca8d760d2133bf02f8496306053","sha256":"bbdccce280831c597f4cbfb7aa4e1a1590f4230066cac44d823ee4a02ae7f395","sha512":"b01c802c97d1b233fe66031cff3a5db14f6af37e124714eb7eb5ac2e674d1b6384be19b0ecd074eb47cfbf8e39d0be155a4966ca937381fbea1e965f89fea449","ssdeep":"384:vwTv3gdhg9q7Ok10IEi/YwMfX3VTih9vCdUc4KILsQeC:oTvnQOkSd4PMfX1ih9vC7ILsI","tlshash":"29a2df920b144796d7272bf8b24a47a99c483f661dd6e25f8d00b895c3e44b64c3dc5f","first_seen":"2026-04-09T04:49:40.715646Z","last_seen":"2026-05-24T19:21:48.544848Z","times_seen":2,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/kakao_js_sdk/2.7.4/kakao.min.js","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /kakao_js_sdk/2.7.4/kakao.min.js HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:11 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 22 Jan 2026 08:48:40 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YM%2BFWa7BA%2BAyOOYKR4ddebNBplHCEFCr%2FNdCGMTpdH3Vvb0x9lMjUoPYSQmO4kYTubRzO%2FgxJzZSi0vAbV4Xy2MwarOC%2FH5JKGlJPTCQ8b31xogppur90liXxZITCA%3D%3D\"}]}\r\nexpires: Mon, 25 May 2026 07:21:10 GMT\r\ncache-control: max-age=2678400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: br\r\netag: W/\"6971e468-14dfe\"\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00ea96f48a5b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85502,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62701)","md5":"f1c522b252eb503e24963c850d8f9a07","sha1":"39221cb3659e71d1b55fde21aaab38b83410cd8a","sha256":"bdf81a027f70f5ad6cf8546faaa45ad0a61eb5424893ce133f423d6a120a179b","sha512":"9ceb8dae51bd11b45fd1a55d1158ac535eaf567025a6a2a6b93cd199b7a407e99ef3d0bacb6f96ba66cb0c467fb5b473f7e04631ef546f16ccf6bffc9d651261","ssdeep":"1536:zWuDJl2JBJMUJuFLG5AMeliYQnFTZx/DQYH5QtG9T:zW4YMGu1MelHIBdFT","tlshash":"9d830ac972d6f05217ab3471607f300bf27aa929a84c8810e175d4e8bcb9b5dd277e2d","first_seen":"2024-12-01T16:25:45.011651Z","last_seen":"2026-05-24T20:28:32.898975Z","times_seen":43,"resource_available":true,"data":null}},"time_used":795,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":794,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/img_live-CtPAva3a.webp","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /store/static/img_live-CtPAva3a.webp HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:10 GMT\r\ncontent-type: image/webp\r\ncontent-length: 85496\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-14df8\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Go3EZWkUZKiKGLrmQZqGpA8QOs8T0Z4P0KaumUS0t4nzO7KMe3mvBiaZG9VjoCfYlda5tY9IrC7pZoBf2%2FcyCSBvt9%2BGJI0sGKN1SozwP4X43hmyL%2FZ7durQ%2FThf9w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: a00ea970c8c9b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85496,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9ebe43a497dbe206c190b91d1a1ad95f","sha1":"047525d6bdfd29cfb0b60501d03bb9e62ca118c6","sha256":"f8767247fbf1b3c3fe5533c5b76c89d7c8064d8c1cd25d9a66fdcd65dca2cbf6","sha512":"57cbdaec35420c8b7b8059cacaed60f3af3bb5fe67231665090c146a311bee07a5869aee01d20fc6841cb42536479828e35063bce59e9f278b0fddb843d0ff85","ssdeep":"1536:W36eHLpWDIjwZsx2Cbbsblklm8fnnb7lp5TnDj9H3Twhde1bQ:s6UVWD4wZsx2CbbWklmonnbb5712","tlshash":"4f8302de0c4b67f2f8498930da050f646f159f40c6ea7e7a8de095a6dcfd88baf10018","first_seen":"2025-07-31T05:09:15.452138Z","last_seen":"2026-05-24T19:21:48.641246Z","times_seen":3,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/download/v2/buckets/test/files/195c5ad4540-531902b4-07ea-42f1-bc03-f29a4282100a?format=webp","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:12.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /download/v2/buckets/test/files/195c5ad4540-531902b4-07ea-42f1-bc03-f29a4282100a?format=webp HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-24T21:08:01.202482Z","times_seen":15673710,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/index.es-NSGKIlj2.js","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:12.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /store/static/index.es-NSGKIlj2.js HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:13 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hOl6nTJg0qm2Mhcjs1YoC54yGlapWpHhOnMrCaTSH987oIaZcOPMdRH6rit1ZjkKOZEd%2FltMC2mKqHzXV%2BTvoVikKACWUWY9pt72kInROIIMubA8eWhOYRBW5GBbyg%3D%3D\"}]}\r\nexpires: Mon, 25 May 2026 07:21:13 GMT\r\ncache-control: max-age=2678400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: br\r\netag: W/\"6971e46a-e4\"\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: a00ea97b69d4b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":228,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"b35d2ff22bd7d6439440a1fc17d3a13f","sha1":"918f40e701b26a5a378f47374fdcb0811507339a","sha256":"1d1e50d40c0ee275c055185e5ea505f358b72911bc8ff2bdb00a055774275021","sha512":"54abffbfb4162f0fcd806391775aa5ff3cf5c3b6f2fe22ad72a042e42e79ed756e6806fdae64b96abab365fc6ce465558ba17eaa150480f6ba0540328640c515","ssdeep":"","tlshash":"6dd02359559c531d57609761f7387134175d512473f5919cdd4f47410506140ef4b914","first_seen":"2025-07-31T05:09:15.587159Z","last_seen":"2026-05-24T19:21:48.64934Z","times_seen":3,"resource_available":true,"data":null}},"time_used":913,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":913,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/index.es-DY2TpNIv.js","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:08.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /store/static/index.es-DY2TpNIv.js HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:09 GMT\r\ncontent-type: application/javascript\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UjLa1fEvAVl8txcxUxQb7IaLYX1nqbr8M6FRqxApUTMZtOI%2BxAXFC910Y9Q%2BT45YKxsI9VPSMCbwQLN3hC7W3s0A38W1q31mMrVLbDJ7XL86Kwrlb%2BcIHVd3Sbrn3g%3D%3D\"}]}\r\nexpires: Mon, 25 May 2026 07:21:08 GMT\r\ncache-control: max-age=2678400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: br\r\netag: W/\"6971e46a-38cb\"\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00ea961ceccb505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14539,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (13305)","md5":"8923be65106788c32a5e4b1e615e4654","sha1":"0fa40b01e59e5d1ae7b77fc171172ea045b78b24","sha256":"6f392f487eca929ccf69d0939486cc6c5894ed26b458216eb3be0136732054d3","sha512":"605342da0cfdf66ff4c76fe953f2ba911ee9db7c75af5ffe59119d645ce58efe97b315c2e359069dc728aa8b4169b1c7ae6f21d651882b072c6e378a1708bb9c","ssdeep":"384:cPr2Mw9RW7i7+Vpl71msF4RigI34OLp3WyJwLXTJ8DVBK57bIS3zTWPF3KXP:cPB0+Pl7Qs+RCrYXTJsBKD3zatKf","tlshash":"1a62d7882260b6e542ef3688cbd4471622b44c85311e5df4707a0e766e7ed78236febd","first_seen":"2025-07-31T05:09:15.329787Z","last_seen":"2026-05-24T19:21:48.547302Z","times_seen":3,"resource_available":true,"data":null}},"time_used":893,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":893,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/bg_talk-F8xs-oUQ.jpg","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /store/static/bg_talk-F8xs-oUQ.jpg HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:10 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 65032\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\nvary: accept, accept-encoding\r\netag: \"6971e46a-14299\"\r\nexpires: Wed, 17 Jun 2026 12:38:51 GMT\r\ncache-control: max-age=2678400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7v4mUzp6CKGEonXIpbs7oq0kWXECu44BGAlr%2FDxBO3QNYbUMW87DB2qjOEIJWWZE%2BPg5imujTSLYakvPuw0%2F3QuQWcqByxSb8TlyQGBGkPortPBuxoYxV8zKPyz3vQ%3D%3D\"}]}\r\nx-content-type-options: nosniff\r\npriority: u=1,i=?0\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-polished: ok, orig_size=82585\r\ncf-bgj: imgq:85,h2pri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\ncf-ray: a00ea970e8d9b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65032,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 5114x960, components 3","md5":"8bc745fc50dae969a3adba4020825afc","sha1":"f32cebe46800d3e3d1f52e366e634812aed3129b","sha256":"23399460ff9b3ec7010ffbfe46f72706ee001841a85b6f9f3c6db5cb04c35239","sha512":"dec096fd72fe0913cbaea67b9087f601bb8657b0cbb2e99e0d15b2c40049f4c0ebd7e53e688500bdfb4e14fb2ee037eb012a9f89f36fe454323c5606253454b4","ssdeep":"1536:Hg+fUmxTO4I8MISeSvbPNq8hUR3AqOWJDBptgm//:Hg+f/nMISeSzNO3APstB/","tlshash":"b4530167ba9227e1f35a8fb423ab3cf1a604ce0049c56951112119bff67672efe501c5","first_seen":"2026-05-24T19:21:48.6519Z","last_seen":"2026-05-24T19:21:48.6519Z","times_seen":1,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/download/v2/buckets/purple/files/19a75640d3e-2ce02019-e98a-485f-879c-dbba32efe982.jpg","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /download/v2/buckets/purple/files/19a75640d3e-2ce02019-e98a-485f-879c-dbba32efe982.jpg HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:10 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 91866\r\nlast-modified: Thu, 22 Jan 2026 08:48:40 GMT\r\nvary: Accept-Encoding\r\netag: \"6971e468-166da\"\r\nexpires: Wed, 17 Jun 2026 12:38:51 GMT\r\ncache-control: max-age=2678400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-polished: format_not_supported\r\ncf-bgj: imgq:85,h2pri\r\nage: 542539\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bhTtlueylGDpyXwjSl1AmNzpVjVjaocEycwTFlqpk5xpfNzPlDtMc8B9X01rffOv628MUPCZa26qnfz5lP%2BkUvCuDG3tO8zDj%2BnCM9ng3WLC1K1P0sHVqU9becuQAg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00ea972d92db505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91866,"size_decoded":0,"mime_type":"image/jpeg","magic":"RIFF (little-endian) data, Web/P image","md5":"43b1f73a0fa82274526af3b4b45541c4","sha1":"0b28312a280fded112702962dc70ffadfc0f9dbd","sha256":"5dea9dac3261751091b401bb03f58c9b76c7895b0766b10c7952b052340027b4","sha512":"f28885b699c3589fedab18e600b5fbddc2379b816476fa5d6b5632b260fbf2c9affb6bdbf8f36537dcbe376941bca0ec7eaf1fb339599042a4e99308787121cc","ssdeep":"1536:LTHg4RKOjeUfoOVmNENnvkvWSbs71HYC+u3RUsWBim4cku8PApbIJChNK6lhBrLy:3xKWeF0minvuW9FyqeziHc/pblhNKcBa","tlshash":"9c93023eb5e80806f963b472146ece887290177f59e8ee1546c88523e28c7df859b70e","first_seen":"2026-04-09T04:49:40.704671Z","last_seen":"2026-05-24T19:21:48.655224Z","times_seen":2,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/download/v2/buckets/purple/files/19a066aa88d-06aef457-0783-477d-9beb-f50ff6e788fd.jpg","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /download/v2/buckets/purple/files/19a066aa88d-06aef457-0783-477d-9beb-f50ff6e788fd.jpg HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-24T21:08:01.202482Z","times_seen":15673710,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/s/notosanskr/v36/PbykFmXiEBPT4ITbgNA5Cgm20xz64px_1hVWr0wuPNGmlQNMEfD4.85.woff2","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /s/notosanskr/v36/PbykFmXiEBPT4ITbgNA5Cgm20xz64px_1hVWr0wuPNGmlQNMEfD4.85.woff2 HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncpurple.net/css2?family=Noto+Sans+KR:wght@400;500;700\u0026family=Noto+Sans:wght@400;500;700\u0026family=Noto+Sans+JP:wght@400;500;700\u0026family=Noto+Sans+Thai:wght@400;500;700\u0026family=Noto+Sans+TC:wght@400;500;700\u0026display=fallback\r\nCookie: country=TW\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:11 GMT\r\ncontent-type: font/woff2\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-cc7c\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncontent-length: 52348\r\ncache-control: max-age=2678400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GMzYpbK8YGPtDC9Yn4Qlhkt6UHJz2TPxZM3HopeQxnI44Y3RIzEXLEcnZD2gYX%2FGDhJGNsytq9JBMoe8mk9mokC%2Blgxla9MihQ9lUcDEBGJ17cLAi28k0kZN2jNujg%3D%3D\"}]}\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00ea972e939b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52348,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 52348, version 1.0","md5":"ae4ab346706ae0e60627602c4f481b55","sha1":"29f1ca28352f258f21c59d5dfe9f181fd145fdbe","sha256":"f5caefc948ff2e7a399e9c9ef6c03a2d67d8e737262079819cb8a0919d106f9b","sha512":"10b6ce769a34c70ca5eb99c3dfaa648b9b3d6181adfbb092fefa89f817420f182eb76d629bd3d7ce5fdb6bc1e2533dc3c38d08db4f1b420cacbb75ae6270dbfe","ssdeep":"1536:u6NQpF8suW8/Kg4+H9SGUbtM+VCS4QfuK4ZCR:uaQpFoKWSS1S4QfuNe","tlshash":"2633f2ee37ea47419529ec6d8a5229c02f37bd50a28563705614cecd581abd34fa133f","first_seen":"2023-10-27T01:42:51Z","last_seen":"2026-05-24T19:21:48.658191Z","times_seen":21,"resource_available":false,"data":null}},"time_used":650,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":649,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/api/conti/content?service=PurpleStore\u0026alias=PurpleGnb_Logo,PurpleGnb_Menus,PurpleStore_Download,PurpleStore_Download_GameList,PurpleStore_Download_Windows,PurpleGnb_ProfileLink\u0026language=ko-KR","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:11.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /api/conti/content?service=PurpleStore\u0026alias=PurpleGnb_Logo,PurpleGnb_Menus,PurpleStore_Download,PurpleStore_Download_GameList,PurpleStore_Download_Windows,PurpleGnb_ProfileLink\u0026language=ko-KR HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nGateType: ApiGate\r\nX-CountryCode: TW\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:12 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\nmd5: 044c77cd904ea4e1ee899eb6b2636a51\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RJz9JpA29YXlApv6U7VTG%2B6H3qpK4nn0tJ9642nG8f42kjfMt%2B0JvViEmbSAsOi76vBxC%2FOSVTqVChvXRajynUvadfcJrvgFx0mJgwGFCSqU5vrV4QdFmW0C23%2FEWA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a00ea979999eb505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2193,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"80edd588b736a5842bb08e0a0134339b","sha1":"be6c4017ffd1069a1c782cf8f5db7ca72354984d","sha256":"edd986f63808857d04a9b8c1c3393eb0f86e119d21e27004a32753c319b16a05","sha512":"264b5ad46dbfad276dea612b2d198f9f5115b9e7980be88811ee3ae3c0edd5d529d816d6d51b48452243baefb2ddc5dfc4cbced40081d6f467094b59b6c2e943","ssdeep":"","tlshash":"4e419eded82b9d200b83a678696fbd72f42202dbdd9c415fbb2c979e133c17c154149a","first_seen":"2026-05-24T19:21:48.659796Z","last_seen":"2026-05-24T19:21:48.659796Z","times_seen":1,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/download/v2/buckets/test/files/19135e91b20-bfc1c674-0d57-4ded-ac6b-a6b0513dbee5?format=webp","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:12.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /download/v2/buckets/test/files/19135e91b20-bfc1c674-0d57-4ded-ac6b-a6b0513dbee5?format=webp HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-24T21:08:01.202482Z","times_seen":15673710,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/index.es-C7NLXiMk.js","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:12.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /store/static/index.es-C7NLXiMk.js HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:13 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8slelyy4187S53A%2FKzzRdgdhfBPKckKchKF%2BENMnUjys4StFsizHR6oq%2FV4ZeD2udBZJ3Dnpun8BXPpRZsS2LZXDWsh5IUtZ4G5SdNVQ1bT87P8CER9m%2FHR3zdLlKA%3D%3D\"}]}\r\nexpires: Mon, 25 May 2026 07:21:13 GMT\r\ncache-control: max-age=2678400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: br\r\netag: W/\"6971e46a-3b1\"\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: a00ea97b69d6b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":945,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (941)","md5":"3c9d7707701edc9fb7990e03c0ea20a0","sha1":"ebce3a8411b57d261851646aa770f0aeebdeeb65","sha256":"bff649ff296a845476d28188f35f4a79f2933e26484f4cdff11c9391aa537caa","sha512":"f403b6753eda9abd4e4f86609441e7899696c0b1dca4ee4ed82b02610eb0d97a3f3c401db59737b56ac064b0d81e7085fe1906daa27cdc30af49f4ccd4a6b147","ssdeep":"","tlshash":"911154d94b70849899aaa496fe1085c8118f6cb6ef7213be665fcb04c046f80e30d9a4","first_seen":"2025-07-31T05:09:15.461686Z","last_seen":"2026-05-24T19:21:48.661506Z","times_seen":3,"resource_available":true,"data":null}},"time_used":937,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":937,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/static/pic/003.webp?format=webp","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:12.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /static/pic/003.webp?format=webp HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15634\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-3d12\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 12\r\ncache-control: max-age=2678400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cQjL8av1YaWtqVtI1cBcFnXH%2Biq0mO5gxWFajMR6OGN6OXhgicoP8TwPBsW8KtaWSmTxAzYqMlaTYoN4a7O%2Firb5fes5LOIPsmHB%2FNudmiVji%2Fg23%2BJIaFZKzZCLyA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: a00ea97c4a14b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15634,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"df84c6c6426d4994cd9bab7b895e4017","sha1":"db3a4533dcb8ab0968393ee166bb384a27a07ee5","sha256":"47edaac126440032ceb0380bd44520fddd01991e41d83b8b69aca739a4a07ef8","sha512":"15ff31dd41dca39cf057e8debe62d12e9260e87a7e35d27e765c1619a1626f0ef2950c9a1e07eab112fa0e57dc35fd116e00d8032d811f1be986d3c291d7ef6e","ssdeep":"384:EwNZaBnlsvQU70gGGPk2YJZYRs3PJxN5ZBu:hNZcnlsIrn2S6e3hxNvBu","tlshash":"1762d16c13ed14f8f39272fda465aa0a6fce58219fcd664f507064633964ec7095bdc0","first_seen":"2026-04-09T04:49:40.744028Z","last_seen":"2026-05-24T19:21:48.498236Z","times_seen":2,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":238,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/store/static/index.es-CW50TaXQ.js","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:08.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /store/static/index.es-CW50TaXQ.js HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:08 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q5cGarVm9YquvUKYdxFFGlBqHf9oRBIFX75SdgwHKn0xf9dgbRejIr7XUURBwUvC8G%2FUDXRp7YNyauuEa3CY%2F33qvh5iks%2FaS3FuUiPgE%2BJ5T4ZgLzkgzTOPUA7cGQ%3D%3D\"}]}\r\nexpires: Mon, 25 May 2026 07:21:08 GMT\r\ncache-control: max-age=2678400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\ncf-cache-status: REVALIDATED\r\ncontent-encoding: br\r\netag: W/\"6971e46a-e35\"\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00ea961decfb505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3637,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (3633)","md5":"e06a03159418cc30192883c3cea9354c","sha1":"e3d79fd176cf17200d229175cd158d56d2746525","sha256":"8b59066c808cd886dc0d639a1a5724865ddab01e90f2b218aa380fc82f8fbf41","sha512":"0fa80e12eb0517039ff417c638849341ab01a573b5a35da21f1bed960729354a75fd6dd9b3d7c0abb6aa6a52887159c6bffbd1e38277b78223cec03c800d0a71","ssdeep":"","tlshash":"7771eece5720a594ad79e39def3dcc94236916d3a2399141bf0edf18984bcd8fc884a0","first_seen":"2025-07-31T05:09:15.433097Z","last_seen":"2026-05-24T19:21:48.662672Z","times_seen":3,"resource_available":true,"data":null}},"time_used":777,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":777,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.118.woff2","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.118.woff2 HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncpurple.net/css2?family=Noto+Sans+KR:wght@400;500;700\u0026family=Noto+Sans:wght@400;500;700\u0026family=Noto+Sans+JP:wght@400;500;700\u0026family=Noto+Sans+Thai:wght@400;500;700\u0026family=Noto+Sans+TC:wght@400;500;700\u0026display=fallback\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:10 GMT\r\ncontent-type: font/woff2\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-ebe8\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncontent-length: 60392\r\ncache-control: max-age=2678400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F82YzaexHhFjZdJvMIQ3Y9hOdcZ7KPTbXj4CpBUprab14QFn0B8lUgrdfwULFNLKX56wC7uc7iuNNs4RgJhtEQHTNZTFC2JiOzhuDq3aO0qT5XifmNoVTM1P9qY5xQ%3D%3D\"}]}\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00ea96e186bb505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60392,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 60392, version 1.0","md5":"f8aca6ed71a0e762c288e42f6bd2ae05","sha1":"5248c522c0d1d500f6a1ee2266a482bb61bfe7de","sha256":"e4b63b4b428294f9315339496162012eb40497dd9b84e1e52d5d7abcf6338a48","sha512":"03839633576bf208b8e291feec1e927e5b1dbfcb5b27111193250ae57b6e9d4185e3dec7c9ed4d5d07bbe3dc8991e1ee299e72d51b3412ef22a2798962a24313","ssdeep":"1536:rMDNusnjSUnO7LSXghxnOQ2zPx1YqHB1IbisUllR:rMpzSUnO7L1hxOQqPxmqh++sUlj","tlshash":"714302c13799b86d9ac45973fc7bf90ed89e1c10136b42a1e27ec85e948798c8537788","first_seen":"2024-08-02T10:54:25Z","last_seen":"2026-05-24T19:21:48.569229Z","times_seen":255,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.111.woff2","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /s/notosanstc/v36/-nF7OG829Oofr2wohFbTp9iFOkMQAewlpbGXhhyYs0QF3kPVyLylzU95vTq1Ltj5xQez1g.111.woff2 HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ncpurple.net/css2?family=Noto+Sans+KR:wght@400;500;700\u0026family=Noto+Sans:wght@400;500;700\u0026family=Noto+Sans+JP:wght@400;500;700\u0026family=Noto+Sans+Thai:wght@400;500;700\u0026family=Noto+Sans+TC:wght@400;500;700\u0026display=fallback\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:10 GMT\r\ncontent-type: font/woff2\r\npriority: u=4,i=?0\r\nlast-modified: Thu, 22 Jan 2026 08:48:42 GMT\r\netag: \"6971e46a-124b4\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncontent-length: 74932\r\ncache-control: max-age=2678400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NlgItrty7ftsjUzgNMKqf%2BOQTqli4dNTMzgIbm3LmMesvXj8oR%2By4DgWI%2FpIcnYgZpPb62Xu%2Bvoy4WJfqM0qv9phWvff%2B1tYy1flpZ2sWBSkorqpT6Fx2sSDc41FFg%3D%3D\"}]}\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00ea96e4877b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":74932,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 74932, version 1.0","md5":"98d641e6e4829624a9fb8f03f42a4130","sha1":"c0b2bf040d261051af66e743e0135a53820ef0cb","sha256":"95342401c1423e11eef2c248cb55b5578eeea54e47936e37e002051b60018973","sha512":"fef940a2ec8962e11ac5bc1a989f7591ecb79d83c805857931eb2de8bd18f70bbff7c610e88ee4421e727e3a8190501ee49c4c5aee08015f4cc0da7722a08599","ssdeep":"1536:TxFW3ez3bMfc7VUzwq/VUbeaH7LiHHwnfvsf/sXwSYW6Ydb:AALMIUnd1abNvy/sXdT6Ub","tlshash":"4673124206c7e7bac497d27d4dd41fc869b7d4df9a3d0e729460046b260c0239ee53ab","first_seen":"2024-08-02T10:54:25Z","last_seen":"2026-05-24T19:21:48.663887Z","times_seen":775,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/download/v2/buckets/purple/files/19b0c2cd451-fabcd7b6-4c2c-4892-a794-e652e93a122e.jpg","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:10.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /download/v2/buckets/purple/files/19b0c2cd451-fabcd7b6-4c2c-4892-a794-e652e93a122e.jpg HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:11 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 99202\r\nlast-modified: Thu, 22 Jan 2026 08:48:40 GMT\r\nvary: Accept-Encoding\r\netag: \"6971e468-18382\"\r\nexpires: Wed, 17 Jun 2026 12:38:51 GMT\r\ncache-control: max-age=2678400\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncf-polished: format_not_supported\r\ncf-bgj: imgq:85,h2pri\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bJSHGRIwlHx1wpDRzx27WF2yjAx0wwjhLN97ipuyo0eb9N0kdHhmn5Whm69aBIXjDg2uyLGL0C7QEMZ4wnfdk1F33%2BG%2FunRxjlq58QUzHgZ5vt78k407kJ8Znre6hg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00ea972390fb505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":99202,"size_decoded":0,"mime_type":"image/jpeg","magic":"RIFF (little-endian) data, Web/P image","md5":"27e52e9eaf16f071515e903649ffd68f","sha1":"f6a6045eb406e3aff1040fe3873af332435f715f","sha256":"83e22a746b6d2a8c78d962b6f317708473407144fb4b94a79eb90e3da5baa2d5","sha512":"8f9d2f81df87ec557e5b05e145b24ef25f542f329ec4ddefd3783fb84f5adb2f7454ab8c5ba88d04aad36ba1833c5f49ee6f9d1b3b1a98202071a0cefb78cbcc","ssdeep":"3072:2qSEU3pH7Dgsbcx7jDh3Ga7M7PwHoWR2SfqcPjCD:2q6313gsefRRgzwBNfZPjq","tlshash":"d9a30230e32c83dbf1859739f6a0ed52517b939d7a3e4ab7efd00b8a11419091718fa2","first_seen":"2026-05-24T19:21:48.670979Z","last_seen":"2026-05-24T19:21:48.670979Z","times_seen":1,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ncpurple.net/download/v2/buckets/test/files/1953669c2e4-a6e0ecbf-9834-48e1-9a2c-d421160440cd?format=webp","fqdn":"ncpurple.net","domain":"ncpurple.net","tld":"net"},"ip":{"addr":"104.26.10.233","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ncpurple.net/","date":"2026-05-24T19:21:12.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ncpurple.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 01 May 2026 02:04:07 GMT","end":"Thu, 30 Jul 2026 02:04:06 GMT"},"fingerprint":{"sha1":"D4:1E:B6:C6:E5:EE:C1:57:BD:F1:68:FB:B7:2D:25:17:CA:52:6D:09","sha256":"37:EC:03:24:02:D8:E1:F5:C3:11:23:B0:D2:72:38:83:41:F5:FA:84:F6:59:4F:0F:B4:DB:B4:7D:25:01:1E:BE"}}},"request":{"raw":"GET /download/v2/buckets/test/files/1953669c2e4-a6e0ecbf-9834-48e1-9a2c-d421160440cd?format=webp HTTP/1.1\r\nHost: ncpurple.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: country=TW; locale=zh-TW\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 24 May 2026 19:21:12 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10996\r\nlast-modified: Thu, 22 Jan 2026 08:48:40 GMT\r\netag: \"6971e468-2af4\"\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0hmQ2m4nI%2B1ROjFnwyFo6aLll22NAMTIM6dp5gcSxTtANSWokNM1hvzJt0l1VX04%2FUoggNmXh9CloXT3%2F2KCgR8QPM6YyjCeoSB8iW8%2Bp0mn1nyYKtv6jlZxU0EHww%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: a00ea97b59d2b505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10996,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"56b2fcb265bda09062cad26524fc8c28","sha1":"db23883b8f294cad7ab5afd1475a89d7f139c3d1","sha256":"e8e52f3588fcd6d012de6ec2b6ad5a226d8aeb4c22b23614700a62551e91383b","sha512":"ce2fc704b1c457886633f9c3aeb1569e1766965fbcbff1bb6443fbec5072b69d26c1f9b369f58196d82d07b71f78a3809aa53da6636c1a63aa348b7aa78fc5f1","ssdeep":"192:Dw06Xa5UQ5gXRdr4CGjrN5muKzHAsDsEb04ICSXopwOd/vD:DwT0yRdwrNA9gsDnQ46XoCm","tlshash":"f832bf663f5dd221de26a4350660f32bb3e27de30f42eaf899824cb647711ef1158097","first_seen":"2025-07-31T05:09:15.38355Z","last_seen":"2026-05-24T19:21:48.676491Z","times_seen":3,"resource_available":false,"data":null}},"time_used":600,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":596,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-24","alert":"Sinkholed","trigger":"ncpurple.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}