{"report_id":"9ae88835-f44b-46fb-bcb2-d9ced4ba678a","version":6,"status":"done","tags":[],"date":"2026-02-14T10:51:25Z","url":{"schema":"https","addr":"purnp.com/","fqdn":"purnp.com","domain":"purnp.com","tld":"com"},"ip":{"addr":"172.67.179.144","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"purnp.com/","fqdn":"purnp.com","domain":"purnp.com","tld":"com"},"title":"Pump","dom":{"size":486,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (386)","md5":"34c10915a3e5dc833038ecb2390b5b7b","sha1":"bbd9d25c2253a2fea1bea068e395fa490897e05b","sha256":"9fe4c8b33135bfd3a71058c6e66db3be674b4d9cfc700c5de21b4ebd41c54ec0","sha512":"2d43bee201376cbb135c455e7514b44d43e731a782b5b0a46670e9aefd1d4b93cf3055a6deba72ae195af38c078c0e406992607da2a0f8de87c367005e2364a4","ssdeep":"","tlshash":"81f0e2a95c22cd18a8105b8cf090b4a845e1f102e721eea071eda637eb083b71e43a88","dom_hash":"domhash9b291e1b7479fdb7d951db1ca6acbc8a","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"purnp.com/","fqdn":"purnp.com","domain":"purnp.com","tld":"com"},"ip":{"addr":"172.67.179.144","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T10:51:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"purnp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"purnp.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-05","domain_rank":0,"first_seen":"2026-02-13T05:54:19.106085Z","last_seen":"2026-02-13T05:54:19.106085Z","alert_count":7,"request_count":7,"received_data":13979965,"sent_data":3093,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"auth.privy.io","ip":{"addr":"104.18.21.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-10-07","domain_rank":406771,"first_seen":"2022-11-01T05:18:44Z","last_seen":"2026-02-09T19:58:07.603196Z","alert_count":0,"request_count":1,"received_data":1900,"sent_data":562,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"purnp.com/","fqdn":"purnp.com","domain":"purnp.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"977b31706e858e18b74b0a143e1b8146","sha1":"2662434645c005bed7f89a9c01ea34087649e9b4","sha256":"5ba9cafe2c039f8d724128cedaf348a8bcca7029545a23be08ff5aa277b1737c","sha512":"3b2ccc660e7b0b9edb6c9cf596a9b65c319a3346d7b838951359d7c83ae98130d0bd967a16f67cf5dfe1a6c8d1289d79a9e02e68b7578f64576ef6db79cf4437","ssdeep":"6144:GbOSDa3/cOSDa3/LOSDa3/LIOSDa3//OSDa3/dOSDa3/JTYmdsJw+56mDTZtRIY8:GbOSDa3/cOSDa3/LOSDa3/LIOSDa3//F","tlshash":"03742c31a7c7aa3e82c242d601bf50bf91f0953c438979e7fd63b281977a614a5d32b4","size":370876,"data":"","first_seen":"2026-02-13T05:54:23.632642Z","last_seen":"2026-02-14T10:51:28.16172Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"purnp.com/helmet.umd.js","fqdn":"purnp.com","domain":"purnp.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4358d1cc45f5447e3de252e5629b0138","sha1":"d8d928afe8268a286c3f67ea7b072c596d51efc0","sha256":"f43095f6739b7badd7ba59918fa95c5ffcc2355af9a48c7b2acc2bb7cf5a14d6","sha512":"13819fbb99fb3a6d29829c222203e3abddb8f4ac5ff696fb2143d4dc7e34c9234fe75683f60b6a18494d3b47fed742a17451200715f827ea991e4908b1429b2b","ssdeep":"6144:2j9OSDa3/cOSDa3/LOSDa3/vMOSDa3//OSDa3/dOSDa3/r54LC216Cnd/PzUw9l+:2BOSDa3/cOSDa3/LOSDa3/vMOSDa3//b","tlshash":"fa844f71a6c36a3e928242d201ff50bf91f0953c478db9d7fd63b282977a614a4d32b1","size":377460,"data":"","first_seen":"2026-02-13T05:54:23.617396Z","last_seen":"2026-02-14T10:51:28.157173Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"purnp.com/","fqdn":"purnp.com","domain":"purnp.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2530d0a7f261fa2f196671b446edc8ce","sha1":"2ca67cbee9dbcad8f55a3932bb29244e6a54bdd3","sha256":"9b7e76e96f6c0e2ca81161463be4773da37269626753806aeb84bfb102318f9f","sha512":"cbbc6ddc5bde45d5f631e64afa7b10f2004bd93d1de9ab7387fc5f4c9d162aa5e685d186ae0b063b5da61726edd6c369f55b615986b6486bd2dc626188eaddf0","ssdeep":"","tlshash":"85316a1252b322663c4bb0bd5fbbd84d763a400bd8095450788ea18c6f70b6509f37cc","size":1739,"data":"","first_seen":"2025-10-22T17:11:21.585925Z","last_seen":"2026-06-01T02:02:06.477836Z","times_seen":460,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"purnp.com/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Foimo.lite.esm.js\u0026t=29517771","fqdn":"purnp.com","domain":"purnp.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","size":656642,"data":"","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-06-06T10:34:57.166998Z","times_seen":2552,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"purnp.com/","fqdn":"purnp.com","domain":"purnp.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T10:51:00.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purnp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:26:51 GMT","end":"Sat, 04 Apr 2026 00:25:37 GMT"},"fingerprint":{"sha1":"B1:A5:22:48:F0:1E:8F:8D:35:A5:8E:37:69:2B:DE:71:00:39:ED:13","sha256":"55:54:4D:9C:41:96:B0:E0:BC:2B:53:14:C9:90:C7:86:B9:4C:ED:95:BE:A8:AE:DF:CC:07:E8:C1:81:81:DA:D9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: purnp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 10:51:00 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 20:53:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e0kyNHsTPlhPlsU5tc5XGmYjYroVqvit0iP3zBdbUBsh2XyZ2gdh8%2F4pCEzSNvlbiKUBVV7d%2Boi0k%2FbuE3xObs8KuXpy9IcD4g%3D%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9cdc02000cbc57e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6469150,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (65326)","md5":"41ab40885e807b49b02f57d47cb09d0e","sha1":"abad7adbf53808a938f733d6c0d77b889fc9ef05","sha256":"91284a7f4ff7474c97d56a2874d355556095313f9bb5015dfbc0da7449492b83","sha512":"692a7950c9a3ded21e2a389b11e85607087d6ed26360bc5fc0fee9229d24f315771fccd83a1be23d5c71162e4cdea9ac348f5ee1bcdc8e7333f1de6ffb9db7ae","ssdeep":"6144:xQzMC6SQhrYg9QZ1spjDmqeh7U2tRdyIlfJ9Dmqeh7U2tRdyIAT:jC6SQhrYwQsQU2tRdyIlfeU2tRdyIy","tlshash":"1c25333a65e308272c57b0f5ebee9019be75a187ce2ded547dcd31209f452baace5200","first_seen":"2026-02-13T05:54:23.615395Z","last_seen":"2026-02-14T10:51:28.14724Z","times_seen":2,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":61,"dns":28,"connect":8,"send":0,"wait":245,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"purnp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"purnp.com/secureproxy?e=ping_proxy","fqdn":"purnp.com","domain":"purnp.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://purnp.com/","date":"2026-02-14T10:51:01.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purnp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:26:51 GMT","end":"Sat, 04 Apr 2026 00:25:37 GMT"},"fingerprint":{"sha1":"B1:A5:22:48:F0:1E:8F:8D:35:A5:8E:37:69:2B:DE:71:00:39:ED:13","sha256":"55:54:4D:9C:41:96:B0:E0:BC:2B:53:14:C9:90:C7:86:B9:4C:ED:95:BE:A8:AE:DF:CC:07:E8:C1:81:81:DA:D9"}}},"request":{"raw":"GET /secureproxy?e=ping_proxy HTTP/1.1\r\nHost: purnp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://purnp.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 10:51:02 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 14 Feb 2026 10:51:02 GMT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HgzXhe%2FVaPpLzwtzhynXIZqjILpYYZV73BULFDdT97sftZJCbexZU5rfbF3TGPU5TNlb1vFghafzbeQnpnM4CYBcKOUwaqqjdw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9cdc02085b1a7dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"6fdb087aa3fbfbcb8287a593a0919e61","sha1":"0e514a0662bcb69dc863953d1ce26e3d40e81a87","sha256":"9795c5ff8937f23526ccb207a5684c1fc94a7854e19c021b39d944e51f5baef2","sha512":"be5457d14c930b51b47ab152850c1ceaafe6ef88c8671b48164abbc83410b0c07a1e178540f6cdeac5f2672cadb1d1cbbb3434b3e39bc2c50c4646a2bae57437","ssdeep":"","tlshash":"fe300000300000000000000c0000000000000000000000000000000000300000000000","first_seen":"2023-04-12T09:14:15Z","last_seen":"2026-06-06T06:29:39.051025Z","times_seen":8772,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":245,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"purnp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"purnp.com/","fqdn":"purnp.com","domain":"purnp.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://purnp.com/","date":"2026-02-14T10:51:01.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purnp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:26:51 GMT","end":"Sat, 04 Apr 2026 00:25:37 GMT"},"fingerprint":{"sha1":"B1:A5:22:48:F0:1E:8F:8D:35:A5:8E:37:69:2B:DE:71:00:39:ED:13","sha256":"55:54:4D:9C:41:96:B0:E0:BC:2B:53:14:C9:90:C7:86:B9:4C:ED:95:BE:A8:AE:DF:CC:07:E8:C1:81:81:DA:D9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: purnp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://purnp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 10:51:01 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 20:53:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 1\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4%2FbsvBdGwf56LR0hz%2FS1FMHEjxAQfX5lIGkufDmX4vmvvq9uUB8fIUsk9klfEr2KtqK20SzTZk4boFD3Tz8JVITgno7eFqLPkA%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cdc0208dd0f7dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T15:09:47.269258Z","times_seen":16181626,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"purnp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"purnp.com/","fqdn":"purnp.com","domain":"purnp.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://purnp.com/","date":"2026-02-14T10:51:01.910Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purnp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:26:51 GMT","end":"Sat, 04 Apr 2026 00:25:37 GMT"},"fingerprint":{"sha1":"B1:A5:22:48:F0:1E:8F:8D:35:A5:8E:37:69:2B:DE:71:00:39:ED:13","sha256":"55:54:4D:9C:41:96:B0:E0:BC:2B:53:14:C9:90:C7:86:B9:4C:ED:95:BE:A8:AE:DF:CC:07:E8:C1:81:81:DA:D9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: purnp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://purnp.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 10:51:01 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 20:53:43 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nage: 1\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jcuvJ9uB%2BFOf3w1NRije1iFEzkXh%2BRN5NoWitDpoublis7Mk6dXVUl6Bjoc0KzCF8rMelQ8Q%2Bld1BlFE%2B7H%2B%2Bu%2BoBk2EvtiwJA%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cdc0208fd9b7dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6469150,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (65326)","md5":"41ab40885e807b49b02f57d47cb09d0e","sha1":"abad7adbf53808a938f733d6c0d77b889fc9ef05","sha256":"91284a7f4ff7474c97d56a2874d355556095313f9bb5015dfbc0da7449492b83","sha512":"692a7950c9a3ded21e2a389b11e85607087d6ed26360bc5fc0fee9229d24f315771fccd83a1be23d5c71162e4cdea9ac348f5ee1bcdc8e7333f1de6ffb9db7ae","ssdeep":"6144:xQzMC6SQhrYg9QZ1spjDmqeh7U2tRdyIlfJ9Dmqeh7U2tRdyIAT:jC6SQhrYwQsQU2tRdyIlfeU2tRdyIy","tlshash":"1c25333a65e308272c57b0f5ebee9019be75a187ce2ded547dcd31209f452baace5200","first_seen":"2026-02-13T05:54:23.615395Z","last_seen":"2026-02-14T10:51:28.14724Z","times_seen":2,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":176,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"purnp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"purnp.com/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Foimo.lite.esm.js\u0026t=29517771","fqdn":"purnp.com","domain":"purnp.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://purnp.com/","date":"2026-02-14T10:51:03.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purnp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:26:51 GMT","end":"Sat, 04 Apr 2026 00:25:37 GMT"},"fingerprint":{"sha1":"B1:A5:22:48:F0:1E:8F:8D:35:A5:8E:37:69:2B:DE:71:00:39:ED:13","sha256":"55:54:4D:9C:41:96:B0:E0:BC:2B:53:14:C9:90:C7:86:B9:4C:ED:95:BE:A8:AE:DF:CC:07:E8:C1:81:81:DA:D9"}}},"request":{"raw":"GET /secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Foimo.lite.esm.js\u0026t=29517771 HTTP/1.1\r\nHost: purnp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://purnp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 10:51:03 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver: cloudflare\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\nvary: Accept-Encoding\r\ncache-control: max-age=2592000, must-revalidate\r\netag: W/\"a0502-14+i6Bt7XM8ofHk8WpmFyqoPYWI\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=oimo.lite.esm.js\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 02/14/2026 10:51:03\r\ncdn-edgestorageid: 883\r\ncdn-requestid: 3e4e793414cf9c90745f1cf606b9660a\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8VSRRMRDO%2F%2Fd3YY0qIDRSxNYtMndnqKUlj0nh%2F%2Ff4IBVheVdHpirsEab%2BrmUHHaP3JAMPG4%2FpienN5wGnOkEcTzeBnRP6%2Fje1g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdc0210dcb07dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":656642,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-06-06T10:34:57.166998Z","times_seen":2552,"resource_available":true,"data":null}},"time_used":512,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":369,"receive":143,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"purnp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"purnp.com//secureproxy?s=%2Fjmpd%2F","fqdn":"purnp.com","domain":"purnp.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://purnp.com/","date":"2026-02-14T10:51:03.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purnp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:26:51 GMT","end":"Sat, 04 Apr 2026 00:25:37 GMT"},"fingerprint":{"sha1":"B1:A5:22:48:F0:1E:8F:8D:35:A5:8E:37:69:2B:DE:71:00:39:ED:13","sha256":"55:54:4D:9C:41:96:B0:E0:BC:2B:53:14:C9:90:C7:86:B9:4C:ED:95:BE:A8:AE:DF:CC:07:E8:C1:81:81:DA:D9"}}},"request":{"raw":"POST //secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: purnp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://purnp.com/\r\ncontent-type: application/json\r\nContent-Length: 1726\r\nOrigin: https://purnp.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1726,"data":"{\"route\":\"8XUwkBv9vhPYfVpD1fxb7EC65sUXJdqr\",\"payload\":\"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\"}"}},"response":{"raw":"HTTP/3 505 HTTP Version Unsupported\r\ndate: Sat, 14 Feb 2026 10:51:04 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 26\r\nserver: cloudflare\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"1a-upO6eNGXiLH/etOGU8Z4TSsCvOM\"\r\nx-ratelimit-limit: 10000\r\nx-ratelimit-remaining: 9998\r\nx-ratelimit-reset: 1771066324106\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 505\r\ncdn-cachedat: 02/14/2026 10:51:04\r\ncdn-edgestorageid: 883\r\ncdn-requestid: 3b5ec68bcf5d189f9923295844c07498\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tZaWmsTIZeXZLX26AV93s7iaQ%2BEX5CwJC4cTz3ej8cJ5jvkP7tzySothKHNN1MRkinGzA2bTdSzRq19JdjlLlE6tASL80etF9Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdc021518f37dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"505","status_text":"HTTP Version Unsupported","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"1d861534f29a609e5868484697373f4b","sha1":"ba93ba78d19788b1ff7ad38653c6784d2b02bce3","sha256":"eda8600220617deb22dfaeb6cfe8c1a2105750566704e7a3102489717d53f99a","sha512":"b62eb914bda78f0e733909f1bec747354cdc97209a44cb2daba63485c3481cbc7b3ee82fbcfc5a30e129ea109f804088bf28e622cc6ff8f1cd15328e3deaed3b","ssdeep":"","tlshash":"3180003c20202220200002822200022222e022b200200208802082b202000ac83af338","first_seen":"2026-01-24T13:38:56.240906Z","last_seen":"2026-06-06T10:34:57.162465Z","times_seen":210,"resource_available":false,"data":null}},"time_used":405,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":404,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"purnp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"purnp.com/helmet.umd.js","fqdn":"purnp.com","domain":"purnp.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://purnp.com/","date":"2026-02-14T10:51:00.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purnp.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 03 Jan 2026 23:26:51 GMT","end":"Sat, 04 Apr 2026 00:25:37 GMT"},"fingerprint":{"sha1":"B1:A5:22:48:F0:1E:8F:8D:35:A5:8E:37:69:2B:DE:71:00:39:ED:13","sha256":"55:54:4D:9C:41:96:B0:E0:BC:2B:53:14:C9:90:C7:86:B9:4C:ED:95:BE:A8:AE:DF:CC:07:E8:C1:81:81:DA:D9"}}},"request":{"raw":"GET /helmet.umd.js HTTP/1.1\r\nHost: purnp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://purnp.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 10:51:01 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Wed, 05 Nov 2025 20:53:43 GMT\r\netag: W/\"690bb957-5c274\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7PsW3nG8y%2B0rtClBtDCt1Ps8CUHa5EzKoFbofelegmmCeT13kdz%2BjdbWzUylEXz8EBCTbMEokYIPr5R7dJTIXZCNc7mI8ILVSA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdc0202a8917dde-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":377460,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65286)","md5":"4358d1cc45f5447e3de252e5629b0138","sha1":"d8d928afe8268a286c3f67ea7b072c596d51efc0","sha256":"f43095f6739b7badd7ba59918fa95c5ffcc2355af9a48c7b2acc2bb7cf5a14d6","sha512":"13819fbb99fb3a6d29829c222203e3abddb8f4ac5ff696fb2143d4dc7e34c9234fe75683f60b6a18494d3b47fed742a17451200715f827ea991e4908b1429b2b","ssdeep":"6144:2j9OSDa3/cOSDa3/LOSDa3/vMOSDa3//OSDa3/dOSDa3/r54LC216Cnd/PzUw9l+:2BOSDa3/cOSDa3/LOSDa3/vMOSDa3//b","tlshash":"fa844f71a6c36a3e928242d201ff50bf91f0953c478db9d7fd63b282977a614a4d32b1","first_seen":"2026-02-13T05:54:23.617396Z","last_seen":"2026-02-14T10:51:28.157173Z","times_seen":2,"resource_available":true,"data":null}},"time_used":403,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":293,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"purnp.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"auth.privy.io/apps/cm1p2gzot03fzqty5xzgjgthq/embedded-wallets?caid=4062d658-8e26-41c0-91df-ec1cacfc0456\u0026client_id=client-WY5brZnRUhFQnX6ip6yRzypC9WLtB9j8mFnq4cyPBMq8W","fqdn":"auth.privy.io","domain":"privy.io","tld":"io"},"ip":{"addr":"104.18.21.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"moz-nullprincipal:{d650e9f8-8e23-4243-9f33-7f073d5e324e}?https://purnp.com","date":"2026-02-14T10:51:03.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privy.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 13:40:06 GMT","end":"Wed, 25 Mar 2026 14:39:57 GMT"},"fingerprint":{"sha1":"54:51:4B:32:12:56:E7:8E:F2:BF:E7:B7:02:86:46:96:C6:54:3B:06","sha256":"89:90:0C:B3:60:64:3D:02:53:1A:F8:C8:FE:21:37:DA:D9:35:7C:B0:CD:1D:38:EB:B6:88:E7:E6:72:F2:44:64"}}},"request":{"raw":"GET /apps/cm1p2gzot03fzqty5xzgjgthq/embedded-wallets?caid=4062d658-8e26-41c0-91df-ec1cacfc0456\u0026client_id=client-WY5brZnRUhFQnX6ip6yRzypC9WLtB9j8mFnq4cyPBMq8W HTTP/1.1\r\nHost: auth.privy.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://purnp.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 10:51:03 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: gzip\r\nage: 0\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-security-policy: default-src 'none'; base-uri 'none'; frame-ancestors 'self' https://pump.fun https://swap.pump.fun https://token.pump.fun https://www.pump.fun https://privy-wallet.pump.fun https://auth.privy.io; child-src 'none'; frame-src 'none'; connect-src 'self' https://auth.privy.io *.infura.io *.blastapi.io *.quiknode.pro *.rpc.privy.systems www.googleapis.com https://api.apple-cloudkit.com/database/1/; script-src 'self' 'unsafe-inline' https://auth.privy.io 'nonce-Nzg4YjVlMTktNjQ2Ny00NGRlLTkzMWQtMzg5NDBjZWQyZjgx'; style-src 'self' 'nonce-Nzg4YjVlMTktNjQ2Ny00NGRlLTkzMWQtMzg5NDBjZWQyZjgx'; font-src 'self'; img-src 'self'; manifest-src 'self'; report-uri https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub3ed0be16dcee00054d67fd118ef8a00d\u0026dd-evp-origin=content-security-policy\u0026ddsource=csp-report\u0026ddtags=env%3Aprod%2Cversion%3A0.0.3;\r\nreferrer-policy: strict-origin\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-matched-path: /apps/[app_id]/embedded-wallets\r\nx-robots-tag: noindex, nofollow\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::jsrfv-1771066263255-f234bc664c6c\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nset-cookie: __cf_bm=mbKLVn47sde5RRpT4YOMhV5i9HjfXIcF5WIWiGA59Ec-1771066263-1.0.1.1-xa2pY.Ds59dULf1TchtZRMku4jX5daxhIW5bnBGkp.ZoSrnpCo5ti1cKJnC7zwwsljJAfMioB7ANSk6PgY0BvPnGbErr9ubBKBLGDf_UScY; path=/; expires=Sat, 14-Feb-26 11:21:03 GMT; domain=.privy.io; HttpOnly; Secure; SameSite=None\n_cfuvid=0KvD.4m7JtGjUGf8ppemzYNXO2F1Ic6B81YgYNq0taM-1771066263412-0.0.1.1-604800000; path=/; domain=.privy.io; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 9cdc02112d4b783d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T15:09:47.269258Z","times_seen":16181626,"resource_available":true,"data":null}},"time_used":309,"timings":{"blocked":59,"dns":34,"connect":1,"send":0,"wait":187,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}