{"report_id":"959bd145-6a61-4d41-b8f7-ff9bd764609f","version":0,"status":"done","tags":[],"date":"2026-08-31T14:51:00Z","url":{"schema":"https","addr":"darkweb.wtf/?catharsis","fqdn":"darkweb.wtf","domain":"darkweb.wtf","tld":"wtf"},"ip":{"addr":"185.247.225.40","port":0,"asn":200651,"as":"FlokiNET ehf","country":"Romania","country_code":"RO"},"final":{"url":{"schema":"https","addr":"darkweb.wtf/?catharsis","fqdn":"darkweb.wtf","domain":"darkweb.wtf","tld":"wtf"},"title":"Catharsis Market","dom":{"size":10621,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (341)","md5":"4e05ebc52640bef9b6f0cc6193812712","sha1":"fa848b28eec4601c81c4c44a9f99196ff4706578","sha256":"faa23812e33c8d6b952520371deecbf2ea93f96d5d29b25a963a9d11cba0d93a","sha512":"88ce0b8151a106454771c5e10362597dc884645d007a113acdbeca32db8fc013a7d07860e2e62e43aa87bb6ad60c34f0c6024474f34258518e6e7e000a8c2177","ssdeep":"192:lz+MifDYY2RtB4WCeqc9CqA8EJsk45wLeE9MgYPzDsBfB:l0DYY2RhCu9E8gsk395YrIj","tlshash":"4a22b54b1da95b3401016391ff39aa5ddb07901fd6ec6884b4dd80287fe2de14937b6b","dom_hash":"domhash9309acda5a0c9aa727d3fc69a0426a1c","first_seen":"2026-08-31T14:51:03.888492Z","last_seen":"2026-08-31T14:51:03.888492Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"darkweb.wtf/?catharsis","fqdn":"darkweb.wtf","domain":"darkweb.wtf","tld":"wtf"},"ip":{"addr":"185.247.225.40","port":0,"asn":200651,"as":"FlokiNET ehf","country":"Romania","country_code":"RO"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-05T14:51:00Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"darkweb.wtf","ip":{"addr":"185.247.225.40","port":443,"asn":200651,"as":"FlokiNET ehf","country":"Romania","country_code":"RO"},"domain_registered":"2020-08-18","domain_rank":6802698,"first_seen":"2026-08-31T14:51:01.273847Z","last_seen":"2026-08-31T14:51:01.273847Z","alert_count":0,"request_count":14,"received_data":161061,"sent_data":7347,"comment":"","tags":null,"fingerprints":[{"name":"PHP:7.2.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fathom","description":"Fathom is easy-yet-powerful website analytics that protects digital privacy.","website":"https://usefathom.com","common_platform_enumeration":"","icon":"Fathom.svg","categories":["Analytics"]},{"name":"Modernizr","description":"Modernizr is a JavaScript library that detects the features available in a user's browser.","website":"https://modernizr.com","common_platform_enumeration":"","icon":"Modernizr.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.usefathom.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2018-04-15","domain_rank":129518,"first_seen":"2018-08-31T10:04:23Z","last_seen":"2026-08-28T15:28:45.624576Z","alert_count":0,"request_count":2,"received_data":8220,"sent_data":1053,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"darkweb.wtf/matomo.php","fqdn":"darkweb.wtf","domain":"darkweb.wtf","tld":"wtf"},"ip":{"addr":"185.247.225.40","port":443,"asn":200651,"as":"FlokiNET ehf","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b32d11120a738ec529e5d64979e9d10","sha1":"deedcd7014f47a999da6c19786713cd7a236040a","sha256":"1762dd6a64fcd59421610b68625258f9224a1f278159c4d99282adb631470465","sha512":"258a126ba730a9f57d0adef037bdf90f349265128ceb8d7d9e5c7754eb14751895dffb3220bc1da307021ea8c37c45b837064c89731313acf22a3245b3812452","ssdeep":"1536:ATgnSINAJrRJqerEKlFXhuXEjmbMNfwS9h2BLy1z71B8I6fJIKIQaFLa:AT+Z2fuqXYy1PGJ9d5","tlshash":"3963d8ce72c2753a4bcb6075a43f114ab27e9caa1448c4b4e62ac4f6383491d657bf7c","size":67972,"data":"","first_seen":"2025-09-25T22:45:46.07207Z","last_seen":"2026-08-31T15:19:01.041853Z","times_seen":18466,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"darkweb.wtf/?catharsis","fqdn":"darkweb.wtf","domain":"darkweb.wtf","tld":"wtf"},"ip":{"addr":"185.247.225.40","port":443,"asn":200651,"as":"FlokiNET ehf","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":true,"md5":"69f51ce975f51d2dc038e8fc755b005c","sha1":"2b4e444714861f8373ff21a496eb3927ad757991","sha256":"52ec3b229892b5d9e5638013cf6939d2d02538769bf1cd9edb2430dd60b97210","sha512":"3e89ed66b14bb90c4e5afd79883401edf9e7d3dc47bfff5d0eccaf8ddef026cad677c4aaa1f4155320d2f4c7c05fb0cc45ba29f23664bedb9f38ece8733245ce","ssdeep":"","tlshash":"26f0dc099c8f0d7e5123216f2ebe8c1c72fb381a8060c04029c09435af75ec6810038c","size":445,"data":"","first_seen":"2026-08-31T14:51:03.91371Z","last_seen":"2026-08-31T14:51:03.91371Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"darkweb.wtf/themes/default/js/modernizr-3.3.1-custom.min.js","fqdn":"darkweb.wtf","domain":"darkweb.wtf","tld":"wtf"},"ip":{"addr":"185.247.225.40","port":443,"asn":200651,"as":"FlokiNET ehf","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"09cdab03a6ba8d0dbb5140474c8b0d6b","sha1":"dd78c580a2ba76f4e464eb40295533f72088bca4","sha256":"57cfbb9312a18810d1a7dc1341bf058d5b3b90039cc38d53be074d07f219e2a6","sha512":"62edb2cbc461551ca7654085f104845359c357cde6f1f89f2068cf8ed0f6bbf1aa767aabd846f27427c8a07ea27e1afcc83369d79fdfcbd53dea0b00d17ad061","ssdeep":"96:4iqW4y25L5U9ozWkIjGi7a5QzLTcIEa8Y1Uo0F5k2i:BF2hqKWjGBq/cg8Y1Uo0Fi2i","tlshash":"3391c7da73e7b162439a31a514bf121cb07e8d1826888444f11da5bd797c9e5137be3c","size":4577,"data":"","first_seen":"2026-01-05T15:23:34.302363Z","last_seen":"2026-08-31T14:51:03.904466Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"darkweb.wtf/themes/default/js/utils.js","fqdn":"darkweb.wtf","domain":"darkweb.wtf","tld":"wtf"},"ip":{"addr":"185.247.225.40","port":443,"asn":200651,"as":"FlokiNET ehf","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"e9f8be6c86829003318477b65330a900","sha1":"5da1aace00bc5de5759be7399170bfcaebdfe9df","sha256":"b1862be2e3e6cc5f5709625c3ec931ebb88dffc923293dcfbb083afa5bc24217","sha512":"575dd8fae381d1afaa0a190da75af6ee4dc6302774a8595c63e77a159818185e0bb0f0fcef671fa4b0ea6b0a9ec473bc749edf7cf1504ed8ed5880d36cb6eec7","ssdeep":"96:/eefko/HGiNUOUDQxOwqjYv2jbAjy4JmhyCflHGiiOhQ1mKOYvrO0ZxkIODRijDP:/eefkMBX9qcv2EyvBVvKRvr9+IoRURQ8","tlshash":"e681d14a306315b14b7b9a7f8a4f939c32e54417144a942038ddd6cd9f70c2677e5fe8","size":4168,"data":"","first_seen":"2026-01-05T15:23:34.289084Z","last_seen":"2026-08-31T14:51:03.90911Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"darkweb.wtf/themes/default/js/pico.js","fqdn":"darkweb.wtf","domain":"darkweb.wtf","tld":"wtf"},"ip":{"addr":"185.247.225.40","port":443,"asn":200651,"as":"FlokiNET ehf","country":"Romania","country_code":"RO"},"introduction_type":"scriptElement","is_inline":false,"md5":"bfa645ad20e1396d1bc6b8f6ac534513","sha1":"b5c0bcfdac1d878a5ad2d69c9fba6b1e3ffba528","sha256":"1849b5f4d8f24cd59258f880c40a327d38aa018fa6a91578f5141b4a757f57b4","sha512":"fd801c27ded062fae682c93de07f707742e692b1f89ff1091c4bf2d5b9e5a20dafc46831646047e1d32e53e6812dcead594d15b3138b05da250b3f4b5880b317","ssdeep":"","tlshash":"7c41de2a3bb2783399c7b1bd3bdf656837210087aa05e911788d9f184f10d5609f6fa8","size":2348,"data":"","first_seen":"2026-08-31T14:51:03.895034Z","last_seen":"2026-08-31T14:51:03.895034Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.usefathom.com/script.js","fqdn":"cdn.usefathom.com","domain":"usefathom.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"86ed8c90a4baf44614fb2e9dd6a38227","sha1":"54a05386810738398e4bad2a235deb30691fa70c","sha256":"ccf2b4e65ead8bc452ba86f85c89626280ab9fa7b5c4af246f2c42dede516252","sha512":"38d0c40a391ec4d3739d002458bedb1e8ba453150b244ca942810979d30320799147ec00f998fed974bda5300b87911673f440869e42ce61adfe2be4c5e774f3","ssdeep":"192:G3ryARzF30nMZmd1A/sdx3ebAfMy/TyZew:G3ryARzF30nAmDA/sreKMy/WZew","tlshash":"ebe124ea540166305ae3039be93bf7de3526327a748548256c0ddcc0981df2f4b3aada","size":6981,"data":"","first_seen":"2026-08-21T22:03:38.660609Z","last_seen":"2026-08-31T14:51:03.908507Z","times_seen":103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"darkweb.wtf/?catharsis","fqdn":"darkweb.wtf","domain":"darkweb.wtf","tld":"wtf"},"ip":{"addr":"185.247.225.40","port":443,"asn":200651,"as":"FlokiNET ehf","country":"Romania","country_code":"RO"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T14:50:30.590Z","timestamp":1788187830590,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.freedom.darkweb.wtf","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 17:35:03 GMT","end":"Sat, 17 Oct 2026 17:35:02 GMT"},"fingerprint":{"sha1":"87:52:28:46:CD:F4:2B:35:77:0D:BC:2F:8E:4F:83:27:5B:FE:85:C9","sha256":"DE:5C:73:79:8C:F3:24:6A:37:35:C8:0E:AB:BE:67:DA:F0:CA:5B:02:F5:38:FF:B6:C2:8E:3B:85:55:E5:4E:71"}}},"request":{"raw":"GET /?catharsis HTTP/1.1\r\nHost: darkweb.wtf\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 14:50:31 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/7.2.34\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding, Accept-Encoding\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.2.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fathom","description":"Fathom is easy-yet-powerful website analytics that protects digital privacy.","website":"https://usefathom.com","common_platform_enumeration":"","icon":"Fathom.svg","categories":["Analytics"]},{"name":"Modernizr","description":"Modernizr is a JavaScript library that detects the features available in a user's browser.","website":"https://modernizr.com","common_platform_enumeration":"","icon":"Modernizr.svg","categories":["JavaScript libraries"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10557,"size_decoded":3503,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (341)","md5":"47975c3ac67aae8adaf184cdb569bedc","sha1":"90b284b2fca0fea9b6e13070550366a61ba60fcd","sha256":"29b6fa25c4bccf44bd16ad29e696fec4cd467a2ff36bc56ba870a6ef06842156","sha512":"d4a52da6ae040a56ddc0031e4fd4a30f6e8323eece5c673526215f9157f4355ea9837d69aa58eb326db6698044da68380d9ea05dc9b21e51258bde61e046296d","ssdeep":"192:e+Ui+DYYcOtB4WCeqc9CqA8EJsk45wLeE9MgYPzDsBf9D:uDYYcOhCu9E8gsk395YrIH","tlshash":"7522c54b1da95b3401416391ff39aa5dcb07901fd6ec6884b49d8028bfe2de14937bab","first_seen":"2026-08-31T14:51:03.891363Z","last_seen":"2026-08-31T14:51:03.891363Z","times_seen":1,"resource_available":false,"data":null}},"time_used":622,"timings":{"blocked":-1,"dns":380,"connect":54,"send":0,"wait":54,"receive":0,"ssl":134},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"darkweb.wtf/themes/default/css/style.css","fqdn":"darkweb.wtf","domain":"darkweb.wtf","tld":"wtf"},"ip":{"addr":"185.247.225.40","port":443,"asn":200651,"as":"FlokiNET ehf","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://darkweb.wtf/?catharsis","date":"2026-08-31T14:50:31.415Z","timestamp":1788187831415,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.freedom.darkweb.wtf","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 17:35:03 GMT","end":"Sat, 17 Oct 2026 17:35:02 GMT"},"fingerprint":{"sha1":"87:52:28:46:CD:F4:2B:35:77:0D:BC:2F:8E:4F:83:27:5B:FE:85:C9","sha256":"DE:5C:73:79:8C:F3:24:6A:37:35:C8:0E:AB:BE:67:DA:F0:CA:5B:02:F5:38:FF:B6:C2:8E:3B:85:55:E5:4E:71"}}},"request":{"raw":"GET /themes/default/css/style.css HTTP/1.1\r\nHost: darkweb.wtf\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://darkweb.wtf/?catharsis\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 14:50:31 GMT\r\ncontent-type: text/css\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nlast-modified: Thu, 20 Aug 2020 08:35:11 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8882,"size_decoded":2867,"mime_type":"text/css","magic":"ASCII text","md5":"dde79ecadcf3d7715bf724b49c979d23","sha1":"b5b29ee8c8b0f6117e5a22e35d2925b05e2d02f5","sha256":"a37d2ed5f5cfc6522dc5afabe94c789c94b874a0921a0d508d9bfec300a1cbff","sha512":"528a1c50659f6485e1eb0deff84a4faa861fd7eb9f8103f75a02a5ff931551d15f90b022ac2c7279ebe4fe356a88ea3e77beabdff964802dcad0784f26d7d60e","ssdeep":"192:oz1ysNRRUmVJ11IPkZfM1kwXMMYnSqc5ul9pQx0a8qPiDAElOAP1VPH:oz1jhHNSqcY9K8q6D9VVPH","tlshash":"fc0272126b632a82b0128574bfbbea8073084013956fd9bebb4d6250df4f59460b1bde","first_seen":"2026-08-31T14:51:03.893502Z","last_seen":"2026-08-31T14:51:03.893502Z","times_seen":1,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"darkweb.wtf/themes/default/js/pico.js","fqdn":"darkweb.wtf","domain":"darkweb.wtf","tld":"wtf"},"ip":{"addr":"185.247.225.40","port":443,"asn":200651,"as":"FlokiNET ehf","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://darkweb.wtf/?catharsis","date":"2026-08-31T14:50:31.603Z","timestamp":1788187831603,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.freedom.darkweb.wtf","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 17:35:03 GMT","end":"Sat, 17 Oct 2026 17:35:02 GMT"},"fingerprint":{"sha1":"87:52:28:46:CD:F4:2B:35:77:0D:BC:2F:8E:4F:83:27:5B:FE:85:C9","sha256":"DE:5C:73:79:8C:F3:24:6A:37:35:C8:0E:AB:BE:67:DA:F0:CA:5B:02:F5:38:FF:B6:C2:8E:3B:85:55:E5:4E:71"}}},"request":{"raw":"GET /themes/default/js/pico.js HTTP/1.1\r\nHost: darkweb.wtf\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://darkweb.wtf/?catharsis\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 14:50:31 GMT\r\ncontent-type: application/javascript\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nlast-modified: Thu, 20 Aug 2020 08:35:11 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2348,"size_decoded":1085,"mime_type":"application/javascript","magic":"C source, ASCII text","md5":"bfa645ad20e1396d1bc6b8f6ac534513","sha1":"b5c0bcfdac1d878a5ad2d69c9fba6b1e3ffba528","sha256":"1849b5f4d8f24cd59258f880c40a327d38aa018fa6a91578f5141b4a757f57b4","sha512":"fd801c27ded062fae682c93de07f707742e692b1f89ff1091c4bf2d5b9e5a20dafc46831646047e1d32e53e6812dcead594d15b3138b05da250b3f4b5880b317","ssdeep":"","tlshash":"7c41de2a3bb2783399c7b1bd3bdf656837210087aa05e911788d9f184f10d5609f6fa8","first_seen":"2026-08-31T14:51:03.895034Z","last_seen":"2026-08-31T14:51:03.895034Z","times_seen":1,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"darkweb.wtf/matomo.php","fqdn":"darkweb.wtf","domain":"darkweb.wtf","tld":"wtf"},"ip":{"addr":"185.247.225.40","port":443,"asn":200651,"as":"FlokiNET ehf","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://darkweb.wtf/?catharsis","date":"2026-08-31T14:50:31.635Z","timestamp":1788187831635,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.freedom.darkweb.wtf","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 17:35:03 GMT","end":"Sat, 17 Oct 2026 17:35:02 GMT"},"fingerprint":{"sha1":"87:52:28:46:CD:F4:2B:35:77:0D:BC:2F:8E:4F:83:27:5B:FE:85:C9","sha256":"DE:5C:73:79:8C:F3:24:6A:37:35:C8:0E:AB:BE:67:DA:F0:CA:5B:02:F5:38:FF:B6:C2:8E:3B:85:55:E5:4E:71"}}},"request":{"raw":"GET /matomo.php HTTP/1.1\r\nHost: darkweb.wtf\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://darkweb.wtf/?catharsis\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 14:50:31 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: PHP/7.2.34\r\nvary: Accept-Encoding, Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nlast-modified: Mon, 31 Aug 2026 14:48:00 GMT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:7.2.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":67972,"size_decoded":21623,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2923)","md5":"4b32d11120a738ec529e5d64979e9d10","sha1":"deedcd7014f47a999da6c19786713cd7a236040a","sha256":"1762dd6a64fcd59421610b68625258f9224a1f278159c4d99282adb631470465","sha512":"258a126ba730a9f57d0adef037bdf90f349265128ceb8d7d9e5c7754eb14751895dffb3220bc1da307021ea8c37c45b837064c89731313acf22a3245b3812452","ssdeep":"1536:ATgnSINAJrRJqerEKlFXhuXEjmbMNfwS9h2BLy1z71B8I6fJIKIQaFLa:AT+Z2fuqXYy1PGJ9d5","tlshash":"3963d8ce72c2753a4bcb6075a43f114ab27e9caa1448c4b4e62ac4f6383491d657bf7c","first_seen":"2025-09-25T22:45:46.07207Z","last_seen":"2026-08-31T15:19:01.041853Z","times_seen":18466,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"darkweb.wtf/favicon-16x16.png","fqdn":"darkweb.wtf","domain":"darkweb.wtf","tld":"wtf"},"ip":{"addr":"185.247.225.40","port":443,"asn":200651,"as":"FlokiNET ehf","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://darkweb.wtf/?catharsis","date":"2026-08-31T14:50:31.919Z","timestamp":1788187831919,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.freedom.darkweb.wtf","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 17:35:03 GMT","end":"Sat, 17 Oct 2026 17:35:02 GMT"},"fingerprint":{"sha1":"87:52:28:46:CD:F4:2B:35:77:0D:BC:2F:8E:4F:83:27:5B:FE:85:C9","sha256":"DE:5C:73:79:8C:F3:24:6A:37:35:C8:0E:AB:BE:67:DA:F0:CA:5B:02:F5:38:FF:B6:C2:8E:3B:85:55:E5:4E:71"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: darkweb.wtf\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://darkweb.wtf/?catharsis\r\nCookie: _pk_id.7.fa25=42b39c80715eeb51.1788187832.; _pk_ses.7.fa25=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 1399\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nlast-modified: Fri, 28 Aug 2020 07:16:28 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1399,"size_decoded":1736,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"243b3365ddd9048c2532b20b23a68201","sha1":"1d2feb89abf65f18d97d17290242fdd052c45690","sha256":"352608ae655f373893728aef7bea46d532b14a8cafabe761011e9e8bd1b1f74a","sha512":"b241c463ca71bcc694a8661a0e0e135d038d8e72a577491314163a7a902ea602aec803a42c2d9bed4f5beb936a431a661bea19111380a77de433efe0619b04cc","ssdeep":"","tlshash":"e5211fd1f533f01ec763d576ae2500c0ab3e2a5b494946aef90e8019184d63827e4e45","first_seen":"2026-08-31T14:51:03.897304Z","last_seen":"2026-08-31T14:51:03.897304Z","times_seen":1,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"darkweb.wtf/themes/default/css/droidsans.css","fqdn":"darkweb.wtf","domain":"darkweb.wtf","tld":"wtf"},"ip":{"addr":"185.247.225.40","port":443,"asn":200651,"as":"FlokiNET ehf","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://darkweb.wtf/?catharsis","date":"2026-08-31T14:50:31.416Z","timestamp":1788187831416,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.freedom.darkweb.wtf","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 17:35:03 GMT","end":"Sat, 17 Oct 2026 17:35:02 GMT"},"fingerprint":{"sha1":"87:52:28:46:CD:F4:2B:35:77:0D:BC:2F:8E:4F:83:27:5B:FE:85:C9","sha256":"DE:5C:73:79:8C:F3:24:6A:37:35:C8:0E:AB:BE:67:DA:F0:CA:5B:02:F5:38:FF:B6:C2:8E:3B:85:55:E5:4E:71"}}},"request":{"raw":"GET /themes/default/css/droidsans.css HTTP/1.1\r\nHost: darkweb.wtf\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://darkweb.wtf/?catharsis\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 14:50:31 GMT\r\ncontent-type: text/css\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nlast-modified: Thu, 20 Aug 2020 08:35:10 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1920,"size_decoded":668,"mime_type":"text/css","magic":"ASCII text","md5":"9b158a83ee12bec3c4e3b36e3b6f892f","sha1":"cded7d5e8ebe11fa70b25581844b2da149c9f733","sha256":"ce8fe7250302ecc06c65d8df6dbbc49c216580cc766e9ac4e86afd0ebecf7a3c","sha512":"cd627df7b1b9ea6e97b189cb307d54d8f7c499a0b4d7815b1d0a52fff9a86f12d31393470e3465128f9cd3199c4c9b01fc2d9300ab4bc818a36ef2c358f7d1cd","ssdeep":"","tlshash":"3f4182b14fee3027d74b280af6d74b801f95187e7828a54b721e12614f7da8c91b1b9e","first_seen":"2026-01-05T15:23:34.301129Z","last_seen":"2026-08-31T14:51:03.898948Z","times_seen":24,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"darkweb.wtf/themes/default/img/onion.png","fqdn":"darkweb.wtf","domain":"darkweb.wtf","tld":"wtf"},"ip":{"addr":"185.247.225.40","port":443,"asn":200651,"as":"FlokiNET ehf","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://darkweb.wtf/?catharsis","date":"2026-08-31T14:50:31.616Z","timestamp":1788187831616,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.freedom.darkweb.wtf","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 17:35:03 GMT","end":"Sat, 17 Oct 2026 17:35:02 GMT"},"fingerprint":{"sha1":"87:52:28:46:CD:F4:2B:35:77:0D:BC:2F:8E:4F:83:27:5B:FE:85:C9","sha256":"DE:5C:73:79:8C:F3:24:6A:37:35:C8:0E:AB:BE:67:DA:F0:CA:5B:02:F5:38:FF:B6:C2:8E:3B:85:55:E5:4E:71"}}},"request":{"raw":"GET /themes/default/img/onion.png HTTP/1.1\r\nHost: darkweb.wtf\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://darkweb.wtf/?catharsis\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 2829\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nlast-modified: Fri, 21 Aug 2020 07:23:44 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2829,"size_decoded":3166,"mime_type":"image/png","magic":"PNG image data, 77 x 77, 8-bit/color RGBA, non-interlaced","md5":"baa5fb8227f744f306c23ba8dc6a9373","sha1":"3c29d480d40ab543108764f6c1f2b9e33454eb86","sha256":"afc276825afaea3d81c598f70c27f55531047afccfed096b9f9daed67a994145","sha512":"445c1885105bd77eac7d949083d38875906cdf14bbb7d4daee31fd095ac43d221749cb90b11769810c5e322026d507f8453f75bed14c7e88fbefc36b46843593","ssdeep":"","tlshash":"fb514baa5c120472030ae65514df0ca2aa2ed30bbfd9961cb24965d79b00c8ebf89286","first_seen":"2026-08-31T14:51:03.901192Z","last_seen":"2026-08-31T14:51:03.901192Z","times_seen":1,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"darkweb.wtf/android-icon-192x192.png","fqdn":"darkweb.wtf","domain":"darkweb.wtf","tld":"wtf"},"ip":{"addr":"185.247.225.40","port":443,"asn":200651,"as":"FlokiNET ehf","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://darkweb.wtf/?catharsis","date":"2026-08-31T14:50:31.918Z","timestamp":1788187831918,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.freedom.darkweb.wtf","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 17:35:03 GMT","end":"Sat, 17 Oct 2026 17:35:02 GMT"},"fingerprint":{"sha1":"87:52:28:46:CD:F4:2B:35:77:0D:BC:2F:8E:4F:83:27:5B:FE:85:C9","sha256":"DE:5C:73:79:8C:F3:24:6A:37:35:C8:0E:AB:BE:67:DA:F0:CA:5B:02:F5:38:FF:B6:C2:8E:3B:85:55:E5:4E:71"}}},"request":{"raw":"GET /android-icon-192x192.png HTTP/1.1\r\nHost: darkweb.wtf\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://darkweb.wtf/?catharsis\r\nCookie: _pk_id.7.fa25=42b39c80715eeb51.1788187832.; _pk_ses.7.fa25=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 14:50:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 12654\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nlast-modified: Fri, 28 Aug 2020 07:16:25 GMT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12654,"size_decoded":12992,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"18840f7337517a2bb7ed669de1643bae","sha1":"ec9d3b3b1e95504ed798de4b1cf83587049f5686","sha256":"24c5735b535803b0923b13f78be814e44273e9c9de2165b022ab9c783b16e8f3","sha512":"97e6f33583972e80b7c83d15960d21d3386cd33191d4986df12864e96cffa7c5caa2fb3c48146b52d42e9a993b159b3569465b6ef1df34cc67fab0ebfea39c99","ssdeep":"192:bo/z+5vhidCGyw48ZMPIPNRN7nZadOByB5PQPHsHXuNurv6v53Wn6IW:boK5pit48SgPNRfadOByB1o6G5qtW","tlshash":"c742c00e416d5cf3cbbb99b1ebf6a643c50e60078182e971b5c664702b0928f98db761","first_seen":"2026-08-31T14:51:03.902964Z","last_seen":"2026-08-31T14:51:03.902964Z","times_seen":1,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"darkweb.wtf/themes/default/js/modernizr-3.3.1-custom.min.js","fqdn":"darkweb.wtf","domain":"darkweb.wtf","tld":"wtf"},"ip":{"addr":"185.247.225.40","port":443,"asn":200651,"as":"FlokiNET ehf","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://darkweb.wtf/?catharsis","date":"2026-08-31T14:50:31.600Z","timestamp":1788187831600,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.freedom.darkweb.wtf","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 17:35:03 GMT","end":"Sat, 17 Oct 2026 17:35:02 GMT"},"fingerprint":{"sha1":"87:52:28:46:CD:F4:2B:35:77:0D:BC:2F:8E:4F:83:27:5B:FE:85:C9","sha256":"DE:5C:73:79:8C:F3:24:6A:37:35:C8:0E:AB:BE:67:DA:F0:CA:5B:02:F5:38:FF:B6:C2:8E:3B:85:55:E5:4E:71"}}},"request":{"raw":"GET /themes/default/js/modernizr-3.3.1-custom.min.js HTTP/1.1\r\nHost: darkweb.wtf\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://darkweb.wtf/?catharsis\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 14:50:31 GMT\r\ncontent-type: application/javascript\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nlast-modified: Thu, 20 Aug 2020 08:35:11 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4577,"size_decoded":2275,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4446)","md5":"09cdab03a6ba8d0dbb5140474c8b0d6b","sha1":"dd78c580a2ba76f4e464eb40295533f72088bca4","sha256":"57cfbb9312a18810d1a7dc1341bf058d5b3b90039cc38d53be074d07f219e2a6","sha512":"62edb2cbc461551ca7654085f104845359c357cde6f1f89f2068cf8ed0f6bbf1aa767aabd846f27427c8a07ea27e1afcc83369d79fdfcbd53dea0b00d17ad061","ssdeep":"96:4iqW4y25L5U9ozWkIjGi7a5QzLTcIEa8Y1Uo0F5k2i:BF2hqKWjGBq/cg8Y1Uo0Fi2i","tlshash":"3391c7da73e7b162439a31a514bf121cb07e8d1826888444f11da5bd797c9e5137be3c","first_seen":"2026-01-05T15:23:34.302363Z","last_seen":"2026-08-31T14:51:03.904466Z","times_seen":24,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.usefathom.com/?h=https%3A%2F%2Fdarkweb.wtf\u0026p=%2F\u0026r=\u0026sid=JLUTTLVP\u0026qs=%7B%7D\u0026cid=35540404","fqdn":"cdn.usefathom.com","domain":"usefathom.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://darkweb.wtf/?catharsis","date":"2026-08-31T14:50:31.729Z","timestamp":1788187831729,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.usefathom.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 00:02:36 GMT","end":"Mon, 02 Nov 2026 00:02:35 GMT"},"fingerprint":{"sha1":"23:DF:F6:FD:CA:6B:31:0D:A1:B0:3A:C6:6C:D7:68:CD:D7:48:C0:5B","sha256":"1F:EB:CF:2E:8C:6E:4C:36:AA:4E:12:79:3E:71:B2:F0:63:E4:BB:AE:8A:4A:97:7B:8E:5D:87:78:93:10:07:86"}}},"request":{"raw":"GET /?h=https%3A%2F%2Fdarkweb.wtf\u0026p=%2F\u0026r=\u0026sid=JLUTTLVP\u0026qs=%7B%7D\u0026cid=35540404 HTTP/1.1\r\nHost: cdn.usefathom.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://darkweb.wtf/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 14:50:31 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 506217\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0\r\npragma: no-cache\r\nx-vapor-base64-encode: True\r\ntk: N\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/31/2026 14:50:31\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 79c28b829c4e9ef69f7979df5846eed6\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":594,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"57f187c7a868faeac558007a8eb6cb2e","sha1":"11ab10ab109fdb53d91d444ac781101f5a6360c6","sha256":"aa03dc59bdca72631d2301e4297cfa030bd31b907dc138e7b973d12311c90a22","sha512":"3844065e1dd778a05e8cc39901fbf3191ded380d594359df137901ec56ca52e03d57eb60acc2421a0ee74f0733bbb5d781b7744685c26fb013a236f49b02fed3","ssdeep":"","tlshash":"5f900407c1500051c151c4310444cf1017407570010d030d50dc1055dc1715d0d01100","first_seen":"2023-04-07T09:22:11Z","last_seen":"2026-08-31T17:44:16.834549Z","times_seen":70436,"resource_available":true,"data":null}},"time_used":234,"timings":{"blocked":0,"dns":93,"connect":1,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"darkweb.wtf/themes/default/css/fontello.css","fqdn":"darkweb.wtf","domain":"darkweb.wtf","tld":"wtf"},"ip":{"addr":"185.247.225.40","port":443,"asn":200651,"as":"FlokiNET ehf","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://darkweb.wtf/?catharsis","date":"2026-08-31T14:50:31.417Z","timestamp":1788187831417,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.freedom.darkweb.wtf","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 17:35:03 GMT","end":"Sat, 17 Oct 2026 17:35:02 GMT"},"fingerprint":{"sha1":"87:52:28:46:CD:F4:2B:35:77:0D:BC:2F:8E:4F:83:27:5B:FE:85:C9","sha256":"DE:5C:73:79:8C:F3:24:6A:37:35:C8:0E:AB:BE:67:DA:F0:CA:5B:02:F5:38:FF:B6:C2:8E:3B:85:55:E5:4E:71"}}},"request":{"raw":"GET /themes/default/css/fontello.css HTTP/1.1\r\nHost: darkweb.wtf\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://darkweb.wtf/?catharsis\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 14:50:31 GMT\r\ncontent-type: text/css\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nlast-modified: Thu, 20 Aug 2020 08:35:10 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2022,"size_decoded":1153,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"422e789e898b60db0e377689483db2ce","sha1":"bdc4d9548113605f34c3725313aef5f322cc3cd5","sha256":"f3ddbb1539b0f69955771fe4e26e72cd3deee6b9e5a65e15db142b77876f2567","sha512":"4adc4a1d32af9a2647de7f8178d422a99441a025564cb9aa88a9758e055837e30492304f848c8e6e96732dbf7e4aad13af866613668c0b894909a400f66c6181","ssdeep":"","tlshash":"e44110e98fd6208217960c4f33cb62111b59f01b2a45d893719e365c8ffdb9912e17dd","first_seen":"2026-01-05T15:23:34.297502Z","last_seen":"2026-08-31T14:51:03.906964Z","times_seen":24,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.usefathom.com/script.js","fqdn":"cdn.usefathom.com","domain":"usefathom.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://darkweb.wtf/?catharsis","date":"2026-08-31T14:50:31.597Z","timestamp":1788187831597,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.usefathom.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 04 Aug 2026 00:02:36 GMT","end":"Mon, 02 Nov 2026 00:02:35 GMT"},"fingerprint":{"sha1":"23:DF:F6:FD:CA:6B:31:0D:A1:B0:3A:C6:6C:D7:68:CD:D7:48:C0:5B","sha256":"1F:EB:CF:2E:8C:6E:4C:36:AA:4E:12:79:3E:71:B2:F0:63:E4:BB:AE:8A:4A:97:7B:8E:5D:87:78:93:10:07:86"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: cdn.usefathom.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://darkweb.wtf/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 31 Aug 2026 14:50:31 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 506217\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0\r\ncontent-encoding: zstd\r\netag: \"EWBSpTW+p9MGvh5hBlVzyw==\"\r\nlast-modified: Thu, 20 Aug 2026 21:31:22 GMT\r\nx-vapor-base64-encode: True\r\ncdn-proxyver: 1.61\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/22/2026 04:50:38\r\ncdn-edgestorageid: 830\r\ncdn-requestid: cba8f08452b4b47de992b19e2ce43871\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":6981,"size_decoded":2928,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6981), with no line terminators","md5":"86ed8c90a4baf44614fb2e9dd6a38227","sha1":"54a05386810738398e4bad2a235deb30691fa70c","sha256":"ccf2b4e65ead8bc452ba86f85c89626280ab9fa7b5c4af246f2c42dede516252","sha512":"38d0c40a391ec4d3739d002458bedb1e8ba453150b244ca942810979d30320799147ec00f998fed974bda5300b87911673f440869e42ce61adfe2be4c5e774f3","ssdeep":"192:G3ryARzF30nMZmd1A/sdx3ebAfMy/TyZew:G3ryARzF30nAmDA/sreKMy/WZew","tlshash":"ebe124ea540166305ae3039be93bf7de3526327a748548256c0ddcc0981df2f4b3aada","first_seen":"2026-08-21T22:03:38.660609Z","last_seen":"2026-08-31T14:51:03.908507Z","times_seen":103,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":2,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"darkweb.wtf/themes/default/js/utils.js","fqdn":"darkweb.wtf","domain":"darkweb.wtf","tld":"wtf"},"ip":{"addr":"185.247.225.40","port":443,"asn":200651,"as":"FlokiNET ehf","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://darkweb.wtf/?catharsis","date":"2026-08-31T14:50:31.601Z","timestamp":1788187831601,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.freedom.darkweb.wtf","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 17:35:03 GMT","end":"Sat, 17 Oct 2026 17:35:02 GMT"},"fingerprint":{"sha1":"87:52:28:46:CD:F4:2B:35:77:0D:BC:2F:8E:4F:83:27:5B:FE:85:C9","sha256":"DE:5C:73:79:8C:F3:24:6A:37:35:C8:0E:AB:BE:67:DA:F0:CA:5B:02:F5:38:FF:B6:C2:8E:3B:85:55:E5:4E:71"}}},"request":{"raw":"GET /themes/default/js/utils.js HTTP/1.1\r\nHost: darkweb.wtf\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://darkweb.wtf/?catharsis\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 14:50:31 GMT\r\ncontent-type: application/javascript\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nlast-modified: Thu, 20 Aug 2020 08:35:11 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4168,"size_decoded":1254,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"e9f8be6c86829003318477b65330a900","sha1":"5da1aace00bc5de5759be7399170bfcaebdfe9df","sha256":"b1862be2e3e6cc5f5709625c3ec931ebb88dffc923293dcfbb083afa5bc24217","sha512":"575dd8fae381d1afaa0a190da75af6ee4dc6302774a8595c63e77a159818185e0bb0f0fcef671fa4b0ea6b0a9ec473bc749edf7cf1504ed8ed5880d36cb6eec7","ssdeep":"96:/eefko/HGiNUOUDQxOwqjYv2jbAjy4JmhyCflHGiiOhQ1mKOYvrO0ZxkIODRijDP:/eefkMBX9qcv2EyvBVvKRvr9+IoRURQ8","tlshash":"e681d14a306315b14b7b9a7f8a4f939c32e54417144a942038ddd6cd9f70c2677e5fe8","first_seen":"2026-01-05T15:23:34.289084Z","last_seen":"2026-08-31T14:51:03.90911Z","times_seen":2,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"darkweb.wtf/themes/default/font/DroidSans-Regular.woff2?1516549146","fqdn":"darkweb.wtf","domain":"darkweb.wtf","tld":"wtf"},"ip":{"addr":"185.247.225.40","port":443,"asn":200651,"as":"FlokiNET ehf","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://darkweb.wtf/?catharsis","date":"2026-08-31T14:50:31.646Z","timestamp":1788187831646,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.freedom.darkweb.wtf","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 17:35:03 GMT","end":"Sat, 17 Oct 2026 17:35:02 GMT"},"fingerprint":{"sha1":"87:52:28:46:CD:F4:2B:35:77:0D:BC:2F:8E:4F:83:27:5B:FE:85:C9","sha256":"DE:5C:73:79:8C:F3:24:6A:37:35:C8:0E:AB:BE:67:DA:F0:CA:5B:02:F5:38:FF:B6:C2:8E:3B:85:55:E5:4E:71"}}},"request":{"raw":"GET /themes/default/font/DroidSans-Regular.woff2?1516549146 HTTP/1.1\r\nHost: darkweb.wtf\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://darkweb.wtf/themes/default/css/droidsans.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 14:50:31 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 18396\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nlast-modified: Thu, 20 Aug 2020 08:35:19 GMT\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18396,"size_decoded":18758,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18396, version 1.0","md5":"0b59913d35bf026412f3df34cadb88b7","sha1":"2144405a409721f6e95bede41d88f209c0503141","sha256":"8b8777ba95420785ebb31c071fb5f32bb59dd2b8a4ecf715657b8e02b2e0991a","sha512":"eda9d246b82d0c83423be624cb34354ee9d3b5f97f71405686056c92b0a8ccfa999e9f4d48cf23aec3b30bb50f08e356afafbf2d47e825f738f3738b53578e18","ssdeep":"384:Vqm6TiqseCsQZjmZ1OTlVCiPA0d61bEcrZiuzWKbv65eUeJ/rMg0M:VqQqseHQFlVCiPAM61E6oheDX0M","tlshash":"d482d1df9340c425c4b1783c99988c3152eda9f2bf0421e891b01dfdea84afb326b749","first_seen":"2026-01-05T15:23:34.291748Z","last_seen":"2026-08-31T14:51:03.910333Z","times_seen":10,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"darkweb.wtf/themes/default/font/DroidSans-Bold.woff2?1516549146","fqdn":"darkweb.wtf","domain":"darkweb.wtf","tld":"wtf"},"ip":{"addr":"185.247.225.40","port":443,"asn":200651,"as":"FlokiNET ehf","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://darkweb.wtf/?catharsis","date":"2026-08-31T14:50:31.647Z","timestamp":1788187831647,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.freedom.darkweb.wtf","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 17:35:03 GMT","end":"Sat, 17 Oct 2026 17:35:02 GMT"},"fingerprint":{"sha1":"87:52:28:46:CD:F4:2B:35:77:0D:BC:2F:8E:4F:83:27:5B:FE:85:C9","sha256":"DE:5C:73:79:8C:F3:24:6A:37:35:C8:0E:AB:BE:67:DA:F0:CA:5B:02:F5:38:FF:B6:C2:8E:3B:85:55:E5:4E:71"}}},"request":{"raw":"GET /themes/default/font/DroidSans-Bold.woff2?1516549146 HTTP/1.1\r\nHost: darkweb.wtf\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://darkweb.wtf/themes/default/css/droidsans.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 14:50:31 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 18428\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nlast-modified: Thu, 20 Aug 2020 08:35:14 GMT\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18428,"size_decoded":18790,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18428, version 1.0","md5":"7010520708e130db685a76ab75b9d5f1","sha1":"3cfd9921d487b79d9de7064186bcd752d9e40ce4","sha256":"949d716341ae7d734be45a87323f00057de0a25c417db42030e54a17286dcffb","sha512":"10c6c56b63d06318aef8bf8d563c14c604d301a0a090bd948c658da2ddba0d324e7756266495d8459a4ee493ec1a6e4c151e01f93ffcbcd0386c1a6009a4c4ef","ssdeep":"384:7rHCP2sCxpR6oW74MWgqzwsq1t586y/AUVw9e4+SIb:viOJxpR6xUMWeT1f368Rg","tlshash":"4482cf9397cfa1bcdf8b88b685e69b8050feca407ffbbd745b8c00b1136a8b56561414","first_seen":"2026-01-05T15:23:34.293621Z","last_seen":"2026-08-31T14:51:03.912122Z","times_seen":10,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"darkweb.wtf/matomo.php?action_name=Catharsis%20Market\u0026idsite=7\u0026rec=1\u0026r=620558\u0026h=14\u0026m=50\u0026s=31\u0026url=https%3A%2F%2Fdarkweb.wtf%2F%3Fcatharsis\u0026_id=42b39c80715eeb51\u0026_idn=1\u0026send_image=0\u0026_refts=0\u0026pv_id=Z72Ey9\u0026pf_net=587\u0026pf_srv=54\u0026pf_tfr=2\u0026pf_dm1=363\u0026uadata=%7B%7D\u0026pdf=1\u0026qt=0\u0026realp=0\u0026wma=0\u0026fla=0\u0026java=0\u0026ag=0\u0026cookie=1\u0026res=1280x1024","fqdn":"darkweb.wtf","domain":"darkweb.wtf","tld":"wtf"},"ip":{"addr":"185.247.225.40","port":443,"asn":200651,"as":"FlokiNET ehf","country":"Romania","country_code":"RO"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://darkweb.wtf/?catharsis","date":"2026-08-31T14:50:31.787Z","timestamp":1788187831787,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.freedom.darkweb.wtf","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 19 Jul 2026 17:35:03 GMT","end":"Sat, 17 Oct 2026 17:35:02 GMT"},"fingerprint":{"sha1":"87:52:28:46:CD:F4:2B:35:77:0D:BC:2F:8E:4F:83:27:5B:FE:85:C9","sha256":"DE:5C:73:79:8C:F3:24:6A:37:35:C8:0E:AB:BE:67:DA:F0:CA:5B:02:F5:38:FF:B6:C2:8E:3B:85:55:E5:4E:71"}}},"request":{"raw":"POST /matomo.php?action_name=Catharsis%20Market\u0026idsite=7\u0026rec=1\u0026r=620558\u0026h=14\u0026m=50\u0026s=31\u0026url=https%3A%2F%2Fdarkweb.wtf%2F%3Fcatharsis\u0026_id=42b39c80715eeb51\u0026_idn=1\u0026send_image=0\u0026_refts=0\u0026pv_id=Z72Ey9\u0026pf_net=587\u0026pf_srv=54\u0026pf_tfr=2\u0026pf_dm1=363\u0026uadata=%7B%7D\u0026pdf=1\u0026qt=0\u0026realp=0\u0026wma=0\u0026fla=0\u0026java=0\u0026ag=0\u0026cookie=1\u0026res=1280x1024 HTTP/1.1\r\nHost: darkweb.wtf\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=utf-8\r\nContent-Length: 0\r\nOrigin: https://darkweb.wtf\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://darkweb.wtf/?catharsis\r\nCookie: _pk_id.7.fa25=42b39c80715eeb51.1788187832.; _pk_ses.7.fa25=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 \r\nserver: nginx\r\ndate: Mon, 31 Aug 2026 14:50:32 GMT\r\nx-powered-by: PHP/7.2.34\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:7.2.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":248,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T18:32:47.350638Z","times_seen":18206175,"resource_available":true,"data":null}},"time_used":1086,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1086,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}