{"report_id":"20ae5ddf-802e-4643-a831-6b1071ec61a9","version":6,"status":"done","tags":[],"date":"2026-01-06T22:09:01Z","url":{"schema":"https","addr":"purplewojak.trade/","fqdn":"purplewojak.trade","domain":"purplewojak.trade","tld":"trade"},"ip":{"addr":"104.21.14.242","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"purplewojak.trade/","fqdn":"purplewojak.trade","domain":"purplewojak.trade","tld":"trade"},"title":"$PURK - The Purple Wojak | Airdrop","dom":{"size":9746,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"d7f98baf82c32e6a50a21835aee98876","sha1":"97276acc84a550ebfd1c7b9b4c95b518f80473c6","sha256":"00190e344eebc3de763002645ab5f33d2c82cd24c53b07cf89fac38b0087f9f4","sha512":"5f4fa1528efe4a07b5330ee4e0d8b135bb11464606cf24909b3bf9f969b7dd3fbaefd220f7d06a07ea2b9230651d1641b6405a97398e188376392dac2b00c4b5","ssdeep":"96:n+eJJ7CFI5F2+75ghPkMmpQT1N23dYppuNSGdi:dJ7X5F2O5gGMmiT1k3ypuLdi","tlshash":"9512b66668f4527312c381e29a0d671bbfa64103de0e924135fd821c9fd6e47ec63a9a","dom_hash":"domhash31b23b5d8727318e66b3b17ede744f5f","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"purplewojak.trade/","fqdn":"purplewojak.trade","domain":"purplewojak.trade","tld":"trade"},"ip":{"addr":"104.21.14.242","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-10T22:09:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-04T22:14:09.841371Z","alert_count":0,"request_count":4,"received_data":197468,"sent_data":2228,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-04T22:17:15.216142Z","alert_count":0,"request_count":1,"received_data":10794,"sent_data":476,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"purplewojak.trade","ip":{"addr":"172.67.160.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-06","domain_rank":0,"first_seen":"2026-01-06T22:09:02.298663Z","last_seen":"2026-01-06T22:09:02.298663Z","alert_count":0,"request_count":17,"received_data":11539767,"sent_data":7655,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"purplewojak.trade/","fqdn":"purplewojak.trade","domain":"purplewojak.trade","tld":"trade"},"ip":{"addr":"172.67.160.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"cd3530211c3a8e4f78ceb8ebf6d73b3d","sha1":"9764fbd1f2addeee772448f3c2619a66d4cab437","sha256":"99bac106773f018e878c0933c0f3e5fc1c6a307e0b48c6fb2d079ef181e59ef0","sha512":"8423a2bd1c138909f89505fce92f0ccdc8d81b1fc22dfbcec8985ffc62086afd1b08ed7d3f0360611c4cdb08c15614c3350734f4d22b2b125f7f21503431c197","ssdeep":"6144:42jmgjmA/XmGkQU1URQy7G5Jf01x1+BnLVzcQM64BzhWca+:42jmgjmE7E1URQy7G5Jf01x1+BnLVzcJ","tlshash":"028431454bca1045c771b41aecf2224aa9cb8e11fa647c6af95cbd82f75871392ef1f0","size":381020,"data":"","first_seen":"2026-01-06T22:09:06.699374Z","last_seen":"2026-01-06T22:09:06.699374Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"purplewojak.trade/domino.basic.cjs.js","fqdn":"purplewojak.trade","domain":"purplewojak.trade","tld":"trade"},"ip":{"addr":"172.67.160.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4c87f9c21fe144285114ee2e43bec75","sha1":"de8c11b8d212fdbdbb2eb30f0c4b7dbfcbf62d95","sha256":"8530f3dec1ad4c80137eec011f95b521a612b11ebcc0e29c8ed2d685e747743d","sha512":"78a7987f97ce0d6683194234e9db1f9fd065a56b1fa3b441482e800067463dda2498a083ba4d148ca9ed5e8f0daf33cf108d89370c5828f9185e2882e7eb4d51","ssdeep":"6144:iKOwZOwzP1UyMsMVXRoJCy3EpJf01x1+BnLVzcQM64BzhWcE5:iKOwZOwBZYVXRoJCy3EpJf01x1+BnLVB","tlshash":"6a84214a0bc51049c771b459ece1264aa9ca8e11fe647c5bf94cbcc6f718b1392ee2f1","size":392886,"data":"","first_seen":"2026-01-06T22:09:06.687347Z","last_seen":"2026-01-06T22:09:06.687347Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"purplewojak.trade/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fhapi.basic.min.js%3Ft%3D29462288%26u%3DhTlRMW_qqqonDV43GDY5MjU2NDUxMjhjZmYzYzM0MDI3ZTdiZIJvnBo1Dy1DR2rNiA","fqdn":"purplewojak.trade","domain":"purplewojak.trade","tld":"trade"},"ip":{"addr":"172.67.160.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c835ce0aa761a791b29ba4c102a85e28","sha1":"828e40328ca8ff740f1090e6f63e170c1592a62c","sha256":"4ee6631554867dc1bfadbfe5f4b4ebf4cec5164ba142f8db92f840c2028496cf","sha512":"49cefc3ca9614cebafe201eef12b5cdebcdd19da6ab30f530d7a81a8ef91fca5f02eb63108b8056c2dbd4c22b8b337aae939a712f4a876bdeef21a1e2a9f3225","ssdeep":"6144:9ujB8gltIeTM5/S8g6zRhNgDzQebuazBzqXQPkBAUvVdZcml4L:ihltVM/g6ZszQeqazNqXQcBvK","tlshash":"29d4bcec970a167788cb97b6423363afef884d1a236b3c406ec19cd1574a74e53ea15c","size":641034,"data":"","first_seen":"2026-01-01T19:22:06.925398Z","last_seen":"2026-03-30T11:52:16.142566Z","times_seen":405,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"purplewojak.trade/x.avif","fqdn":"purplewojak.trade","domain":"purplewojak.trade","tld":"trade"},"ip":{"addr":"172.67.160.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://purplewojak.trade/","date":"2026-01-06T22:08:38.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purplewojak.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 03:28:42 GMT","end":"Mon, 06 Apr 2026 04:27:20 GMT"},"fingerprint":{"sha1":"90:20:F3:6D:43:3F:02:D7:51:5F:94:2D:CE:F2:A7:67:57:97:6C:24","sha256":"A8:14:FD:AB:FD:9F:9C:DD:A9:23:53:B5:7E:89:1A:BF:E9:53:D8:2E:DE:F1:EA:4B:4E:FD:A1:E5:B7:DE:7F:EA"}}},"request":{"raw":"GET /x.avif HTTP/1.1\r\nHost: purplewojak.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://purplewojak.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 06 Jan 2026 22:08:38 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1930\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 04:25:33 GMT\r\netag: \"695c8ebd-78a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PyPyUPuFFqGaAuZpCuPfLYsXMc23%2Bi%2FPQUf9q3iFGGG9XkGmJR8dhNND83KbT4c0kiltVwcD40csWxPHwVtCSQtReHcR7dqpVm9IQB0vrg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b9e8901fa14b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1930,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"66610e9f6ba44b9dd57007ea494d94f8","sha1":"f0dd69975b0e23867017b88de4167e81631fdeff","sha256":"378a986e7089ea7590a819c59a282082eae29398daa147fe3fdcf56563427001","sha512":"a0c56c7ff957f497c04e7d2a5250314a8a0f3ef3637a7b2f5e1078061016db0077656207466c52905f727be8c59042f85837d3d7f54f4bc8995775207aa7c54d","ssdeep":"","tlshash":"c9410bfc13132710d8d832f14ab5c705f1a3a607a997716f09a675205935bb3dd16ec5","first_seen":"2026-01-06T22:09:06.682338Z","last_seen":"2026-01-06T22:09:06.682338Z","times_seen":1,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"purplewojak.trade/face.avif","fqdn":"purplewojak.trade","domain":"purplewojak.trade","tld":"trade"},"ip":{"addr":"172.67.160.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://purplewojak.trade/","date":"2026-01-06T22:08:38.740Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purplewojak.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 03:28:42 GMT","end":"Mon, 06 Apr 2026 04:27:20 GMT"},"fingerprint":{"sha1":"90:20:F3:6D:43:3F:02:D7:51:5F:94:2D:CE:F2:A7:67:57:97:6C:24","sha256":"A8:14:FD:AB:FD:9F:9C:DD:A9:23:53:B5:7E:89:1A:BF:E9:53:D8:2E:DE:F1:EA:4B:4E:FD:A1:E5:B7:DE:7F:EA"}}},"request":{"raw":"GET /face.avif HTTP/1.1\r\nHost: purplewojak.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://purplewojak.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 06 Jan 2026 22:08:38 GMT\r\ncontent-type: image/avif\r\ncontent-length: 1891\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 04:25:33 GMT\r\netag: \"695c8ebd-763\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qZdENImHSZLxk1iX5iOdX3UicqweY1YPcxSMouW6BMZhPBSlR%2BodOpc%2FJtvP8tcLa1dNG%2BHyBkwSf0yKuL08s6%2Fk%2Bnrt8umyweIihEJ4HA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b9e8901fa15b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1891,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"3dd0d2fa2043da9315d9c9fefb504c6d","sha1":"d49f2c87c71230efc3b79148fb47c687eaf07169","sha256":"8c53099e87040826ee070c98d22855dc0cf04f49bdae17fed2e71ba505428ac1","sha512":"163cb7895f840869dcba34de2ff3ae5d6075d1e3844267c3bb0350a87cc88756d3682046daaf9040baabcba53854d274d0ceadf32918c3a05d029390497f535e","ssdeep":"","tlshash":"0241eb1723627a41e84e82bd1ca6c73172f5d31e579b59a76c052b21e6793338208b14","first_seen":"2026-01-06T22:09:06.683302Z","last_seen":"2026-01-06T22:09:06.683302Z","times_seen":1,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"purplewojak.trade/walk.gif","fqdn":"purplewojak.trade","domain":"purplewojak.trade","tld":"trade"},"ip":{"addr":"172.67.160.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://purplewojak.trade/","date":"2026-01-06T22:08:38.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purplewojak.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 03:28:42 GMT","end":"Mon, 06 Apr 2026 04:27:20 GMT"},"fingerprint":{"sha1":"90:20:F3:6D:43:3F:02:D7:51:5F:94:2D:CE:F2:A7:67:57:97:6C:24","sha256":"A8:14:FD:AB:FD:9F:9C:DD:A9:23:53:B5:7E:89:1A:BF:E9:53:D8:2E:DE:F1:EA:4B:4E:FD:A1:E5:B7:DE:7F:EA"}}},"request":{"raw":"GET /walk.gif HTTP/1.1\r\nHost: purplewojak.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://purplewojak.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 06 Jan 2026 22:08:38 GMT\r\ncontent-type: image/gif\r\ncontent-length: 5730136\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 04:25:33 GMT\r\netag: \"695c8ebd-576f58\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dtjKQXZgAi5drzuzpx6LFAn82tdVIzR2bDxADUcNlCKXk%2BHqvmGz88VN9W64VlZPKdJLv3hhuYpKOXW8z75%2BgXyKt%2FAUCLmgAn3SILWydg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b9e89020a18b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5730136,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1600 x 900","md5":"8db62d675fc2a8f942f9ff0a0d53ef4f","sha1":"d4babdcb6c9eda8358e333055a9ddfd20a16c26d","sha256":"9f9c6206106b7e2833cddb59ce1d025877f9066f22985b0e2bdf5617d30ba2ac","sha512":"f61cb58733cafcd6ecf53ba39b365d2ce0035ae6b8b01f4977cf4e4b4f1bab430bb62a8a4f4bac1b1b653347336f3c71ae32a4248a6a19af37b607eceb30ffed","ssdeep":"24576:8kCIFFz9V8Ye6b+jRr1uHsjqeZ5bkxLaurTfQORz94mrm:bCYFz/84ajRmsjqekxeurBzji","tlshash":"fc25335a806f06c6875638d83e51462739713c7e98ea5d78ee27632edc0102a7c3fd9e","first_seen":"2026-01-06T22:09:06.684415Z","last_seen":"2026-01-06T22:09:06.684415Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":917,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://purplewojak.trade/","date":"2026-01-06T22:08:39.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://purplewojak.trade\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 23:36:38 GMT\r\nexpires: Wed, 30 Dec 2026 23:36:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 599522\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-24T17:16:56.695738Z","times_seen":217900,"resource_available":false,"data":null}},"time_used":1430,"timings":{"blocked":706,"dns":0,"connect":7,"send":0,"wait":8,"receive":10,"ssl":694},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://purplewojak.trade/","date":"2026-01-06T22:08:39.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://purplewojak.trade\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 23:36:38 GMT\r\nexpires: Wed, 30 Dec 2026 23:36:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 599522\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-24T17:16:56.695738Z","times_seen":217900,"resource_available":false,"data":null}},"time_used":1419,"timings":{"blocked":700,"dns":3,"connect":16,"send":0,"wait":15,"receive":7,"ssl":671},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"purplewojak.trade/favicon.ico","fqdn":"purplewojak.trade","domain":"purplewojak.trade","tld":"trade"},"ip":{"addr":"172.67.160.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://purplewojak.trade/","date":"2026-01-06T22:08:40.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purplewojak.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 03:28:42 GMT","end":"Mon, 06 Apr 2026 04:27:20 GMT"},"fingerprint":{"sha1":"90:20:F3:6D:43:3F:02:D7:51:5F:94:2D:CE:F2:A7:67:57:97:6C:24","sha256":"A8:14:FD:AB:FD:9F:9C:DD:A9:23:53:B5:7E:89:1A:BF:E9:53:D8:2E:DE:F1:EA:4B:4E:FD:A1:E5:B7:DE:7F:EA"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: purplewojak.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://purplewojak.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 06 Jan 2026 22:08:40 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 04:25:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PUPh4H2bADiPkA1DjsD0F7Ba7gvNsPS7HLizT0Zwh0zxhonGoKg6YNqszEhBQMcRfhCw8AtHfyqpEpAzdZbQOkTcwHBPWlnlZsCsirYSrA%3D%3D\"}]}\r\npriority: u=6,i=?0\r\ncf-ray: 9b9e890bfa7fb4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9545,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"238826f0841cb5d086dfd87ff4a70df1","sha1":"42fd3674b1fe29352b9c708054e0573e67b1de84","sha256":"306ab4895f4cfca9785944584ac7216fa491da116928b3621fd574cfb6dece85","sha512":"a29ba116694f68631fd99d5b6f0f31700b7509fda277029219cd8799c092fef6aeaa5d0d6efffda4280e81ea6754d77140c59481bd178931b33629114860e8cd","ssdeep":"48:ttTkCElgXvGFluNu5T7q8IoTUsWVqY7eBm2w2yyyyyyyyy+Vw/fN4dI4pCvzeuNl:jpvGFl975zwPyBmpnN4dtpSNSo","tlshash":"6812737529c4627312b381e14a0d779bfea58103e60e928135fe930f9ff6e02ec63991","first_seen":"2026-01-06T22:09:06.686252Z","last_seen":"2026-01-06T22:09:06.686252Z","times_seen":1,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"purplewojak.trade/domino.basic.cjs.js","fqdn":"purplewojak.trade","domain":"purplewojak.trade","tld":"trade"},"ip":{"addr":"172.67.160.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://purplewojak.trade/","date":"2026-01-06T22:08:38.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purplewojak.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 03:28:42 GMT","end":"Mon, 06 Apr 2026 04:27:20 GMT"},"fingerprint":{"sha1":"90:20:F3:6D:43:3F:02:D7:51:5F:94:2D:CE:F2:A7:67:57:97:6C:24","sha256":"A8:14:FD:AB:FD:9F:9C:DD:A9:23:53:B5:7E:89:1A:BF:E9:53:D8:2E:DE:F1:EA:4B:4E:FD:A1:E5:B7:DE:7F:EA"}}},"request":{"raw":"GET /domino.basic.cjs.js HTTP/1.1\r\nHost: purplewojak.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://purplewojak.trade/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 06 Jan 2026 22:08:39 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 04:25:33 GMT\r\netag: W/\"695c8ebd-5feb6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0xdO%2Fxiu4XHNsdoJXAFThM%2Bpcoa0%2Fa0s7iS077Q84TbpsutHZTDCeDw7RrnQvhIQzCIqwQuTiUYP0%2FtfM%2B%2B0bM%2Bn3qvIQwk61Y0jmLPEeQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b9e8901fa10b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":392886,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65159)","md5":"d4c87f9c21fe144285114ee2e43bec75","sha1":"de8c11b8d212fdbdbb2eb30f0c4b7dbfcbf62d95","sha256":"8530f3dec1ad4c80137eec011f95b521a612b11ebcc0e29c8ed2d685e747743d","sha512":"78a7987f97ce0d6683194234e9db1f9fd065a56b1fa3b441482e800067463dda2498a083ba4d148ca9ed5e8f0daf33cf108d89370c5828f9185e2882e7eb4d51","ssdeep":"6144:iKOwZOwzP1UyMsMVXRoJCy3EpJf01x1+BnLVzcQM64BzhWcE5:iKOwZOwBZYVXRoJCy3EpJf01x1+BnLVB","tlshash":"6a84214a0bc51049c771b459ece1264aa9ca8e11fe647c5bf94cbcc6f718b1392ee2f1","first_seen":"2026-01-06T22:09:06.687347Z","last_seen":"2026-01-06T22:09:06.687347Z","times_seen":1,"resource_available":true,"data":null}},"time_used":433,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":120,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"purplewojak.trade/dex.avif","fqdn":"purplewojak.trade","domain":"purplewojak.trade","tld":"trade"},"ip":{"addr":"172.67.160.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://purplewojak.trade/","date":"2026-01-06T22:08:38.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purplewojak.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 03:28:42 GMT","end":"Mon, 06 Apr 2026 04:27:20 GMT"},"fingerprint":{"sha1":"90:20:F3:6D:43:3F:02:D7:51:5F:94:2D:CE:F2:A7:67:57:97:6C:24","sha256":"A8:14:FD:AB:FD:9F:9C:DD:A9:23:53:B5:7E:89:1A:BF:E9:53:D8:2E:DE:F1:EA:4B:4E:FD:A1:E5:B7:DE:7F:EA"}}},"request":{"raw":"GET /dex.avif HTTP/1.1\r\nHost: purplewojak.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://purplewojak.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 06 Jan 2026 22:08:38 GMT\r\ncontent-type: image/avif\r\ncontent-length: 3515\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 04:25:33 GMT\r\netag: \"695c8ebd-dbb\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ow8xPhKPkC8DzQKLWnvhu9WAp89VSWw0NA6NkQPzh2xRLimWFhTwvNBmQIEFXMoeiraVts%2FwlmKRLkWxQYBSGhsRdCeBLHsy%2FhDPuK5QjA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b9e8901fa11b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3515,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"f6824b917810cfbfe83aec98c3736ab9","sha1":"163351721e02d85c9c434dfd17e0033e152baf8e","sha256":"a5c2e7c9c20cf530f9095e8cc4d18ab1a38bacfa655b4d0dbfab6ef4be198c5a","sha512":"4c8239f3cf6400966bbdae8afca8ca12791b51bfed9e204638fb4efb573ece9d58fb08eab5c1f589916c64c3bb79da63f898576fdc17c2fc0b71cdf8c3070ec4","ssdeep":"","tlshash":"dc715c602324ad15ec866b7c95ec8156b951f26a0e8bb3105de323d1d67a37dd606c40","first_seen":"2026-01-06T22:09:06.688453Z","last_seen":"2026-01-06T22:09:06.688453Z","times_seen":1,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":261,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"purplewojak.trade/pump.avif","fqdn":"purplewojak.trade","domain":"purplewojak.trade","tld":"trade"},"ip":{"addr":"172.67.160.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://purplewojak.trade/","date":"2026-01-06T22:08:38.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purplewojak.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 03:28:42 GMT","end":"Mon, 06 Apr 2026 04:27:20 GMT"},"fingerprint":{"sha1":"90:20:F3:6D:43:3F:02:D7:51:5F:94:2D:CE:F2:A7:67:57:97:6C:24","sha256":"A8:14:FD:AB:FD:9F:9C:DD:A9:23:53:B5:7E:89:1A:BF:E9:53:D8:2E:DE:F1:EA:4B:4E:FD:A1:E5:B7:DE:7F:EA"}}},"request":{"raw":"GET /pump.avif HTTP/1.1\r\nHost: purplewojak.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://purplewojak.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 06 Jan 2026 22:08:38 GMT\r\ncontent-type: image/avif\r\ncontent-length: 2544\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 04:25:33 GMT\r\netag: \"695c8ebd-9f0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sPklXPXtuclSFC4T5S0i5DSfQpkyUQTjFqbGAeBeuPTEPiTOIZeyWDPFf66tUh0qXXw%2FS9weiAcP2PtTNKsaSrXf%2BhQGQfiK%2B0VDpB2RTQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b9e8901fa12b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2544,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"ea47956356b932fbb5e7b545348d051d","sha1":"1f769242e502c21cfffcc90ae71bdb37334fc307","sha256":"33b8e08224a8ab11a03715152a12c411234f949f4a637a07a1833bfaa7f98e5a","sha512":"d1659a631338d8793bdb1cddb255f303006ac66d8e7e54e6e4cebde556465de1e0bf6c8d8bb07f04535d282df14ef4b9785ade0073a435feebe9a1089373b80b","ssdeep":"","tlshash":"8f511c0d3559b901c07a127a0cb98216b1248575378bba44ca51d2ec5db5374d85bdd5","first_seen":"2026-01-06T22:09:06.689372Z","last_seen":"2026-01-06T22:09:06.689372Z","times_seen":1,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"purplewojak.trade/script.js","fqdn":"purplewojak.trade","domain":"purplewojak.trade","tld":"trade"},"ip":{"addr":"172.67.160.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://purplewojak.trade/","date":"2026-01-06T22:08:38.747Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purplewojak.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 03:28:42 GMT","end":"Mon, 06 Apr 2026 04:27:20 GMT"},"fingerprint":{"sha1":"90:20:F3:6D:43:3F:02:D7:51:5F:94:2D:CE:F2:A7:67:57:97:6C:24","sha256":"A8:14:FD:AB:FD:9F:9C:DD:A9:23:53:B5:7E:89:1A:BF:E9:53:D8:2E:DE:F1:EA:4B:4E:FD:A1:E5:B7:DE:7F:EA"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: purplewojak.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://purplewojak.trade/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 06 Jan 2026 22:08:38 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 04:25:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"695c8ebd-0\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qmOzc1UMk%2FkQQBTE6pQJ%2B4%2BTobCNp33YcqH5P%2FQOkHEujhWF6dCQKr1iqM7%2FVFjQFh70ze1KkxlL4Jf4acu1444E%2BEFaOUOBkUiyJlSGSA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: 9b9e89020a19b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-24T17:14:27.879734Z","times_seen":16686402,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://purplewojak.trade/","date":"2026-01-06T22:08:39.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://purplewojak.trade\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 23:36:38 GMT\r\nexpires: Wed, 30 Dec 2026 23:36:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 599522\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-24T17:16:56.695738Z","times_seen":217900,"resource_available":false,"data":null}},"time_used":1648,"timings":{"blocked":817,"dns":1,"connect":8,"send":0,"wait":8,"receive":3,"ssl":806},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"purplewojak.trade//secureproxy?s=%2Fjmpd%2F","fqdn":"purplewojak.trade","domain":"purplewojak.trade","tld":"trade"},"ip":{"addr":"172.67.160.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://purplewojak.trade/","date":"2026-01-06T22:08:42.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purplewojak.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 03:28:42 GMT","end":"Mon, 06 Apr 2026 04:27:20 GMT"},"fingerprint":{"sha1":"90:20:F3:6D:43:3F:02:D7:51:5F:94:2D:CE:F2:A7:67:57:97:6C:24","sha256":"A8:14:FD:AB:FD:9F:9C:DD:A9:23:53:B5:7E:89:1A:BF:E9:53:D8:2E:DE:F1:EA:4B:4E:FD:A1:E5:B7:DE:7F:EA"}}},"request":{"raw":"POST //secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: purplewojak.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://purplewojak.trade/\r\ncontent-type: application/json\r\nContent-Length: 2201\r\nOrigin: https://purplewojak.trade\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2201,"data":"{\"route\":\"8XUwkBv9vhPYfVpD1fxb7EC65sUXJdqr\",\"payload\":\"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\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 06 Jan 2026 22:08:42 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncast-mode: default\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"e0-lxqKLSc0KEtl1Ga6fShEDIkM7Wo\"\r\nx-ratelimit-limit: 10000\r\nx-ratelimit-remaining: 9999\r\nx-ratelimit-reset: 1767737382323\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 01/06/2026 22:08:42\r\ncdn-edgestorageid: 879\r\ncdn-requestid: e417b711cd248a82ba7407bed4f56be8\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hht3rLHKeLKmbXFANGGNPoUSiChYdCaARmGGF9hqBb5%2FWzWN8pRs65gWh%2F0vH%2B%2Fw%2FMdXS0gycmTz37E9hLIzxOxGB%2BWtUKsYp5U6oUT0EA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b9e8916fb24b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":224,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"78ec91c3742f226d5914a8442fc1265a","sha1":"971a8a2d2734284b65d466ba7d28440c890ced6a","sha256":"1c8b24f9a4bace186dfc8f6f2facd0842cdc454846f695d6066857192b3f5556","sha512":"b3e3e0aed43f2fa81e4fe27074fdef9f2ef7b28e31a86330c1f258e4f92475d421c00520ddb18e435e5deaa1a1877de08237144a10c01e62f6bd52571fdcb666","ssdeep":"","tlshash":"63d097328888a2806be00e30460f1d0444426c6a61520028310484e4ce992a412f4f69","first_seen":"2026-01-06T22:09:06.690988Z","last_seen":"2026-01-06T22:09:06.690988Z","times_seen":1,"resource_available":false,"data":null}},"time_used":526,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":525,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://purplewojak.trade/","date":"2026-01-06T22:08:38.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:54:11 GMT","end":"Wed, 25 Feb 2026 15:54:10 GMT"},"fingerprint":{"sha1":"43:D3:3F:93:6C:4F:F7:67:58:9D:D5:48:20:4C:74:A2:69:DB:13:9F","sha256":"8C:DB:D2:85:E1:AB:12:7B:1D:5A:65:A7:EC:22:67:6F:B3:A6:65:01:28:29:FA:D2:3B:01:8D:10:7E:4D:09:52"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://purplewojak.trade/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 06 Jan 2026 22:08:39 GMT\r\ndate: Tue, 06 Jan 2026 22:08:39 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-06-24T17:29:23.985543Z","times_seen":31585,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":133,"dns":0,"connect":16,"send":0,"wait":33,"receive":0,"ssl":116},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"purplewojak.trade/","fqdn":"purplewojak.trade","domain":"purplewojak.trade","tld":"trade"},"ip":{"addr":"172.67.160.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-06T22:08:38.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purplewojak.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 03:28:42 GMT","end":"Mon, 06 Apr 2026 04:27:20 GMT"},"fingerprint":{"sha1":"90:20:F3:6D:43:3F:02:D7:51:5F:94:2D:CE:F2:A7:67:57:97:6C:24","sha256":"A8:14:FD:AB:FD:9F:9C:DD:A9:23:53:B5:7E:89:1A:BF:E9:53:D8:2E:DE:F1:EA:4B:4E:FD:A1:E5:B7:DE:7F:EA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: purplewojak.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 06 Jan 2026 22:08:38 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 04:25:33 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B5FEbsDSNXrCQQduld%2F6gg4MLjgAAJDat7TOXo8jxIYJ6Z2WBt%2Fh1YlzDqOEuCAoG6BrSxA1NlruZDXqqj520YxofSdSrHdCdS4WR%2B9wlYRb\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9b9e88ff394edfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9545,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"238826f0841cb5d086dfd87ff4a70df1","sha1":"42fd3674b1fe29352b9c708054e0573e67b1de84","sha256":"306ab4895f4cfca9785944584ac7216fa491da116928b3621fd574cfb6dece85","sha512":"a29ba116694f68631fd99d5b6f0f31700b7509fda277029219cd8799c092fef6aeaa5d0d6efffda4280e81ea6754d77140c59481bd178931b33629114860e8cd","ssdeep":"48:ttTkCElgXvGFluNu5T7q8IoTUsWVqY7eBm2w2yyyyyyyyy+Vw/fN4dI4pCvzeuNl:jpvGFl975zwPyBmpnN4dtpSNSo","tlshash":"6812737529c4627312b381e14a0d779bfea58103e60e928135fe930f9ff6e02ec63991","first_seen":"2026-01-06T22:09:06.686252Z","last_seen":"2026-01-06T22:09:06.686252Z","times_seen":1,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":39,"dns":27,"connect":1,"send":0,"wait":253,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"purplewojak.trade/style.css","fqdn":"purplewojak.trade","domain":"purplewojak.trade","tld":"trade"},"ip":{"addr":"172.67.160.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://purplewojak.trade/","date":"2026-01-06T22:08:38.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purplewojak.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 03:28:42 GMT","end":"Mon, 06 Apr 2026 04:27:20 GMT"},"fingerprint":{"sha1":"90:20:F3:6D:43:3F:02:D7:51:5F:94:2D:CE:F2:A7:67:57:97:6C:24","sha256":"A8:14:FD:AB:FD:9F:9C:DD:A9:23:53:B5:7E:89:1A:BF:E9:53:D8:2E:DE:F1:EA:4B:4E:FD:A1:E5:B7:DE:7F:EA"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: purplewojak.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://purplewojak.trade/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 06 Jan 2026 22:08:38 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 04:25:33 GMT\r\netag: W/\"695c8ebd-1faa\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WozEbL7afd7RUa%2FzM0lNjuKf6OAGoucXpk9Eu%2BrimZBNXLSWxlrkb22vxzGgzONPZAPBHPnP4rDCRJRHE9X72w6qYv0ou6b5AhjiOjoXxQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9b9e8901fa0fb4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8106,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"82c8553bb33a64727b71a846bd7bfde1","sha1":"329c777f74b85838f2fe503c80ffe7488a4c2e08","sha256":"f8e0f09768b04db1dc0e1b088e58932ef3ce96b198be97813f873811976dfbf2","sha512":"9a0d66623128444a29c72f1dc7e296b0994d84718b8354f13b811730a929b5701caa7c7de7d2c6b38ae0c848a2bf8109d0482e2b1f46b2cab33e68ba3214c841","ssdeep":"192:etFYUdaN7YWH+JFcmTPCl7Y5cQ3XkTaDeTFG5Lss7XPK01WUBgv263MMF:etTvFHj3XkTaDkFHZJ","tlshash":"0af1f1876aa71440b81be4986fba8b55625cc047d10fccbe7acc614cdf492e9d2d1f4d","first_seen":"2026-01-06T22:09:06.69319Z","last_seen":"2026-01-06T22:09:06.69319Z","times_seen":1,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"purplewojak.trade/tg.avif","fqdn":"purplewojak.trade","domain":"purplewojak.trade","tld":"trade"},"ip":{"addr":"172.67.160.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://purplewojak.trade/","date":"2026-01-06T22:08:38.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purplewojak.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 03:28:42 GMT","end":"Mon, 06 Apr 2026 04:27:20 GMT"},"fingerprint":{"sha1":"90:20:F3:6D:43:3F:02:D7:51:5F:94:2D:CE:F2:A7:67:57:97:6C:24","sha256":"A8:14:FD:AB:FD:9F:9C:DD:A9:23:53:B5:7E:89:1A:BF:E9:53:D8:2E:DE:F1:EA:4B:4E:FD:A1:E5:B7:DE:7F:EA"}}},"request":{"raw":"GET /tg.avif HTTP/1.1\r\nHost: purplewojak.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://purplewojak.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 06 Jan 2026 22:08:38 GMT\r\ncontent-type: image/avif\r\ncontent-length: 2018\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 04:25:33 GMT\r\netag: \"695c8ebd-7e2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=awrTzLQNWqdf4BqCWiRCBTNpL247d7Ctf%2Bjkc%2FMSLCpFW9eNJlZPUJaTnP7GoVu%2BxecgnDMLTazqq0v5pEm9uPEqpxoE57e1v6NUelSfKA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b9e8901fa13b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2018,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"4f6be30603c45ce840ef50c1e18154b1","sha1":"ea1ec75812cd2115d737ae03201c98381104f2bc","sha256":"9feb5a637a88985d1247cd8176c9b9e76e0c4875def5e1fa092afd5f581ce0b4","sha512":"18b6955b39220caeeed6f2c528b3301c4acfb4fda0c3659a2b301a7579621a2313532af11fc7f78d09a32a8988960f842f1e55c8a2638b1852ef36b9b683adcc","ssdeep":"","tlshash":"c2410a1e37993843d5ea873e0f704a01a3f5e6847faba8600081f9241d37695fc51fd5","first_seen":"2026-01-06T22:09:06.694122Z","last_seen":"2026-01-06T22:09:06.694122Z","times_seen":1,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"purplewojak.trade/tiktok.avif","fqdn":"purplewojak.trade","domain":"purplewojak.trade","tld":"trade"},"ip":{"addr":"172.67.160.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://purplewojak.trade/","date":"2026-01-06T22:08:38.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purplewojak.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 03:28:42 GMT","end":"Mon, 06 Apr 2026 04:27:20 GMT"},"fingerprint":{"sha1":"90:20:F3:6D:43:3F:02:D7:51:5F:94:2D:CE:F2:A7:67:57:97:6C:24","sha256":"A8:14:FD:AB:FD:9F:9C:DD:A9:23:53:B5:7E:89:1A:BF:E9:53:D8:2E:DE:F1:EA:4B:4E:FD:A1:E5:B7:DE:7F:EA"}}},"request":{"raw":"GET /tiktok.avif HTTP/1.1\r\nHost: purplewojak.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://purplewojak.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 06 Jan 2026 22:08:38 GMT\r\ncontent-type: image/avif\r\ncontent-length: 2146\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 04:25:33 GMT\r\netag: \"695c8ebd-862\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OM5kIxs5pEX7ZTtPdAboC6347LA3vYaRhRer%2BTYZDLXiJgP5L3m%2BBlNaiDYcdOSNnz6rB3pUZAu5B72D6ilHOdkem2cOzRP%2F4gJb1XCiSw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b9e89020a16b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2146,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"6be4541629b70eeba7fe4c8d6101ad8e","sha1":"68b58767fbd5c7db88cc8508478fc1d02529eca1","sha256":"43347206b86de3642b3f9349201cbfbdb35818b35b9e5f163f05dff59f0776ea","sha512":"afa0a49d4b2557ffd2b923778885537bf0d0a705b3065b011c3eb669694dff630a5ef6b86d95c5b1709b34a00f522b92fefef867c0d1f2ad4c89cabcb91b0974","ssdeep":"","tlshash":"57412c5533246e2bcdcd0b76b96e9a012624d19cbe3bb9500b063491cc1a2f3c127e88","first_seen":"2026-01-06T22:09:06.695073Z","last_seen":"2026-01-06T22:09:06.695073Z","times_seen":1,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"purplewojak.trade/main.gif","fqdn":"purplewojak.trade","domain":"purplewojak.trade","tld":"trade"},"ip":{"addr":"172.67.160.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://purplewojak.trade/","date":"2026-01-06T22:08:38.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purplewojak.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 03:28:42 GMT","end":"Mon, 06 Apr 2026 04:27:20 GMT"},"fingerprint":{"sha1":"90:20:F3:6D:43:3F:02:D7:51:5F:94:2D:CE:F2:A7:67:57:97:6C:24","sha256":"A8:14:FD:AB:FD:9F:9C:DD:A9:23:53:B5:7E:89:1A:BF:E9:53:D8:2E:DE:F1:EA:4B:4E:FD:A1:E5:B7:DE:7F:EA"}}},"request":{"raw":"GET /main.gif HTTP/1.1\r\nHost: purplewojak.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://purplewojak.trade/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 06 Jan 2026 22:08:38 GMT\r\ncontent-type: image/gif\r\ncontent-length: 4655975\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 04:25:33 GMT\r\netag: \"695c8ebd-470b67\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eAiFkJDr7EVWe%2F%2FGY2dyhkvVGc5ktCnfp9j3NoMDEcC8B%2BbicoR6bvfKjKL0phSPDaYyAo8TzG9bs5sGTG42sIVvrbfN2Tx%2FTGynSxLiKw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b9e89020a17b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4655975,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 900 x 300","md5":"48c2c36ce9ebadc3294d88d8dfe8bfff","sha1":"4ddc74993b75a42f9d2c7dbea6c7339ff4e764a2","sha256":"6f335516aabd52799d0bac2764b483eebc784863a12d6edaff68773c91fca12c","sha512":"ba8b68b11a1050968ed38d2911dac3f0af8ef1f374520f0e5b524dd84b75fee869a630b4e86729aa21bb9569ec33df9735b95e17b3f413c0726ef4e5182781b2","ssdeep":"24576:rzNWptAFus8Q4qZ2VO676QhZLXMNUKkKsp0:ubO6A/kKsp0","tlshash":"e4253345d2f33243621dcc495293db356f17ee339e2692e1deeea5d80213ac18c89bc9","first_seen":"2026-01-06T22:09:06.696169Z","last_seen":"2026-01-06T22:09:06.696169Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1397,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":1164,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"purplewojak.trade/bg.jpg","fqdn":"purplewojak.trade","domain":"purplewojak.trade","tld":"trade"},"ip":{"addr":"172.67.160.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://purplewojak.trade/","date":"2026-01-06T22:08:39.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purplewojak.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 03:28:42 GMT","end":"Mon, 06 Apr 2026 04:27:20 GMT"},"fingerprint":{"sha1":"90:20:F3:6D:43:3F:02:D7:51:5F:94:2D:CE:F2:A7:67:57:97:6C:24","sha256":"A8:14:FD:AB:FD:9F:9C:DD:A9:23:53:B5:7E:89:1A:BF:E9:53:D8:2E:DE:F1:EA:4B:4E:FD:A1:E5:B7:DE:7F:EA"}}},"request":{"raw":"GET /bg.jpg HTTP/1.1\r\nHost: purplewojak.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://purplewojak.trade/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 06 Jan 2026 22:08:39 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 61266\r\ncast-mode: default\r\nlast-modified: Tue, 06 Jan 2026 04:25:33 GMT\r\netag: \"695c8ebd-ef52\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UvMFeeF9OLGbofBlRKzN55zkZkobFYj91MSbkxdURi%2BASgVczm2HCjm1VD88MoowHBu122y6JlpLf97UKfmhzZAbd6BzY8O%2FL8ay6hNdNw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9b9e89068a4fb4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":61266,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 848x497, components 3","md5":"9eeefa695ed4d380d925e2bbf08ac462","sha1":"5f929d1729c1528a73c81f4862930dae88358d89","sha256":"297210e42ccd1713a2ede9c64b27c4577802b7bfa1243fa5eb5060477a2d1939","sha512":"4b39d1266238aba94656ea90b41171d7626ad2fef57dd628c4dbd3f0fe83f6573673ec3086e217ff603b886d07050f0a5674a83fcfc2ca6cc2d609145fa0c3de","ssdeep":"1536:PMB+lXocXhft8LibV2tKLsa74GA3yISjEd0BgycCxPn:EB+RocXhf/bka0vSju0B7hn","tlshash":"ad530243a2c5f779b4aef3715071d5f3bb2505e8bbc0e44f54967889aa2a8cd48ace04","first_seen":"2026-01-06T22:09:06.697105Z","last_seen":"2026-01-06T22:09:06.697105Z","times_seen":1,"resource_available":false,"data":null}},"time_used":453,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":447,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://purplewojak.trade/","date":"2026-01-06T22:08:39.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://purplewojak.trade\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Dec 2025 23:36:38 GMT\r\nexpires: Wed, 30 Dec 2026 23:36:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 599522\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-24T17:16:56.695738Z","times_seen":217900,"resource_available":false,"data":null}},"time_used":1512,"timings":{"blocked":752,"dns":2,"connect":44,"send":0,"wait":8,"receive":3,"ssl":336},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"purplewojak.trade/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fhapi.basic.min.js%3Ft%3D29462288%26u%3DhTlRMW_qqqonDV43GDY5MjU2NDUxMjhjZmYzYzM0MDI3ZTdiZIJvnBo1Dy1DR2rNiA","fqdn":"purplewojak.trade","domain":"purplewojak.trade","tld":"trade"},"ip":{"addr":"172.67.160.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://purplewojak.trade/","date":"2026-01-06T22:08:40.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purplewojak.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 03:28:42 GMT","end":"Mon, 06 Apr 2026 04:27:20 GMT"},"fingerprint":{"sha1":"90:20:F3:6D:43:3F:02:D7:51:5F:94:2D:CE:F2:A7:67:57:97:6C:24","sha256":"A8:14:FD:AB:FD:9F:9C:DD:A9:23:53:B5:7E:89:1A:BF:E9:53:D8:2E:DE:F1:EA:4B:4E:FD:A1:E5:B7:DE:7F:EA"}}},"request":{"raw":"GET /secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fhapi.basic.min.js%3Ft%3D29462288%26u%3DhTlRMW_qqqonDV43GDY5MjU2NDUxMjhjZmYzYzM0MDI3ZTdiZIJvnBo1Dy1DR2rNiA HTTP/1.1\r\nHost: purplewojak.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://purplewojak.trade/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 06 Jan 2026 22:08:41 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncast-mode: default\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\nvary: Accept-Encoding\r\ncache-control: max-age=2592000, must-revalidate\r\netag: W/\"9c80a-go5AMoyo/3QPEJDm9j4XDBWSpiw\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=hapi.basic.min.js\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 01/06/2026 22:08:41\r\ncdn-edgestorageid: 1056\r\ncdn-requestid: e4d35585080d47398fa9a99679322519\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uwlEVzKLF2KlBonSH9oKEWFnONGU%2BTdTM%2FlFCimoFinE6aJnFhrLYhLM%2FLs3OPWVr7rBfzyhHU54pOmTMuXgq09mb3qRcBK6Eafwn%2BF9pQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b9e890c2a83b4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":641034,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c835ce0aa761a791b29ba4c102a85e28","sha1":"828e40328ca8ff740f1090e6f63e170c1592a62c","sha256":"4ee6631554867dc1bfadbfe5f4b4ebf4cec5164ba142f8db92f840c2028496cf","sha512":"49cefc3ca9614cebafe201eef12b5cdebcdd19da6ab30f530d7a81a8ef91fca5f02eb63108b8056c2dbd4c22b8b337aae939a712f4a876bdeef21a1e2a9f3225","ssdeep":"6144:9ujB8gltIeTM5/S8g6zRhNgDzQebuazBzqXQPkBAUvVdZcml4L:ihltVM/g6ZszQeqazNqXQcBvK","tlshash":"29d4bcec970a167788cb97b6423363afef884d1a236b3c406ec19cd1574a74e53ea15c","first_seen":"2026-01-01T19:22:06.925398Z","last_seen":"2026-03-30T11:52:16.142566Z","times_seen":405,"resource_available":true,"data":null}},"time_used":1338,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1161,"receive":177,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"purplewojak.trade/secureproxy?e=ping_proxy","fqdn":"purplewojak.trade","domain":"purplewojak.trade","tld":"trade"},"ip":{"addr":"172.67.160.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://purplewojak.trade/","date":"2026-01-06T22:08:39.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purplewojak.trade","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 03:28:42 GMT","end":"Mon, 06 Apr 2026 04:27:20 GMT"},"fingerprint":{"sha1":"90:20:F3:6D:43:3F:02:D7:51:5F:94:2D:CE:F2:A7:67:57:97:6C:24","sha256":"A8:14:FD:AB:FD:9F:9C:DD:A9:23:53:B5:7E:89:1A:BF:E9:53:D8:2E:DE:F1:EA:4B:4E:FD:A1:E5:B7:DE:7F:EA"}}},"request":{"raw":"GET /secureproxy?e=ping_proxy HTTP/1.1\r\nHost: purplewojak.trade\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://purplewojak.trade/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 06 Jan 2026 22:08:39 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: accept-encoding\r\ncast-mode: default\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nlast-modified: Tue, 06 Jan 2026 22:08:39 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EjaGvSNziMwlHT3hfiQRM1k1d0Vx8IP56NH22LN51KF7NutPbQ7l9Qrlde3d3jOZFTNelXvEP%2FZnT%2FXWqdnVlbAdCG6eB0WDYyaDFh9BWg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9b9e89068a4eb4ee-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"6fdb087aa3fbfbcb8287a593a0919e61","sha1":"0e514a0662bcb69dc863953d1ce26e3d40e81a87","sha256":"9795c5ff8937f23526ccb207a5684c1fc94a7854e19c021b39d944e51f5baef2","sha512":"be5457d14c930b51b47ab152850c1ceaafe6ef88c8671b48164abbc83410b0c07a1e178540f6cdeac5f2672cadb1d1cbbb3434b3e39bc2c50c4646a2bae57437","ssdeep":"","tlshash":"fe300000300000000000000c0000000000000000000000000000000000300000000000","first_seen":"2023-04-12T09:14:15Z","last_seen":"2026-06-24T14:31:52.085873Z","times_seen":8847,"resource_available":true,"data":null}},"time_used":450,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":449,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
