{"report_id":"b6c9834f-4a72-44d7-9aaf-39df49f99622","version":6,"status":"done","tags":[],"date":"2025-09-09T17:02:01Z","url":{"schema":"http","addr":"claim-purpe.xyz/","fqdn":"claim-purpe.xyz","domain":"claim-purpe.xyz","tld":"xyz"},"ip":{"addr":"172.67.145.67","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"claim-purpe.xyz/","fqdn":"claim-purpe.xyz","domain":"claim-purpe.xyz","tld":"xyz"},"title":"Home | $PURPE | Purple Pepe"},"submit":{"url":{"schema":"http","addr":"claim-purpe.xyz/","fqdn":"claim-purpe.xyz","domain":"claim-purpe.xyz","tld":"xyz"},"ip":{"addr":"172.67.145.67","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-14T17:02:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"claim-purpe.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"coinmarketcop-api.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"purpe.tempurl.host","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-09-03T15:12:59.606072Z","alert_count":0,"request_count":4,"received_data":1376894,"sent_data":1741,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2025-09-03T15:53:48.840838Z","alert_count":0,"request_count":1,"received_data":20344,"sent_data":508,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-09-03T15:14:36.780259Z","alert_count":0,"request_count":1,"received_data":9481,"sent_data":554,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"b3682341.smushcdn.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2018-02-22","domain_rank":0,"first_seen":"2025-09-09T17:02:06.436946Z","last_seen":"2025-09-09T17:02:06.436947Z","alert_count":0,"request_count":75,"received_data":12820250,"sent_data":38843,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"claim-purpe.xyz","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":14,"request_count":14,"received_data":15922946,"sent_data":7889,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"WordPress:6.8.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Site Kit:1.160.1","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]}]},{"fqdn":"coinmarketcop-api.com","ip":{"addr":"172.67.141.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-22","domain_rank":0,"first_seen":"2025-08-22T20:51:30.781912Z","last_seen":"2025-09-07T12:27:43.304105Z","alert_count":6,"request_count":6,"received_data":5157,"sent_data":4396,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"analytics.wpmucdn.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2018-04-04","domain_rank":216918,"first_seen":"2025-05-27T07:03:28.331762Z","last_seen":"2025-09-03T20:54:13.707522Z","alert_count":0,"request_count":1,"received_data":68467,"sent_data":419,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"analytics2.wpmudev.com","ip":{"addr":"3.147.100.236","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-07-11","domain_rank":407970,"first_seen":"2025-05-28T08:17:05.999339Z","last_seen":"2025-09-07T19:59:28.222841Z","alert_count":0,"request_count":1,"received_data":306,"sent_data":812,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.purpe.xyz","ip":{"addr":"104.26.14.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-09-09","domain_rank":0,"first_seen":"2025-09-09T17:02:06.435726Z","last_seen":"2025-09-09T17:02:06.435726Z","alert_count":0,"request_count":28,"received_data":1546248,"sent_data":13859,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.bunny.net","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"1999-11-22","domain_rank":56787,"first_seen":"2022-03-21T07:38:02Z","last_seen":"2025-09-04T07:25:16.098044Z","alert_count":0,"request_count":3,"received_data":27630,"sent_data":1395,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"purpe.tempurl.host","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2020-08-11","domain_rank":0,"first_seen":"2025-09-09T17:02:06.433554Z","last_seen":"2025-09-09T17:02:06.433554Z","alert_count":1,"request_count":1,"received_data":0,"sent_data":468,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.purpe.xyz/wp-content/themes/Divi/core/admin/js/common.js?ver=4.27.4","fqdn":"www.purpe.xyz","domain":"purpe.xyz","tld":"xyz"},"ip":{"addr":"104.26.14.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d71b75b2327258b1d01d50590c1f67ca","sha1":"b7820e4ffb6becc133c48f66d9f683545530b959","sha256":"1ca76922f55b389b8f590ae7e3bcc3a2dccdce3aff1e5a4335af081b76a414ea","sha512":"1a1930881b4d4d4f092999d6449248aea68bf1756f6dc32a4efce5e7bf240a14633e76988321e5aa3e11144fe5e8c9a443adf0fbf09a9b57a98c4d2d3a9347a2","ssdeep":"","tlshash":"bb218b4947ac9015cd2230f6141a70f8b9be90a7cbe00d7bfeb3e618d6c04a6127de9d","size":1343,"data":"","first_seen":"2023-03-07T01:02:48Z","last_seen":"2026-07-26T04:03:16.79046Z","times_seen":65519,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.purpe.xyz/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"www.purpe.xyz","domain":"purpe.xyz","tld":"xyz"},"ip":{"addr":"104.26.14.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-26T04:21:31.199939Z","times_seen":908754,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-purpe.xyz/","fqdn":"claim-purpe.xyz","domain":"claim-purpe.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8908e928ebba0774c546cb8fe48612fb","sha1":"a3a95cbacd280bb9c4a57e528297db9a9ac49a3b","sha256":"0d2cbb26e3c029fbea544cee157c9dcebed220b81bbacbbdbc304455c0afcbc7","sha512":"219dabe0dc521656979778462be4ccf6fb2b6d957843c71ae3894c4f438b6662a36b2f50062bfb29ba424e0d42acedb4081a15d9ae2683bc56157c404857e0d7","ssdeep":"","tlshash":"24900271681a48340649100d732c82d43cb4405166427800b06c64484b60d824400948","size":54,"data":"","first_seen":"2025-09-09T17:02:28.720497Z","last_seen":"2025-09-09T17:02:28.720497Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.purpe.xyz/wp-content/plugins/forminator/assets/js/library/jquery.validate.min.js?ver=1.43.0","fqdn":"www.purpe.xyz","domain":"purpe.xyz","tld":"xyz"},"ip":{"addr":"104.26.14.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c67ad56a59cc7d58fe46dc46f760a063","sha1":"d7b49370d743745b25e7c481109bd22701dbcdc4","sha256":"4e47b3b53e1dfaac5d6675a041c872baf854a5a80b800a78d1d67a9f5be0b1e7","sha512":"c1beee2f515b018d94f9417401907a053df7c59becd7b91a4f277f12b563608d2db9d5dd9d8671be79aba2d7c34529cb383798312152e6fb87b7e3b6261fb90f","ssdeep":"","tlshash":"941121c868a123d98e9a3cf08a8bc30770f174a28608845564a85df00eecec402fb978","size":1001,"data":"","first_seen":"2025-04-14T14:57:09.616414Z","last_seen":"2026-05-30T18:44:05.612921Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-purpe.xyz/","fqdn":"claim-purpe.xyz","domain":"claim-purpe.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-07-26T04:19:28.902295Z","times_seen":187440,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-purpe.xyz/7RlODnjHvd.js","fqdn":"claim-purpe.xyz","domain":"claim-purpe.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88a20912c4a8a8378a8831d1d87dc16e","sha1":"74268d4c2abecb40e21d2a7a3e508550d8d92286","sha256":"d7f990c3fd241d3dad9d8db4e258294c3080c0f66b9171cf2a17665ac0b266c1","sha512":"696f266ffc62cba78c916207907675a29b20675e4aff1a8536f7f9fd0789f88c181835d63a722a2a573daf30d4d07ab8ecc1ef57d6063c1466f4c242f8c0ca1d","ssdeep":"1536:SH3u8nJABmnJ0E1RRTLQRulB4w5YwDzeH:h8npF5URYOwBeH","tlshash":"af8341fa45429c8c8fa2820f99f9a30cec4ccca27bc95856f651ddf5a636b1191f2f01","size":82685,"data":"","first_seen":"2025-09-09T17:02:28.527486Z","last_seen":"2025-09-09T17:02:28.527486Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-purpe.xyz/","fqdn":"claim-purpe.xyz","domain":"claim-purpe.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e75af9372e71050d32a681546f9748c0","sha1":"f827e73d4ce0d24b79fb816172c254e64043a220","sha256":"e9b82396f149fd119f49b55dbd493590241bb3ada02557a5effd5ff2a3a4d91c","sha512":"b4068ee31eca65827e9d891352d03778ead51910deaff7563b4a5c6257b1e3f0d5d524d4c07aa9998b2a7ee6545c921a5b504c58566dad06a54dff9fbe97ddc6","ssdeep":"","tlshash":"2c01283324811afbc9fab8126b567796366333dad5b4641049dc054539bfe07e0d48cc","size":732,"data":"","first_seen":"2025-09-09T17:02:28.723918Z","last_seen":"2025-09-09T17:02:28.723918Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-8T0TTJ20TF","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1678d73c904f2f4d6f4ab28238a8dffb","sha1":"1a7198f89bdb5c9a0fdd711ff0ead1960e6fbc99","sha256":"a6bf69f0b8c758ef2bb7d2807dad3e13bd83dbcd78c05b37e402a4413616fa1a","sha512":"15d35fbe8e821f8e2298ea8580a2b8b797aab9f6a194f1689a5921e7c449b7ecc8d0a0f6133305c28451882ce66c780f395d7c0fb7de29d870fb91b0d20f336d","ssdeep":"","tlshash":"af113449e068283f8466e532a14f640676fc59f21bec3800d3a9ce583cb197a361a97b","size":1000,"data":"","first_seen":"2025-09-09T17:02:28.725471Z","last_seen":"2025-09-09T17:02:28.725471Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/purpe-meme-fb-group-001.jpg?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/purpe-meme-fb-group-001.jpg?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 185049\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"c2baecd1b7983234b99c1b76be33de92\"\r\nlast-modified: Sat, 23 Aug 2025 15:52:02 GMT\r\nx-amz-expiration: expiry-date=\"Tue, 23 Sep 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=jpg, origSize=185049, smushRatio=0, skipped=1, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 84a28e95b94eb7de1341a024a1e93778\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":185049,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1024x1024, components 3","md5":"c2baecd1b7983234b99c1b76be33de92","sha1":"1dac962ee86b4577acf7e486621d68008adf5916","sha256":"48146d4a693570e803c234b2ae9d2781c9ba625ae41f95f723787b85631a127f","sha512":"1b024a640d19760ea914a5b79c6a22a5dddcc886f41f9eb6809f358aec591c6b40a0aa44f671b9d6a1058bc3f070b2ab5b53cddf7f2fdfb0648e435e878665f4","ssdeep":"3072:2KFGX6ZMbNToetR2pr2QcpZpnT+U60IgNVtHF8oNRTJWH5N1QTH+e4lHgKfZkuhh:2KFGXTVoeOl2lpvbIgNVj8oN1mNg+eQD","tlshash":"aa0423cac3f6fb81d57e21360889673124dd64080513e5d1eecb6ca1fe925dda3aa7b0","first_seen":"2025-09-09T17:02:28.495637Z","last_seen":"2025-10-13T05:39:26.366858Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1658,"timings":{"blocked":605,"dns":0,"connect":0,"send":0,"wait":647,"receive":406,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/purpe-memes-013.jpeg?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/purpe-memes-013.jpeg?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 170005\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"269f9dd5c671515ce353aa54b0b3fd1c\"\r\nlast-modified: Mon, 08 Sep 2025 18:48:58 GMT\r\nx-amz-expiration: expiry-date=\"Thu, 09 Oct 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=jpg, origSize=170005, smushRatio=0, skipped=0, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 68401a9f695a7679d0b0a3a0352609d9\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":170005,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, progressive, precision 8, 1024x1024, components 3","md5":"269f9dd5c671515ce353aa54b0b3fd1c","sha1":"041b7e108986bef2aab65ee2f699cf0ebe62b95d","sha256":"b5978fdee67b7c59209c9d8ed66affbde5d8da639a5d899791896c9004376020","sha512":"0ad1130cf4f4d424b67c5ef24a918608aa83e446980221820857422945f6055ac3a965cc30da0a7286c328bad576d0c9f1040dbf660ee9824f6e37e6d7273837","ssdeep":"3072:xbyboCQrQ3KX8WtBki9/Et2gXyUjcJXwuIe+vfeFcNzBxW+6x+JuPyf/3W:Vk3C82Fds2ayUjcJXwVe+vWFc9I+4ssv","tlshash":"d4f3230dbe824bb6e53c49729786baef11ae7da971d0a74871ccc67623f015408aec5c","first_seen":"2025-09-09T17:02:28.500659Z","last_seen":"2025-09-09T17:02:28.500659Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1671,"timings":{"blocked":607,"dns":0,"connect":0,"send":0,"wait":658,"receive":406,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"analytics2.wpmudev.com/track/?action_name=Home%20%7C%20%24PURPE%20%7C%20Purple%20Pepe\u0026idsite=17133\u0026rec=1\u0026r=614828\u0026h=17\u0026m=1\u0026s=36\u0026url=https%3A%2F%2Fclaim-purpe.xyz%2F\u0026_id=8f118c6db6020ae1\u0026_idn=1\u0026send_image=0\u0026_refts=0\u0026pv_id=C3a8tO\u0026pf_net=130\u0026pf_srv=224\u0026pf_tfr=34\u0026pf_dm1=1358\u0026uadata=%7B%7D\u0026pdf=1\u0026qt=0\u0026realp=0\u0026wma=0\u0026fla=0\u0026java=0\u0026ag=0\u0026cookie=1\u0026res=1280x1024","fqdn":"analytics2.wpmudev.com","domain":"wpmudev.com","tld":"com"},"ip":{"addr":"3.147.100.236","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:37.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"analytics2.wpmudev.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M02","organization":"Amazon"},"validity":{"start":"Fri, 02 May 2025 00:00:00 GMT","end":"Sun, 31 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"40:0C:4F:7E:B5:10:44:19:A0:C2:EF:92:09:21:00:3D:CC:AC:B9:3F","sha256":"C9:46:8D:D9:68:EB:F5:0F:15:D1:90:6A:6D:6E:26:75:BB:C0:92:4A:75:BA:10:80:B9:9A:BE:82:0B:99:E1:6B"}}},"request":{"raw":"POST /track/?action_name=Home%20%7C%20%24PURPE%20%7C%20Purple%20Pepe\u0026idsite=17133\u0026rec=1\u0026r=614828\u0026h=17\u0026m=1\u0026s=36\u0026url=https%3A%2F%2Fclaim-purpe.xyz%2F\u0026_id=8f118c6db6020ae1\u0026_idn=1\u0026send_image=0\u0026_refts=0\u0026pv_id=C3a8tO\u0026pf_net=130\u0026pf_srv=224\u0026pf_tfr=34\u0026pf_dm1=1358\u0026uadata=%7B%7D\u0026pdf=1\u0026qt=0\u0026realp=0\u0026wma=0\u0026fla=0\u0026java=0\u0026ag=0\u0026cookie=1\u0026res=1280x1024 HTTP/1.1\r\nHost: analytics2.wpmudev.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nContent-Type: application/x-www-form-urlencoded; charset=utf-8\r\nContent-Length: 0\r\nOrigin: https://claim-purpe.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 09 Sep 2025 17:01:38 GMT\r\nserver: nginx\r\ncontent-encoding: none\r\naccess-control-allow-origin: https://claim-purpe.xyz\r\naccess-control-allow-credentials: true\r\nreferrer-policy: origin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T04:24:09.297648Z","times_seen":17539466,"resource_available":true,"data":null}},"time_used":2454,"timings":{"blocked":1126,"dns":55,"connect":117,"send":0,"wait":131,"receive":1,"ssl":1019},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/dexscreener-logo.png?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/dexscreener-logo.png?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 24945\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"5cf61d48a53c4062a65c85a7ff2a7112\"\r\nlast-modified: Mon, 08 Sep 2025 13:08:25 GMT\r\nx-amz-expiration: expiry-date=\"Thu, 09 Oct 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=png, origSize=24945, smushRatio=0, skipped=0, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: abac375571f53a76f162295761c55493\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":24945,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGB, non-interlaced","md5":"5cf61d48a53c4062a65c85a7ff2a7112","sha1":"0386be84f711e48a24b35ed1685d16ab3512f6f3","sha256":"26f2ae80528566654f9c705eea4a3de6495b56f4c7af7bc2fc12fa7e5c8f49f5","sha512":"dbb84d032cd93db3fca4df0b119c2d8b1f4d011ed6fddbb3f9d6f6425ddfcd2f5908a9ebec5da66925408676b7ed32656c6cc0b88100c3aab74e5eea0cdf1312","ssdeep":"768:vUzF52ai5wHbDsdQRjZIDkI52Kd/9zzsbNxEH8AE:CT23wHa+IDkIUKHz6R","tlshash":"f0b2e1abd722549dac92cdf4d86ba524939b1cccbc9d17c0e70095b6aecc13dac14349","first_seen":"2025-09-09T17:02:28.50453Z","last_seen":"2025-11-05T06:48:37.389781Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1429,"timings":{"blocked":716,"dns":0,"connect":0,"send":0,"wait":628,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/dextools-logo.png?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/dextools-logo.png?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 2653\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"233b5a8e0ef7d8065b69714b951e5280\"\r\nlast-modified: Mon, 08 Sep 2025 13:08:28 GMT\r\nx-amz-expiration: expiry-date=\"Thu, 09 Oct 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=png, origSize=2653, smushRatio=0, skipped=0, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 291472b792d491ba90e5ae1ba7de197a\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2653,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit grayscale, non-interlaced","md5":"233b5a8e0ef7d8065b69714b951e5280","sha1":"49a59301024064e783538a1661ed8242702f0ed8","sha256":"4c891dbf6dee5e757563e7202db53822e3d43f8b5e9f90f4817ffae45e24a407","sha512":"d99d9ed89298fc89b0dbc9887b1176cdda6596ef5f65aff3b8a388a7e2fb2afac858259b842a58780a97816cfc570e12b1bd2e1a3748ad74cb374e58c6199d53","ssdeep":"","tlshash":"26516c603da79720d0453c8bcb61614d4dd0c4c66f4bf4ec96b31d5c47284ef6478129","first_seen":"2025-09-09T17:02:28.50734Z","last_seen":"2025-10-13T05:39:26.385501Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1326,"timings":{"blocked":712,"dns":0,"connect":0,"send":0,"wait":613,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/purple-pepe-uncle-sam.png?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/purple-pepe-uncle-sam.png?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 429686\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"69344e5743a4c10d3d0773be2401a5dd\"\r\nlast-modified: Sat, 23 Aug 2025 15:52:05 GMT\r\nx-amz-expiration: expiry-date=\"Tue, 23 Sep 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=png, origSize=429686, smushRatio=0, skipped=0, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 8083eb57b26b115054dc533f21ca75f8\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":429686,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 668 x 753, 8-bit/color RGBA, non-interlaced","md5":"69344e5743a4c10d3d0773be2401a5dd","sha1":"285c86b0a5f6f27cbddf76e734da1577e15d42b9","sha256":"0834212c44f6ebc8a5fd78299905b5ed57279c4c832a070984c112f7b665bfff","sha512":"a2fdf42c39a62ed03db60b0f1ed860e813635fedfca3679ea0256030f8419a4754763090956da7b48e9a74d25916fc3abc14883f8f631e0711cba726b7c53e34","ssdeep":"12288:2mgly56+tyWQIzbDG3nTtJ+TCUMnfb3VxB/lqcBpd:1T56+nLHGZiMjFhqc1","tlshash":"b19423253674a906c0b29f9a050dbb8cb4b260f52be6c7e0a6177bc7f1f140e9634977","first_seen":"2025-09-09T17:02:28.510697Z","last_seen":"2025-10-13T05:39:26.416123Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1590,"timings":{"blocked":640,"dns":0,"connect":0,"send":0,"wait":450,"receive":500,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/purpe-diamond.png?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/purpe-diamond.png?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 90015\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"0bea6947cd7500d5053a109f5ac4cdda\"\r\nlast-modified: Sat, 23 Aug 2025 15:52:10 GMT\r\nx-amz-expiration: expiry-date=\"Tue, 23 Sep 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=png, origSize=90015, smushRatio=0, skipped=0, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: ba5fca6797605b5a7f25503eb40b5f46\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":90015,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 268 x 224, 8-bit/color RGBA, non-interlaced","md5":"0bea6947cd7500d5053a109f5ac4cdda","sha1":"7c697ac24173fde0dc6cdc26873efc4211b97092","sha256":"635ef6a8c6d47a691bcb994091ce4f577fa0b03171deffe295097285b65c5ef5","sha512":"991c03af992c66a9fe06240fa66750ce631c7ce3b194de3418ffc1919f713721a26dfbb153a87edef17c7e840198a483a05b5c7f522c0f5b18bdfebfffbe7699","ssdeep":"1536:TUcHEvycSM13loohSwPO1kV1sy5Do0uKZwGmGGGxPNhDq:TUaEv1SM1V5hD21FmmI9je","tlshash":"df9312886fd336cb1d2ca6ffcb9d98a56270a6a5cf7012938757dcbd8350687c1886c4","first_seen":"2025-09-09T17:02:28.513445Z","last_seen":"2025-10-13T05:39:26.585228Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1312,"timings":{"blocked":636,"dns":0,"connect":0,"send":0,"wait":448,"receive":228,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/12/1B62EFA6-BCF5-4831-A2DD-8CFCA4DB6F6B.jpeg?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/12/1B62EFA6-BCF5-4831-A2DD-8CFCA4DB6F6B.jpeg?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 50549\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"86f8e8294685ae8dbb75ee4017f65e9f\"\r\nlast-modified: Sat, 23 Aug 2025 15:52:13 GMT\r\nx-amz-expiration: expiry-date=\"Tue, 23 Sep 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=jpg, origSize=50549, smushRatio=0, skipped=1, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 2a8c02ad6b3f030dbfd59e72293506c6\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":50549,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], progressive, precision 8, 384x384, components 3","md5":"86f8e8294685ae8dbb75ee4017f65e9f","sha1":"681e6ae72f1e235cba6e70dc1c27b6e23d8c3d60","sha256":"1dc1019e52ea7bda88458247cf9e1cdef9a8662a363904de8a16d83ca2f88135","sha512":"5d0a8309fed2c61f0cc09b8f9bc3278e9bc69cb49a5a11f918b4ce2b7ad450fd9aaf7c4af05b66b6529790fd33364be22846fa372eb2ddb1a0e13356786ba166","ssdeep":"1536:20ol+ZXMzPKtzTVJzKo9eswNgRJxqQBQLcTLO+USAARBDAqvpZXb+q/rt:20FZX2PATVIo980JkDa60N3f+Sp","tlshash":"7233020fc7f7251aacb53b7b3e940c055f8712b6ade17039142d9cda60022ac341c27a","first_seen":"2025-09-09T17:02:28.520689Z","last_seen":"2025-10-13T05:39:26.589205Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1417,"timings":{"blocked":619,"dns":0,"connect":0,"send":0,"wait":646,"receive":152,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/12/18A3946E-8582-4889-A3AA-B58F963EF9D4.jpeg?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/12/18A3946E-8582-4889-A3AA-B58F963EF9D4.jpeg?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 134401\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"05a7316759b0f34f9c25b91c2e6fa9d1\"\r\nlast-modified: Sat, 23 Aug 2025 15:51:56 GMT\r\nx-amz-expiration: expiry-date=\"Tue, 23 Sep 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=jpg, origSize=134401, smushRatio=0, skipped=1, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 962eade822af93a3ac5aa311c73acb6d\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":134401,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], progressive, precision 8, 1280x731, components 3","md5":"05a7316759b0f34f9c25b91c2e6fa9d1","sha1":"5fb39c2818aff3f516aa3b633fef0c89e5a5e8f6","sha256":"0802c735ec06f56a0c97899b921361a848a6ef201e0212495556f11fa74f7f44","sha512":"96f39c6e9b737b2c0c7e21d3799c50cb3d5b10c3855affa95c653f88850748bf88df0b5bc5d4b57b83eb5c8d03afd65b118e790c73b8209471fd83968fc1eef8","ssdeep":"3072:3kL3zldNgMtth2P6Eyq7PBd9hkiUkFrvyKLIs9WnMof6ALkfc:cDldyBCP0PL97UkFrvLI4WMu67c","tlshash":"c6d312f5a36a7483f3a6a887466d264f7401b0f4133197fd026e346f5e5a7ae8805f90","first_seen":"2025-09-09T17:02:28.523387Z","last_seen":"2025-09-09T17:02:28.523387Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1598,"timings":{"blocked":608,"dns":0,"connect":0,"send":0,"wait":630,"receive":360,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.purpe.xyz/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/jquery.mobile.js?ver=4.27.4","fqdn":"www.purpe.xyz","domain":"purpe.xyz","tld":"xyz"},"ip":{"addr":"104.26.14.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purpe.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 21:00:45 GMT","end":"Thu, 16 Oct 2025 22:00:29 GMT"},"fingerprint":{"sha1":"90:EE:7C:69:9E:A3:DB:A0:8D:FE:55:C6:0C:98:33:4A:3B:FF:C0:D0","sha256":"48:F6:F1:AA:03:33:D4:F1:2A:7E:35:81:A4:95:B6:E0:FD:D2:20:9A:AE:0E:04:D5:2B:26:36:11:9B:37:93:88"}}},"request":{"raw":"GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/jquery.mobile.js?ver=4.27.4 HTTP/1.1\r\nHost: www.purpe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:35 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 10 Dec 2024 01:09:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"675794dd-2a18\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lVMZ%2FDIJriYk4qfEW59pmxMsyVw01Hst29kedeIoRHj8ubevOB7shHcHYoIzLuB1rQdcLjOxHcRhqRbR0XC05mjANAAmDfKfFfw%3D\"}]}\r\ncf-ray: 97c83f998e1056cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10776,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"54b92140544246334b2b504d79cdbc47","sha1":"b0abbeb248e33037e8739760c7248326142c0399","sha256":"82ccdb280927be0204340a8255ea4f3450fbfc3057b4b8b98f9d0e01814cd143","sha512":"f6ce3bf75be3e949ebba0a0b053b31d1741ac03eaa484ff9d69f462b12645369eba6a793ff3c6ca6feb43c4a0e6b7b4d4f6cfaf63c9dc2020bd7ca6143b17c58","ssdeep":"192:2Kjril8AZk/MOykyo92+EejakTKam6kqFjpRl9h4nTd6gOwx6Omno12G2LAhdEVw:2Kj2lnk/MpklJEMjTll/4nTd6gOwx696","tlshash":"f622fe0a9b932475745bb23e9b1fa5053537408f5a8afd00391c9e509f1c83c5bb9bdd","first_seen":"2024-11-11T14:57:41.305826Z","last_seen":"2026-07-26T04:03:16.705922Z","times_seen":10636,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-purpe.xyz/7RlODnjHvd.js","fqdn":"claim-purpe.xyz","domain":"claim-purpe.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-purpe.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Sep 2025 17:41:21 GMT","end":"Fri, 05 Dec 2025 18:41:07 GMT"},"fingerprint":{"sha1":"E7:5B:AD:02:4C:8B:43:9A:40:BB:19:AF:78:D1:31:41:45:E1:9D:2B","sha256":"FA:41:2E:D8:E6:4C:D5:96:19:C5:E9:49:2E:4B:00:CF:B7:E6:74:15:5B:D5:C4:24:D3:C9:F0:C0:62:1D:A7:9F"}}},"request":{"raw":"GET /7RlODnjHvd.js HTTP/1.1\r\nHost: claim-purpe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:35 GMT\r\ncontent-type: application/javascript\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: W/\"cc4972125f8415c62e6a563fa1855d08\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=cvv%2FdISxIsBjnZ4q4FY79NTbRExcp%2BUTQey04m3rg9goFgywC%2B%2BJYhKP4CsRBx9%2BTIhC3JKNpux92cWHrad7gbOgAxr81q6fahrS6Eo7wxHxXfdPL1iMRbi8qjiLx0K0rzg%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-ray: 97c83f9859b5b4f1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82685,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (63984)","md5":"88a20912c4a8a8378a8831d1d87dc16e","sha1":"74268d4c2abecb40e21d2a7a3e508550d8d92286","sha256":"d7f990c3fd241d3dad9d8db4e258294c3080c0f66b9171cf2a17665ac0b266c1","sha512":"696f266ffc62cba78c916207907675a29b20675e4aff1a8536f7f9fd0789f88c181835d63a722a2a573daf30d4d07ab8ecc1ef57d6063c1466f4c242f8c0ca1d","ssdeep":"1536:SH3u8nJABmnJ0E1RRTLQRulB4w5YwDzeH:h8npF5URYOwBeH","tlshash":"af8341fa45429c8c8fa2820f99f9a30cec4ccca27bc95856f651ddf5a636b1191f2f01","first_seen":"2025-09-09T17:02:28.527486Z","last_seen":"2025-09-09T17:02:28.527486Z","times_seen":1,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"claim-purpe.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/12/C18C3DC6-784D-4C9B-A396-31AADDBED9F4_1_105_c.jpeg?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/12/C18C3DC6-784D-4C9B-A396-31AADDBED9F4_1_105_c.jpeg?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 289862\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"bd8cebd54ffde6982976fcb2685cab5d\"\r\nlast-modified: Sat, 23 Aug 2025 15:52:19 GMT\r\nx-amz-expiration: expiry-date=\"Tue, 23 Sep 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=jpg, origSize=289862, smushRatio=0, skipped=1, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 5e8512f2a68a9da5c2f68f2836981692\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":289862,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], progressive, precision 8, 886x886, components 3","md5":"bd8cebd54ffde6982976fcb2685cab5d","sha1":"1de80ba77b3dfec8d780f18d5fef4f8b7d203263","sha256":"c5f03279df5d9a7c165a4621637b3e311ca59adcf03455b48ea46e19e62d9861","sha512":"89834792029bc20b72d85a5ea9ec90c8c0e9c88286d98c3ca65e7186a6eb76a2ce66b604ddfc528ac126bb0badeae59ac8bd580d32bf3a8e176a39489d9b8b8e","ssdeep":"6144:gnLXGP4FE+P81GX9BdifYTEdy4yTeWrebKMtYu7Fy6X3rrXHqzmchsSL:asGE+0O9BdiYEU467uKSYAys3rrXqrKq","tlshash":"4f541226c003af6739be8f1575f5d245815dae6ea1f40b7e73cc283e14ea86487c6938","first_seen":"2025-09-09T17:02:28.529965Z","last_seen":"2025-10-13T05:39:26.505195Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1656,"timings":{"blocked":606,"dns":0,"connect":0,"send":0,"wait":573,"receive":477,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/coinmarketcap-logo.png?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/coinmarketcap-logo.png?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 7826\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"6d5d6fc8c2fa798cabe7700227a96dc3\"\r\nlast-modified: Mon, 08 Sep 2025 13:08:32 GMT\r\nx-amz-expiration: expiry-date=\"Thu, 09 Oct 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=png, origSize=7826, smushRatio=0, skipped=0, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: eee09af131c6e0a2cf9c6c5d522518cd\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":7826,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit colormap, non-interlaced","md5":"6d5d6fc8c2fa798cabe7700227a96dc3","sha1":"099e7500dff19f23a43f831b132a3388f85b77b5","sha256":"50529e5de95ddecfb238622ea9ba7ea62521b341622146e6ff5a35ebeba7e5bd","sha512":"82b2467a6397ad4d754f7114ce68fa8f5537e724c4aba5ca885441bd13eaa512b21251996ad6a941b2b482f17ea3712de4fb7b4aeeb35c81d0457fde82958f12","ssdeep":"192:gfty17uQLperUIcxR/2oL8piG0MEODJITY54HO3TgEQ1RNxrHefB3LNQ:gftk7u+pYfcxJnoph71fm3hN1+xNQ","tlshash":"daf1a013e61446869228501ca6195e1ec055cd4eebbf2aa5d50733b4703f1aa03ff4fc","first_seen":"2023-12-01T10:39:03Z","last_seen":"2026-02-18T14:16:50.324286Z","times_seen":21,"resource_available":false,"data":null}},"time_used":1329,"timings":{"blocked":709,"dns":0,"connect":0,"send":0,"wait":620,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/12/1D01D3C9-053B-4D7D-AFC0-B6E1F486E9DF_1_105_c.jpeg?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/12/1D01D3C9-053B-4D7D-AFC0-B6E1F486E9DF_1_105_c.jpeg?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 230591\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"032b8968baef219b2f61db052a9a8e82\"\r\nlast-modified: Sat, 23 Aug 2025 15:52:17 GMT\r\nx-amz-expiration: expiry-date=\"Tue, 23 Sep 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=jpg, origSize=230591, smushRatio=0, skipped=1, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 1de4b86355c6283df1506d18b125f0cc\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":230591,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], progressive, precision 8, 886x886, components 3","md5":"032b8968baef219b2f61db052a9a8e82","sha1":"8ad300f1bc68ceee4e64d4895d4274dff409e16b","sha256":"ff698ab7ee4ab5a3bae6158165719a31b28c81d6d728f368ae61b73c131ea3c2","sha512":"bc3bfd013c3949ee65368f7f7ebe59874b29d547a2228e36b222c9c9362e22dd210cb3b8c0d0fd7522098f357cdebbde5f2dd357090b23628c551bd5362559fa","ssdeep":"6144:OzleeZZ0WpEZNpZp3eqc8dUzugVO9wwOXga0AQ:O5q9eqc8dUzugVUvOXtQ","tlshash":"3d34136c2c351ce1cbd253fa2649b618333a6e5b09df1919b07ee3c4a36e10eee5815d","first_seen":"2025-09-09T17:02:28.536554Z","last_seen":"2025-10-13T05:39:26.658291Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1588,"timings":{"blocked":616,"dns":0,"connect":0,"send":0,"wait":552,"receive":420,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/purpe-memes-012.jpeg?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/purpe-memes-012.jpeg?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 165492\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"208b806404bded41460215650dba9531\"\r\nlast-modified: Sat, 23 Aug 2025 15:51:49 GMT\r\nx-amz-expiration: expiry-date=\"Tue, 23 Sep 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=jpg, origSize=165492, smushRatio=0, skipped=1, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 000609bc26ae6939e095de25bcd665a1\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":165492,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, progressive, precision 8, 1024x1024, components 3","md5":"208b806404bded41460215650dba9531","sha1":"b66cd47593a1dca93da989bc7dae014d7eb1e597","sha256":"d24d18756d9f99a233ea2a28d9bad28187778b9650a53dde13fa5f99f3b6ed0d","sha512":"1e4c8646065a7be1942957bc9332e72844ed9d3bcf191d64b46449a342c2a6688f94468e3cc126e7ecf6e32a855a1c0b445439a7e93051d11f5c2db311bef9ea","ssdeep":"3072:JUfZuX8+u3dQ07MqoqlySO11EpeJNfJ+ilxVOfKXffMvsiBBLcDFAtiPG:yZuXw3dzyUpeJdJ+AOfofUvbZcD8iO","tlshash":"b6f3121c6e051a45d0c890f5d20e1f396be8e4cfd432193db8fab2ab2b36680f51ac35","first_seen":"2025-09-09T17:02:28.539448Z","last_seen":"2025-10-13T05:39:26.515516Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1624,"timings":{"blocked":606,"dns":0,"connect":0,"send":0,"wait":627,"receive":391,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.purpe.xyz/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/magnific-popup.js?ver=4.27.4","fqdn":"www.purpe.xyz","domain":"purpe.xyz","tld":"xyz"},"ip":{"addr":"104.26.14.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purpe.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 21:00:45 GMT","end":"Thu, 16 Oct 2025 22:00:29 GMT"},"fingerprint":{"sha1":"90:EE:7C:69:9E:A3:DB:A0:8D:FE:55:C6:0C:98:33:4A:3B:FF:C0:D0","sha256":"48:F6:F1:AA:03:33:D4:F1:2A:7E:35:81:A4:95:B6:E0:FD:D2:20:9A:AE:0E:04:D5:2B:26:36:11:9B:37:93:88"}}},"request":{"raw":"GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/magnific-popup.js?ver=4.27.4 HTTP/1.1\r\nHost: www.purpe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:35 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 10 Dec 2024 01:09:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"675794dd-5700\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AeEQvBQJtiCMxaa1cPjynEXF2jYChGrE0n%2BRP4Wp9hmS%2F%2BsnBfvTTsgj4mVEpApA1qcxpF04Wv2CF%2BY0DU6AchAInJsPMGh093Q%3D\"}]}\r\ncf-ray: 97c83f998e1156cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22272,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (20735)","md5":"28af37baca9dd41ed000edd3446b00b6","sha1":"a80ea4ecec08eaae565fa5eb7491f58a9a59fa9d","sha256":"22a7ae46aefb3325e3e2761085d7b2ea2cda8dc351cf391a62918bb09784f693","sha512":"a84f65fce7e334a1da2ce2f9bf62ace58240b38f6fd3efab2793a04a7b0b50eae15b3d5cc9e7139e9e590af81bf31f47f66c9d668bfeee25de323276dd8af7be","ssdeep":"384:ZpiK+Ypwhc1sBEVEtk94tBnKIO46FbUkOK/NF0Sv/lZzZyQtdhTZF5ZFB:iEl73MoUkOKv0GMAdXF59","tlshash":"14a22aa4f1a1b37397f361b4188f382c367a9923dd0b8411ba5498946df8edc9137e2d","first_seen":"2024-10-16T16:54:35.046042Z","last_seen":"2026-07-26T04:03:16.597219Z","times_seen":6533,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-purpe.xyz/","fqdn":"claim-purpe.xyz","domain":"claim-purpe.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-09T17:01:34.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-purpe.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Sep 2025 17:41:21 GMT","end":"Fri, 05 Dec 2025 18:41:07 GMT"},"fingerprint":{"sha1":"E7:5B:AD:02:4C:8B:43:9A:40:BB:19:AF:78:D1:31:41:45:E1:9D:2B","sha256":"FA:41:2E:D8:E6:4C:D5:96:19:C5:E9:49:2E:4B:00:CF:B7:E6:74:15:5B:D5:C4:24:D3:C9:F0:C0:62:1D:A7:9F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: claim-purpe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:35 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=uTjz0dQXFwx%2F0aKxGtD2RGC1hxtE%2BJaHX9G%2FFYskYSMQ%2Bw6S1szXzieWHLQCy3MC0M4%2BLxD%2FkUROLfcXxV47Q6H93M7cOohKfYKZIiUDSMgD5X3pihFnZkozad8DWP6kML0%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 97c83f95bf3eb4f1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"WordPress:6.8.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Site Kit:1.160.1","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]}],"data":{"size":1581036,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10138)","md5":"aa1adcd5a77c8f4f2f6598557bbcb306","sha1":"43555378595bfe0177348c8ae05ee222ad1fc882","sha256":"e388e1b512947f7046784798347dd232fd975cd8ecdb5ab8e5774f8fe70bf6e7","sha512":"3d4cc18bf3e4128c1fe3e894091b4ddf7b85585487d150e5429339898dbe44cb5353b9fa11ce7d213543fdb3acb96b170f9dc70631564da7b642b7538c0948da","ssdeep":"24576:HKSiBJXSQ3fucSH54skc2XVeIUjnEgIPX72bgl2jKwj6xCRHqY2G0:HKSiBJXSQ3fucSH54skc2XVeIUjnEgIj","tlshash":"9b25534d4f7160d072679280abdd1f588a3cb163b4a204ca7bdd6507dec2ee911a63bf","first_seen":"2025-09-09T17:02:28.544208Z","last_seen":"2025-09-09T17:02:28.544208Z","times_seen":1,"resource_available":false,"data":null}},"time_used":481,"timings":{"blocked":129,"dns":107,"connect":1,"send":0,"wait":223,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"claim-purpe.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/purpe-memes-002.jpeg?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/purpe-memes-002.jpeg?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 147147\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"bfb9296453d85879d4b1a868eb198153\"\r\nlast-modified: Tue, 02 Sep 2025 01:07:00 GMT\r\nx-amz-expiration: expiry-date=\"Fri, 03 Oct 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=jpg, origSize=147147, smushRatio=0, skipped=1, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 3045be256e6fc9b40164088165d4e60f\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":147147,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1024x1024, components 3","md5":"bfb9296453d85879d4b1a868eb198153","sha1":"fb4cf336087e3dfd46669b75a9f5f99552c64733","sha256":"4be4f6a41b394d429b76e25b7bd6f02b6283bc41bd9496f19072f526af83c0f2","sha512":"64fe20ea415dcb97e7fddad4436f482c779bc1d5c06bb45333f9bc21e16dd91ab21f81deaa704d43dd016154ac437c2669f30c5c675b96230f006e10a0ee3e53","ssdeep":"3072:JGCCQee74AnxeY6RB5A9ncMYrTD4W6S+mQhYasY1IHnGwmLSfO:J07m4Y+ynvkTDZjlQhXh1IHnGdLAO","tlshash":"90e3120eb414ff1b2d1b0d1b448925a3c495a450e722d6e807ccacad35d76eb7a2f8de","first_seen":"2025-09-09T17:02:28.547872Z","last_seen":"2025-10-13T05:39:26.230168Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1493,"timings":{"blocked":620,"dns":0,"connect":0,"send":0,"wait":547,"receive":326,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/12/1EF49DA2-C8C2-43D5-8685-109746ABAE6F_1_105_c.jpeg?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/12/1EF49DA2-C8C2-43D5-8685-109746ABAE6F_1_105_c.jpeg?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:37 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 299255\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"4dd323e17bc8b182bc9aecbc2f0a0a4e\"\r\nlast-modified: Sat, 23 Aug 2025 15:52:19 GMT\r\nx-amz-expiration: expiry-date=\"Tue, 23 Sep 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=jpg, origSize=299255, smushRatio=0, skipped=1, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:37\r\ncdn-edgestorageid: 830\r\ncdn-requestid: acdcc195b4bba2982f8ade41072059d7\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":299255,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], progressive, precision 8, 886x886, components 3","md5":"4dd323e17bc8b182bc9aecbc2f0a0a4e","sha1":"82128edf612a4272154fb5d0aa9692b8fa9ec27a","sha256":"e2f5637ff16f014ca4023c8c50483e9aa98fb95ee0d9298ab92c549e8a6349e8","sha512":"dc0b42a25e01ae03770aac95fdaf9b2f80a9acf2cdc2cc11a60e25c407aab94aead032a25f4f34491a1301991ae77c6694cb6c5e4da6bcecfb05a3e00cc27b0c","ssdeep":"6144:/mZJOQsW/iTHdvsKVtfvXQ0kopnyEeA1GUBqJ3Thv3j01P8g3JBmIGQFJUmx:OZ16rd0SHQ0FpyM1rBqJrgjBzJVx","tlshash":"a4542329bc2798b3ac234a53550da8602b9c61bf76614f9e3d3d4232a37d69c5df1f40","first_seen":"2025-09-09T17:02:28.550781Z","last_seen":"2025-10-13T05:39:26.347378Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1776,"timings":{"blocked":604,"dns":0,"connect":0,"send":0,"wait":773,"receive":399,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/purpe-meme-fb-group-012.jpg?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/purpe-meme-fb-group-012.jpg?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 100700\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"247b27c87aa8cbe9c3177e684e24c4ec\"\r\nlast-modified: Sat, 23 Aug 2025 15:52:20 GMT\r\nx-amz-expiration: expiry-date=\"Tue, 23 Sep 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=jpg, origSize=100700, smushRatio=0, skipped=1, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 2156e4a27c5f0bd2716637a9e099a5e6\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":100700,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1024x1024, components 3","md5":"247b27c87aa8cbe9c3177e684e24c4ec","sha1":"70adce2d3f0c6566c8241b9a40dd8bbbaa2b4a66","sha256":"adbb628b65a10441c0578833b326efa36107b3797dc3b8b5b418687e43b77d4a","sha512":"d31045264c0e26b387b93439e44a3bc004bd10359451aef767482735060463c5112bc295107331f71425106a00b95cedb1e955cb07f7d1b7a278562aa9b90ee2","ssdeep":"3072:h+BKpC6OZm195TSvH4J8ntR7FSG/bEIQdmq/gcYDX9Y01:h+BKzfN29pBbsdmdcYDX9Y01","tlshash":"9da30281b7bb68d9e2006839616cefb9b320329fe97a484d1f64b7c144e6db08055ee5","first_seen":"2025-09-09T17:02:28.55173Z","last_seen":"2025-10-13T05:39:26.350931Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1569,"timings":{"blocked":607,"dns":0,"connect":0,"send":0,"wait":657,"receive":305,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/jupiter-logo.png?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/jupiter-logo.png?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 199778\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"ed01ecbd904a3d54ff44c06627ccf1bf\"\r\nlast-modified: Mon, 08 Sep 2025 13:08:20 GMT\r\nx-amz-expiration: expiry-date=\"Thu, 09 Oct 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=png, origSize=199778, smushRatio=0, skipped=0, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 071d0d022b065b20a7128c8ace44e359\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":199778,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2000 x 2000, 8-bit/color RGBA, non-interlaced","md5":"ed01ecbd904a3d54ff44c06627ccf1bf","sha1":"2d0fa0d3d5879d2c682640a6a0a214a5bfec43fb","sha256":"a49ec8cb48c9e66451b2af042cffb8acdf7def33818870c080a0a7f965c8029c","sha512":"4eb8ee657d9e8e672ac70f03e51c05ec3cdad4bcfbc50e4dc9d8f1aaa20a987b2364b9f7009ce983415d7a8b056a988881e549dff41d8c67ffb91f116e122aca","ssdeep":"6144:52jgTmA4rN43A/yp9uTEurUP3LsfMwPCIWN:52Nq9MEurqL0WN","tlshash":"3814021a8925fde7d2e084bdcc3c1bc029a49df90a4b73dbdb74aa514c5ba87944323d","first_seen":"2025-01-07T02:38:12.959168Z","last_seen":"2025-10-13T05:39:26.249647Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1670,"timings":{"blocked":705,"dns":0,"connect":0,"send":0,"wait":560,"receive":405,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.purpe.xyz/wp-content/plugins/forminator/assets/forminator-ui/js/forminator-form.min.js?ver=1.43.0","fqdn":"www.purpe.xyz","domain":"purpe.xyz","tld":"xyz"},"ip":{"addr":"104.26.14.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purpe.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 21:00:45 GMT","end":"Thu, 16 Oct 2025 22:00:29 GMT"},"fingerprint":{"sha1":"90:EE:7C:69:9E:A3:DB:A0:8D:FE:55:C6:0C:98:33:4A:3B:FF:C0:D0","sha256":"48:F6:F1:AA:03:33:D4:F1:2A:7E:35:81:A4:95:B6:E0:FD:D2:20:9A:AE:0E:04:D5:2B:26:36:11:9B:37:93:88"}}},"request":{"raw":"GET /wp-content/plugins/forminator/assets/forminator-ui/js/forminator-form.min.js?ver=1.43.0 HTTP/1.1\r\nHost: www.purpe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:35 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 06 May 2025 17:50:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"681a4bd4-4cbc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nage: 183518\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CkWaL%2FH0fG3aw9%2Fgev%2F%2F0tKYVOjkT0nGxuYIf7BXgGTe5%2F9UpZt0rRjDgfIQ9vEe8q8319OigyGFvlEoxZ9rwIfAeujo1einMzU%3D\"}]}\r\ncf-ray: 97c83f998e1556cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19644,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19348)","md5":"9e8248f8bd776df8a5aedf24d96f12ad","sha1":"8fd837be153484eb4d374eca240968049df96c19","sha256":"c12694409aacd0965fa58409b6414b866777470bf73072b4f9b1713cc4366281","sha512":"3325aa82d2bee4b241ab6fdab170de4f2e552c77b7a83e7b2fb5f972b32cf805886d29cb2bdfb5f46aaa833017ae6bc9ce6c2bf721c2fa156a5632f176f4c893","ssdeep":"384:JD7dc2Wn0BH+aSNXX12XyOXyDpaDJZibQSNuph9KEDbKngbbmI:VcX9DmEbNupLKEvKnomI","tlshash":"43928645b659676215ef3472a3df6d85f2321638d4108a807aeec4e01d78dca6323f7e","first_seen":"2025-03-21T00:00:08.866792Z","last_seen":"2026-07-08T06:24:00.297604Z","times_seen":128,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmarketcop-api.com/@v1/services/connector?referrer=claim-purpe.xyz","fqdn":"coinmarketcop-api.com","domain":"coinmarketcop-api.com","tld":"com"},"ip":{"addr":"172.67.141.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:40.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinmarketcop-api.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 15:47:41 GMT","end":"Thu, 20 Nov 2025 16:45:54 GMT"},"fingerprint":{"sha1":"B0:CF:37:BB:3E:5D:19:87:C9:06:DA:2B:3A:C5:0B:77:11:4C:A2:47","sha256":"FC:6B:44:07:4E:C2:B7:3E:B8:95:B0:E9:D0:96:D9:1C:DC:FE:A5:D7:F6:6B:A4:D5:79:CF:BE:F3:E3:05:67:8E"}}},"request":{"raw":"GET /@v1/services/connector?referrer=claim-purpe.xyz HTTP/1.1\r\nHost: coinmarketcop-api.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nAuthorization: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjdXN0b21lcklkIjoiZlRPTVJ1enAydCIsImdyb3VwX2lkIjo4MDgsImlhdCI6MTc1NzE1ODE0Nn0.hmvhlNlyh2ymYtIYF1rdlXK4PTa4Gyq35L7haBtZlhg\r\nX-Direction-Safe: 1757437298720\r\nX-Scale-Referrer: claim-purpe.xyz\r\nX-Auth-Key: zR3FMos%2B3gnvO8%2FLxItTPtRyNb1a5nPqPnGJZFg8Y00%3D\r\nOrigin: https://claim-purpe.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Sep 2025 17:01:42 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FxUBQGEZpdkpulxTZAAFqWhyPydHBbZkCkx6zSfB%2BbozPacxUNMxy3l9xTjZTrAQT7h%2FldM0u5GMO%2F035%2FdOQbzyB%2BXqUoe4Xy0eM2MUVRQ8W64%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://claim-purpe.xyz\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\netag: W/\"15e-5OoY42+T9abKwG/WAGMmFDw7TkI\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 97c83fb57bceb509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":350,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b102a2e22bc8f5067c406cde2a56602d","sha1":"e4ea18e36f93f5a6cac06fd6006326143c3b4e42","sha256":"3042424ee5e89da76975a62b7af0c38af554a50aa1707f81cab3115cefc9d8ce","sha512":"9a2e2db0aa0f90dea5618bea6562ebe768a87acc47a287210c77042d0c5f514badb2bbe66c650f1513e6f62cb56857877c48f24546f697ee73b35dab9f58efd1","ssdeep":"","tlshash":"4ce0c0b4051252e716b4d8a94d8188071e05491af2fca17463661b8c80c610c2654634","first_seen":"2025-09-09T17:02:28.557226Z","last_seen":"2025-09-09T17:02:28.557226Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2498,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2497,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"coinmarketcop-api.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.purpe.xyz/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/salvattore.js?ver=4.27.4","fqdn":"www.purpe.xyz","domain":"purpe.xyz","tld":"xyz"},"ip":{"addr":"104.26.14.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purpe.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 21:00:45 GMT","end":"Thu, 16 Oct 2025 22:00:29 GMT"},"fingerprint":{"sha1":"90:EE:7C:69:9E:A3:DB:A0:8D:FE:55:C6:0C:98:33:4A:3B:FF:C0:D0","sha256":"48:F6:F1:AA:03:33:D4:F1:2A:7E:35:81:A4:95:B6:E0:FD:D2:20:9A:AE:0E:04:D5:2B:26:36:11:9B:37:93:88"}}},"request":{"raw":"GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/salvattore.js?ver=4.27.4 HTTP/1.1\r\nHost: www.purpe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:35 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 10 Dec 2024 01:09:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"675794dd-217e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nage: 183518\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r%2FeH5d9tpFibOho0SeALyjfqzzYsuXz1BNOqzQrnvbW1%2FXsgv8XLeOhmnY0rS7Ps9Jw%2FfGLtTFp2h8PBLHBfiXdKIBzyI2CRODw%3D\"}]}\r\ncf-ray: 97c83f998e1256cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8574,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6322)","md5":"bf7fe805ab945e4b2c4d56da59476811","sha1":"307135fd2987f477c7bd50fcd0cc28a1cff1f568","sha256":"b6205029e1016596807b655c8f57818736a787e32ceb1407effa152ac3bb9380","sha512":"1237ac2a5bd2bd37b403f747d0ce3db65ed1e9c67b92aa4018b08c0747167470de113e36a01950f3a266b815806170f4c15068cad18ab71eb32957fef2d6ffa4","ssdeep":"192:dPmRQHMXDHcCC3fxqC0TN6ZbucRm5i5HHQpcaQGcFjAW90YgtKryaxggy6cqF4/8:dP+TXjcCC3fslQucYu0ca7cFjAW90gxr","tlshash":"1102d99db62430616b9b36bd233fa11ef573213ea4090094956dc8ec6971c4b82e7edc","first_seen":"2023-03-07T01:26:02Z","last_seen":"2026-07-26T04:03:16.674185Z","times_seen":14090,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.purpe.xyz/wp-content/et-cache/global/et-divi-customizer-global.min.css?ver=1746635665","fqdn":"www.purpe.xyz","domain":"purpe.xyz","tld":"xyz"},"ip":{"addr":"104.26.14.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purpe.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 21:00:45 GMT","end":"Thu, 16 Oct 2025 22:00:29 GMT"},"fingerprint":{"sha1":"90:EE:7C:69:9E:A3:DB:A0:8D:FE:55:C6:0C:98:33:4A:3B:FF:C0:D0","sha256":"48:F6:F1:AA:03:33:D4:F1:2A:7E:35:81:A4:95:B6:E0:FD:D2:20:9A:AE:0E:04:D5:2B:26:36:11:9B:37:93:88"}}},"request":{"raw":"GET /wp-content/et-cache/global/et-divi-customizer-global.min.css?ver=1746635665 HTTP/1.1\r\nHost: www.purpe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:35 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 07 May 2025 16:34:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"681b8b91-a1a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nage: 183522\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lfXHsyrMsYdH2GZmPi9o0ALsUDfvlBnr%2Bhh1cnHEyKbd9QO1ML5OiXGlV%2FZznbtsoEvztS8KLkYjEv5He9nj0kF9AhO9SjtCNuY%3D\"}]}\r\ncf-ray: 97c83f999e1c56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2586,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2586), with no line terminators","md5":"d90b896bfbc11fea2677f68d1f35748b","sha1":"9fa1569b683a768d1a3dd8ef5410f9a2a9b5bda0","sha256":"4d6a603d22c9b0ed24151d8017ffbf7dadb7d0bcc22405d0251d0773ca33534e","sha512":"0203f402b187496818a22d60fbea3378516d63c35bc2d6197eadb996a3e4828f2ca0213d6a48b1c9f1a2baee4a4f2fbff6b1e791fa87443eb68cfb3d0e52b612","ssdeep":"","tlshash":"c75101afbf73327a7156d309f646b77c823c808696050fa8daa4f52a87c40c714f225e","first_seen":"2025-09-09T17:02:28.559494Z","last_seen":"2026-02-18T14:16:50.304507Z","times_seen":8,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":124,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.bunny.net/rubik/files/rubik-latin-400-normal.woff2","fqdn":"fonts.bunny.net","domain":"bunny.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:36.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fonts.bunny.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 Aug 2025 22:10:53 GMT","end":"Tue, 04 Nov 2025 22:10:52 GMT"},"fingerprint":{"sha1":"CC:36:51:05:17:06:60:8D:92:18:7A:63:20:AE:DD:C0:73:4B:11:1C","sha256":"91:BE:58:42:12:2D:1C:25:A6:C0:A2:D9:AD:47:6D:76:5B:84:A2:E9:E8:BD:DB:84:41:B6:64:A9:10:87:69:37"}}},"request":{"raw":"GET /rubik/files/rubik-latin-400-normal.woff2 HTTP/1.1\r\nHost: fonts.bunny.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://claim-purpe.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.bunny.net/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 18936\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 781720\r\ncdn-uid: 3a60ca70-b89d-4cd5-a4b5-34a3468d7e0f\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\netag: \"68b238ee-49f8\"\r\nlast-modified: Fri, 29 Aug 2025 23:34:06 GMT\r\ncdn-storageserver: SE-904\r\ncdn-fileserver: 1028\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/08/2025 14:35:16\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 09658bb69e5ad2f54aea289789e2b3d9\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":18936,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18936, version 1.0","md5":"fb45c730c5b8b7c5a206103ef55206af","sha1":"06b031a6685c19cacfd03d10dd2166f96ff45c7f","sha256":"82ac0e78285c43d0cd203427c57ab30fb07b18f8e6166045f729442eb1abfa26","sha512":"515fa507a3f04cb963202838f4fb9fd8a9d58900a975c9e315f90760594de6f71f05d4b31424320a6d96cc60192a2888e074a18b801e02f59d4cffc97052e6af","ssdeep":"384:MvJkbdQhkVMGXQwPuiwuJ0woHXbkNFO4kqH7hanqatfvjz:MxkbdNmGXVPYJwEANRH70nn1/","tlshash":"6582d0dedb709b01e9c605b5cd4a3d8d73257f9ca4dc6483a272cbe9b45efa84860324","first_seen":"2025-06-02T17:34:44.357606Z","last_seen":"2026-07-26T02:47:33.312352Z","times_seen":4251,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/purple-pepe-meltdown.png?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/purple-pepe-meltdown.png?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 192125\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"9386bd8b237ddbff99aa0b066cff3d77\"\r\nlast-modified: Sat, 23 Aug 2025 15:51:58 GMT\r\nx-amz-expiration: expiry-date=\"Tue, 23 Sep 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=png, origSize=192125, smushRatio=0, skipped=0, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: db9a3ebc35c9bce8e2bb56ffaca78852\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":192125,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 414 x 395, 8-bit/color RGBA, non-interlaced","md5":"9386bd8b237ddbff99aa0b066cff3d77","sha1":"e1fb603b63f8e08fe421b12e572c15c8a5d6f0a9","sha256":"655eee57f2f34a7b8121165c62fa3b360cf56a8c95d442a9770e81a8f917f7f3","sha512":"e82c6b431189a73d470d9b7cb10e0b1b7f5e351df94c1d846d671b48397747d79062b61ef4e47621ce8b3294a64fa1ec2e5086e635df887fa80e15b8d20d53a2","ssdeep":"3072:XRZm+6hS2LxL0Rit9ybdAzrQY2SXJggvWo5tbOmyQ4RumGEBflIbUdKJuCRGZKvH:PyR00XHQYtWoC04RumGmlMuCIQvm0vku","tlshash":"4214233f0f832c63d7dde0ba4bf0706e1474d7ffb66166d1249bc620991428a9f49a4a","first_seen":"2025-09-09T17:02:28.562498Z","last_seen":"2025-10-13T05:39:26.409945Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1119,"timings":{"blocked":649,"dns":0,"connect":0,"send":0,"wait":142,"receive":328,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/purpe-memes-009.jpeg?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/purpe-memes-009.jpeg?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 206585\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"74ac74bd5dc04179340d048ce319a1a0\"\r\nlast-modified: Sat, 23 Aug 2025 15:52:04 GMT\r\nx-amz-expiration: expiry-date=\"Tue, 23 Sep 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=jpg, origSize=206585, smushRatio=0, skipped=1, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 40efae7fc48190d8cc29c5e906617ae9\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":206585,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, progressive, precision 8, 1024x1024, components 3","md5":"74ac74bd5dc04179340d048ce319a1a0","sha1":"f9acc9363b13973000eb380dc18a65e23016abf7","sha256":"78c00396ba89c5d8c3259a4591057c0bce184536d1ab5940667d289686f977bd","sha512":"9f7ab9bcbb91ad09530094cc93855990dd2a35e9f8f6f5664ef9c814229fcbb1346c7766dafbef5b9decce3abdc8f329aa7061759b38832e40e1f7dc926ee392","ssdeep":"6144:46JnobVN0q/w57JleXGH9i89Zi97swltu5:JobD1/o7JlRdi89Itu5","tlshash":"a51423335d53c5916aa8710c2222629e8edc9adcde2d21ed304d7d111df7ffed148a26","first_seen":"2025-09-09T17:02:28.565007Z","last_seen":"2025-10-13T05:39:26.196086Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1465,"timings":{"blocked":625,"dns":0,"connect":0,"send":0,"wait":478,"receive":362,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/purpe-memes-001.jpeg?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/purpe-memes-001.jpeg?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 246372\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"940226fd438a03bb99d4063fab2a9cff\"\r\nlast-modified: Sat, 23 Aug 2025 15:52:10 GMT\r\nx-amz-expiration: expiry-date=\"Tue, 23 Sep 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=jpg, origSize=246372, smushRatio=0, skipped=1, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 0b103692fea4b0094473acac0b9f7c60\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":246372,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1024x1024, components 3","md5":"940226fd438a03bb99d4063fab2a9cff","sha1":"9c3d568f6fc1b5ccff308bc76ca5c53e2d7e230e","sha256":"e9fa042604b907d5bd53a438513dc8f56a1c92ff6f6ced4dee7a6575cb68ccd6","sha512":"b098d8db269beb40e0d4ad2bfde0b8d689f9067fd2bd9b668554d924317a30d6e8a1dcce0576cd522c443d68cbfcf318b749797faf8ddb12fcdb2fa13de18813","ssdeep":"6144:GCsru0VI/Ng65f3k71FXA4TIfpX1lYSNWrF:GCP04y83k7rrU+RJ","tlshash":"8c34233d6ac347237ac49d1bc255db4e3b948d0987daea25cc842c9f75c313265af6c8","first_seen":"2025-09-09T17:02:28.567311Z","last_seen":"2025-10-13T05:39:26.209501Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1664,"timings":{"blocked":604,"dns":0,"connect":0,"send":0,"wait":620,"receive":440,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.purpe.xyz/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/jquery.fitvids.js?ver=4.27.4","fqdn":"www.purpe.xyz","domain":"purpe.xyz","tld":"xyz"},"ip":{"addr":"104.26.14.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purpe.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 21:00:45 GMT","end":"Thu, 16 Oct 2025 22:00:29 GMT"},"fingerprint":{"sha1":"90:EE:7C:69:9E:A3:DB:A0:8D:FE:55:C6:0C:98:33:4A:3B:FF:C0:D0","sha256":"48:F6:F1:AA:03:33:D4:F1:2A:7E:35:81:A4:95:B6:E0:FD:D2:20:9A:AE:0E:04:D5:2B:26:36:11:9B:37:93:88"}}},"request":{"raw":"GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/jquery.fitvids.js?ver=4.27.4 HTTP/1.1\r\nHost: www.purpe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:35 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 10 Dec 2024 01:09:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"675794dd-d15\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nage: 183519\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vv154X85lbZLizMKa4LZqb4gvGpF1DxjAGOVNA%2BbuA%2BhyE33LEWLWHFd6YGaxDq1Jzt9zXhDgC%2FQjHq6rihko39A2s55Kis3r6o%3D\"}]}\r\ncf-ray: 97c83f999e2b56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3349,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"fa07f10043b891dacdb82f26fd2b42bc","sha1":"9c1dc49e9747758e033c0e9a7d016401bd78602c","sha256":"462747422c6af30aa81a0373fa1cfd736455cef52bdbb816f67be9531d84eace","sha512":"828f723649ae5a7b996de43fefc9b904d1a1d54f83671cc6998fdc7e0bb75c7761c8e0bb4a4497f2e4658606c193953c7019d7859e6ebab3db34c794ec575618","ssdeep":"","tlshash":"1361316932a6282d4d5330ef1eaf4014b619c0b707ebe86c78be85c98f849480625bfd","first_seen":"2023-03-07T01:11:43Z","last_seen":"2026-07-26T04:43:38.232792Z","times_seen":42921,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.purpe.xyz/wp-content/plugins/forminator/build/front/front.multi.min.js?ver=1.43.0","fqdn":"www.purpe.xyz","domain":"purpe.xyz","tld":"xyz"},"ip":{"addr":"104.26.14.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purpe.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 21:00:45 GMT","end":"Thu, 16 Oct 2025 22:00:29 GMT"},"fingerprint":{"sha1":"90:EE:7C:69:9E:A3:DB:A0:8D:FE:55:C6:0C:98:33:4A:3B:FF:C0:D0","sha256":"48:F6:F1:AA:03:33:D4:F1:2A:7E:35:81:A4:95:B6:E0:FD:D2:20:9A:AE:0E:04:D5:2B:26:36:11:9B:37:93:88"}}},"request":{"raw":"GET /wp-content/plugins/forminator/build/front/front.multi.min.js?ver=1.43.0 HTTP/1.1\r\nHost: www.purpe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:35 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 06 May 2025 17:50:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"681a4bd4-3dd90\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nage: 183518\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QPM4l%2BXS%2BiBiPkVHAhHU4LjBqkoyEvsHjMApecJduk7aMCyjzuHmAYg7tnET%2BJkLekQlvn8MF%2FxL6%2FsSwpJ6Jyt5tBDlKJ0qMnw%3D\"}]}\r\ncf-ray: 97c83f998e1656cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":253328,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f4fd8807736331ec78a93a8d148a8f11","sha1":"9c2659aff9c5eff638124be99de3cd0ba0329f93","sha256":"8f82aaef95d71fb3b249f5c0ee331b7d78dd46e2a0595bac8ddd6f3b955772d0","sha512":"0dc981d65a868e7e00c375efb4ba411c3d43f51c38445c6699c88cddf1a7e271a7cd6761f97a76096712e26745ed8f232300af9deb144c22b0281943142ede70","ssdeep":"3072:rJ8HBMr5jzXQsoqKKroFVP95kTz/OueZvqUx:rJ8HBMr5vXLoqKKroFVP95kTbOuu","tlshash":"7334d94475b0b1d102e73172c19f4d06f2256b79e40aa684baeed8f1adb8dc95323f36","first_seen":"2025-06-21T23:02:48.369488Z","last_seen":"2026-04-07T06:35:20.823179Z","times_seen":8,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.purpe.xyz/wp-content/et-cache/1263/et-divi-dynamic-1263.css?ver=1746635665","fqdn":"www.purpe.xyz","domain":"purpe.xyz","tld":"xyz"},"ip":{"addr":"104.26.14.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purpe.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 21:00:45 GMT","end":"Thu, 16 Oct 2025 22:00:29 GMT"},"fingerprint":{"sha1":"90:EE:7C:69:9E:A3:DB:A0:8D:FE:55:C6:0C:98:33:4A:3B:FF:C0:D0","sha256":"48:F6:F1:AA:03:33:D4:F1:2A:7E:35:81:A4:95:B6:E0:FD:D2:20:9A:AE:0E:04:D5:2B:26:36:11:9B:37:93:88"}}},"request":{"raw":"GET /wp-content/et-cache/1263/et-divi-dynamic-1263.css?ver=1746635665 HTTP/1.1\r\nHost: www.purpe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:35 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 07 May 2025 16:34:25 GMT\r\nvary: Accept-Encoding\r\netag: W/\"681b8b91-8e5d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b4zVk17ZfhcuHdt6gPXUl9K6j1TnElLwJDBZbRNbRrCe%2F3WsuKuTrac6lfleHre9Zb89DCtPs3E9VNxI6%2FXrdx%2BSFF%2FEwqWFPCo%3D\"}]}\r\ncf-ray: 97c83f99ce4556cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36445,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14024)","md5":"02a55e0e10337ccb5b8d029422b52e09","sha1":"63db02ab21ad101372c839da79ea1717e4b135e8","sha256":"c4914e1dbccdec1fc417230f2c83ce5d560b5b9d3211ae87c6207d93563187b1","sha512":"48ea9303a05b6f957bc6e5b33a27a81203e39400e0dc29c9c33c14b971ff99374a915b21d1f042f1ed93422d606b7c3ad14e1465520137afab1065d3b0653442","ssdeep":"192:J5JsFfk+7WI7h/IfIrkcmf1lS1NNZIORnNwaZ/X9iAD6wMk9zWhZKGpfAu9/B/Oj:TJK4x41xt9s2Gi4/B/OoY0capzlY","tlshash":"2df2211f5b763bb6f2139364fd42da1f41f98203e6024aa5bdd9e06497831834633aec","first_seen":"2025-09-09T17:02:28.572499Z","last_seen":"2026-02-18T14:16:50.303798Z","times_seen":8,"resource_available":false,"data":null}},"time_used":570,"timings":{"blocked":186,"dns":110,"connect":1,"send":0,"wait":158,"receive":0,"ssl":109},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-purpe.xyz/fonts.gstatic.com/s/anekdevanagari/v16/jVyd7nP0CGrUsxB-QiRgw0NlLaVt_QUAkYxLRoCL23mlrWExpYkTsmE.woff2","fqdn":"claim-purpe.xyz","domain":"claim-purpe.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:37.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-purpe.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Sep 2025 17:41:21 GMT","end":"Fri, 05 Dec 2025 18:41:07 GMT"},"fingerprint":{"sha1":"E7:5B:AD:02:4C:8B:43:9A:40:BB:19:AF:78:D1:31:41:45:E1:9D:2B","sha256":"FA:41:2E:D8:E6:4C:D5:96:19:C5:E9:49:2E:4B:00:CF:B7:E6:74:15:5B:D5:C4:24:D3:C9:F0:C0:62:1D:A7:9F"}}},"request":{"raw":"GET /fonts.gstatic.com/s/anekdevanagari/v16/jVyd7nP0CGrUsxB-QiRgw0NlLaVt_QUAkYxLRoCL23mlrWExpYkTsmE.woff2 HTTP/1.1\r\nHost: claim-purpe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _pk_id.17133.f8be=8f118c6db6020ae1.1757437297.; _pk_ses.17133.f8be=1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:37 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Tue, 09 Sep 2025 17:01:37 GMT\r\ncf-cache-status: EXPIRED\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=UNuAMv%2FndnJZG2q24rLKc%2BoxiTKZDom8W8vQaNZOppFGu48QYubRJa6GkrrSrlREpfKx%2FfEPmZSypNxn6hq%2BZMaL7ebV0WG9Vye7ykP%2BAewwBRYTRbq7dnWmH%2BTX3U1KCqc%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-ray: 97c83fa20a3eb4f1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1581036,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10138)","md5":"aa1adcd5a77c8f4f2f6598557bbcb306","sha1":"43555378595bfe0177348c8ae05ee222ad1fc882","sha256":"e388e1b512947f7046784798347dd232fd975cd8ecdb5ab8e5774f8fe70bf6e7","sha512":"3d4cc18bf3e4128c1fe3e894091b4ddf7b85585487d150e5429339898dbe44cb5353b9fa11ce7d213543fdb3acb96b170f9dc70631564da7b642b7538c0948da","ssdeep":"24576:HKSiBJXSQ3fucSH54skc2XVeIUjnEgIPX72bgl2jKwj6xCRHqY2G0:HKSiBJXSQ3fucSH54skc2XVeIUjnEgIj","tlshash":"9b25534d4f7160d072679280abdd1f588a3cb163b4a204ca7bdd6507dec2ee911a63bf","first_seen":"2025-09-09T17:02:28.544208Z","last_seen":"2025-09-09T17:02:28.544208Z","times_seen":1,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"claim-purpe.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-purpe.xyz/fonts.gstatic.com/s/anekdevanagari/v16/jVyd7nP0CGrUsxB-QiRgw0NlLaVt_QUAkYxLRoCL23mlrWExpYkTsmE.woff2","fqdn":"claim-purpe.xyz","domain":"claim-purpe.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:37.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-purpe.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Sep 2025 17:41:21 GMT","end":"Fri, 05 Dec 2025 18:41:07 GMT"},"fingerprint":{"sha1":"E7:5B:AD:02:4C:8B:43:9A:40:BB:19:AF:78:D1:31:41:45:E1:9D:2B","sha256":"FA:41:2E:D8:E6:4C:D5:96:19:C5:E9:49:2E:4B:00:CF:B7:E6:74:15:5B:D5:C4:24:D3:C9:F0:C0:62:1D:A7:9F"}}},"request":{"raw":"GET /fonts.gstatic.com/s/anekdevanagari/v16/jVyd7nP0CGrUsxB-QiRgw0NlLaVt_QUAkYxLRoCL23mlrWExpYkTsmE.woff2 HTTP/1.1\r\nHost: claim-purpe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _pk_id.17133.f8be=8f118c6db6020ae1.1757437297.; _pk_ses.17133.f8be=1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:37 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Tue, 09 Sep 2025 17:01:37 GMT\r\ncf-cache-status: EXPIRED\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=WfTiqn7YvE%2BFrVoJm7RXitOHe2f9J3oVw1vt3McwJpb%2FFZ%2FrDPY9n9vO1PQr6KwXttEFxMO7VH7j%2F05MN573k2KpA5aMEnBz5c9NPJhpzmm0TzvnfhT9zd7hHQoPQJYCIYg%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-ray: 97c83fa20a3bb4f1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1581036,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10138)","md5":"aa1adcd5a77c8f4f2f6598557bbcb306","sha1":"43555378595bfe0177348c8ae05ee222ad1fc882","sha256":"e388e1b512947f7046784798347dd232fd975cd8ecdb5ab8e5774f8fe70bf6e7","sha512":"3d4cc18bf3e4128c1fe3e894091b4ddf7b85585487d150e5429339898dbe44cb5353b9fa11ce7d213543fdb3acb96b170f9dc70631564da7b642b7538c0948da","ssdeep":"24576:HKSiBJXSQ3fucSH54skc2XVeIUjnEgIPX72bgl2jKwj6xCRHqY2G0:HKSiBJXSQ3fucSH54skc2XVeIUjnEgIj","tlshash":"9b25534d4f7160d072679280abdd1f588a3cb163b4a204ca7bdd6507dec2ee911a63bf","first_seen":"2025-09-09T17:02:28.544208Z","last_seen":"2025-09-09T17:02:28.544208Z","times_seen":1,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"claim-purpe.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/12/AC27D4DE-A115-43CA-A049-D5BCC75DEEFE_1_105_c.jpeg?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/12/AC27D4DE-A115-43CA-A049-D5BCC75DEEFE_1_105_c.jpeg?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 374971\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"acf41fa156fea1fc8c927f51134d65e8\"\r\nlast-modified: Sat, 30 Aug 2025 14:23:15 GMT\r\nx-amz-expiration: expiry-date=\"Tue, 30 Sep 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=jpg, origSize=407778, smushRatio=8.05, skipped=0, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 5256c71eea10cf6af1fa36602fe59071\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":374971,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, progressive, precision 8, 886x886, components 3","md5":"acf41fa156fea1fc8c927f51134d65e8","sha1":"0b2a0d3dfbbd963490560b668f0be8f85456f0f8","sha256":"65fdebbb94ece55fe511cba92c7642318e699192f928989a23df520f7562a07c","sha512":"986f9b0afc74f08693a9793198da79e73a9efc5a2b82748aa945e9a0000e5625a908d85bf04c97057d4a1f00b064cd0762885a60316e505fc5a9b431abaeceac","ssdeep":"6144:jbtrVZ2t0fxZ6ZIzebQSlAHTrQXnHj9sFy2Ou6ZHD0MfI79LKK/KZlz75b+o:1Wt06keBlAHTrQXEyzukg79eK/ANdb","tlshash":"c78423bad8b4ca1cf7162bf95817c34247ea060360243f98311e9f98f87ec563ea6355","first_seen":"2025-09-09T17:02:28.574434Z","last_seen":"2025-09-09T17:02:28.574434Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1754,"timings":{"blocked":604,"dns":0,"connect":0,"send":0,"wait":614,"receive":536,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmarketcop-api.com/@v1/log/join","fqdn":"coinmarketcop-api.com","domain":"coinmarketcop-api.com","tld":"com"},"ip":{"addr":"172.67.141.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:38.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinmarketcop-api.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 15:47:41 GMT","end":"Thu, 20 Nov 2025 16:45:54 GMT"},"fingerprint":{"sha1":"B0:CF:37:BB:3E:5D:19:87:C9:06:DA:2B:3A:C5:0B:77:11:4C:A2:47","sha256":"FC:6B:44:07:4E:C2:B7:3E:B8:95:B0:E9:D0:96:D9:1C:DC:FE:A5:D7:F6:6B:A4:D5:79:CF:BE:F3:E3:05:67:8E"}}},"request":{"raw":"OPTIONS /@v1/log/join HTTP/1.1\r\nHost: coinmarketcop-api.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,x-device,x-scale-referrer\r\nReferer: https://claim-purpe.xyz/\r\nOrigin: https://claim-purpe.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Sep 2025 17:01:39 GMT\r\ncontent-length: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://claim-purpe.xyz\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS,PATCH\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eFCg6YmsFxxmV1WoMlNO0z7NenWa0I%2BgetBavKzZT4OVp9ub6YtKAyrLg5JV5TTkw4JyfLacmM1R%2BYC0UgL5s0eRUfMWyaBBraAoEv3laCkxHPw%3D\"}]}\r\ncf-ray: 97c83faa8b49b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T04:24:09.297648Z","times_seen":17539466,"resource_available":true,"data":null}},"time_used":914,"timings":{"blocked":19,"dns":1,"connect":0,"send":0,"wait":894,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"coinmarketcop-api.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.purpe.xyz/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"www.purpe.xyz","domain":"purpe.xyz","tld":"xyz"},"ip":{"addr":"104.26.14.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purpe.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 21:00:45 GMT","end":"Thu, 16 Oct 2025 22:00:29 GMT"},"fingerprint":{"sha1":"90:EE:7C:69:9E:A3:DB:A0:8D:FE:55:C6:0C:98:33:4A:3B:FF:C0:D0","sha256":"48:F6:F1:AA:03:33:D4:F1:2A:7E:35:81:A4:95:B6:E0:FD:D2:20:9A:AE:0E:04:D5:2B:26:36:11:9B:37:93:88"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: www.purpe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:35 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 21 Jul 2024 22:03:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"669d85c1-3509\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nage: 183521\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HDiOOG6B6hvxfjRqPC%2BpC%2FaVadEh2wG33kyxHeQpRbo09r8zs9hSFxlBz8%2F10bZ%2Fb%2B0nz4sLPzbuhOoZsyVJVZYZMjMQFvXdgaM%3D\"}]}\r\ncf-ray: 97c83f99be4056cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-26T04:21:31.199939Z","times_seen":908754,"resource_available":true,"data":null}},"time_used":378,"timings":{"blocked":157,"dns":102,"connect":5,"send":0,"wait":13,"receive":0,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/purpe-meme-fb-group-005.jpg?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/purpe-meme-fb-group-005.jpg?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 152640\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"4c62005b59d79a14b831057d6acc0f17\"\r\nlast-modified: Sat, 23 Aug 2025 15:51:51 GMT\r\nx-amz-expiration: expiry-date=\"Tue, 23 Sep 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=jpg, origSize=152640, smushRatio=0, skipped=1, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: a55f8830147de71737930dec95adb070\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":152640,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1215x1081, components 3","md5":"4c62005b59d79a14b831057d6acc0f17","sha1":"9723c2f768646f8ab06efe3a809bf8cd87f7dc2d","sha256":"f8c44dfbf7b55890c349e01b805d54664b5fba1c7b71984ba330c8ef6d007eb8","sha512":"b8ef5b902095fcfd8ec443afcc0f0ae6e7e61e05162096adf6b60e715e036e9f782abd29a872905dbf693f76a5548b467b23ba5c8361bd2edb279d9807670657","ssdeep":"3072:kaxrc0AFssrbP/SKGNmzEv26zPt603+oCcI9yRpeIFqm8:ntc0AFswlGN/eUPY03XC5qpeIFl8","tlshash":"f8e312498b8f9c78f956c2b4c64d8426493ab2e327a0690ea3d59f40bd82fc5df10dcd","first_seen":"2025-09-09T17:02:28.57742Z","last_seen":"2025-10-13T05:39:26.697546Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1476,"timings":{"blocked":614,"dns":0,"connect":0,"send":0,"wait":541,"receive":321,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/cropped-purple-pepe-shades-32x32.png?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:39.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/cropped-purple-pepe-shades-32x32.png?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 2844\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"ec64411a03e16de29b4a324ebc40ad37\"\r\nlast-modified: Mon, 08 Sep 2025 18:04:36 GMT\r\nx-amz-expiration: expiry-date=\"Thu, 09 Oct 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=png, origSize=2844, smushRatio=0, skipped=0, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:39\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 9f8a74e9a8be64c6ecee5daadf47bedc\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2844,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"ec64411a03e16de29b4a324ebc40ad37","sha1":"4783ee50beaa74cc5a00876da09d7ef153f88798","sha256":"717fc80ea60429c6b946664220f039d2f5b038cd418e35175a497a6381bdad2b","sha512":"c82016b3fa69e86601bd94fdeb2ad29021606ec8345a1249955f2efe2e8f42733204ce1cfdc6294acb737eea7e8df3c1b0c4d4e60e626ff907302c1b8fde30af","ssdeep":"","tlshash":"e2516e2b7f70b9a5f03d937a8b16544f995018b1855a2f8e505cf037c31d44c14ae205","first_seen":"2025-09-09T17:02:28.579856Z","last_seen":"2025-10-13T05:39:26.684873Z","times_seen":2,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/purpe-memes-005.jpg?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/purpe-memes-005.jpg?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 167517\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"9555787c2cad2dd7a1c06096857be53c\"\r\nlast-modified: Sat, 23 Aug 2025 15:52:15 GMT\r\nx-amz-expiration: expiry-date=\"Tue, 23 Sep 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=jpg, origSize=167517, smushRatio=0, skipped=1, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: f832e1c039c8e5f66d12e9798bde2584\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":167517,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1024x1024, components 3","md5":"9555787c2cad2dd7a1c06096857be53c","sha1":"58c16e1a719f5f5ecd14af1e6f269643670ea754","sha256":"87731705829919d2f61c0a8b341c3b9372fb28236464b2d2f598c80d70878f0f","sha512":"e5bec2127adf98eef9d2b25052af3ff98e8eb3ade3103f722930fa08863eda9f70e293fa39a544fa08f4a24f22027f30dcac09875d669e048943cbc9a551159f","ssdeep":"3072:NjEU2uiT0aR0FS94Mmi0dDu6pvFsZuOgKs7i7aJgPZMD3sfnS4zWmy5KGlDn1rtv:ZOYa6E2Mmi0M6pSZuOrs7i7aJb7s5dq/","tlshash":"78f31246bf4152fcc186b3b807e0a93a49d55a1e920d8603104a7dea54d7fdf2f7c2e1","first_seen":"2025-09-09T17:02:28.581856Z","last_seen":"2025-10-13T05:39:26.595309Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1540,"timings":{"blocked":617,"dns":0,"connect":0,"send":0,"wait":554,"receive":369,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/purple-pepe-money-chain.png?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/purple-pepe-money-chain.png?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 209481\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"7f1cedd06fa2183b41b3debbdbc7ba14\"\r\nlast-modified: Sat, 23 Aug 2025 15:52:01 GMT\r\nx-amz-expiration: expiry-date=\"Tue, 23 Sep 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=png, origSize=209481, smushRatio=0, skipped=0, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 60005cc52e57b4e891e85c390d031b2b\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":209481,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 384 x 460, 8-bit/color RGBA, non-interlaced","md5":"7f1cedd06fa2183b41b3debbdbc7ba14","sha1":"b565d6f029b58d701f9948832e950c9a4881ad0b","sha256":"e19c0f3195d44cf3370cb6b475489f7d412b02405e6d3214fd6113a5efa186a6","sha512":"f9a9ed7a2612fa2d202d823e7f035c4cba6c5572cbb6aa106701b363846a3bebd20be23a6aaafcf53925245787bcba2f0f62b0bafc72099c2a6161fd15dcfe61","ssdeep":"3072:nyLbjPbPTKmm4Zs7xPQN/IjowiAjeY3NSrkw3KVA1tLW8pxiR4udGX/LuwKBtxzQ:yLjlExoV2dw6VDixUGX/LXK9ZHG4qr1v","tlshash":"8f2423ed82277746a83e7006cde3e86dc7f418e6d4603ea9460dac7fb9c45ea4c114d6","first_seen":"2025-09-09T17:02:28.583586Z","last_seen":"2025-10-13T05:39:26.570283Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1547,"timings":{"blocked":645,"dns":0,"connect":0,"send":0,"wait":507,"receive":395,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/12/852B49F8-9FDE-45B1-902F-83390E1F5ADA_1_105_c.jpeg?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/12/852B49F8-9FDE-45B1-902F-83390E1F5ADA_1_105_c.jpeg?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 331707\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"87646fb8a1d86d944bff6963bcf280a0\"\r\nlast-modified: Sat, 23 Aug 2025 15:52:06 GMT\r\nx-amz-expiration: expiry-date=\"Tue, 23 Sep 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=jpg, origSize=331707, smushRatio=0, skipped=1, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 6b2a5d3ff39e25563d93ccf852d65afb\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":331707,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], progressive, precision 8, 886x886, components 3","md5":"87646fb8a1d86d944bff6963bcf280a0","sha1":"9f45a2dd5d47ce40e4e285db7c16cd00f769d7f5","sha256":"cd2aa566bd111b90e3890efa990f27f10d9b4a7007108874cfaa8f148b9d8e75","sha512":"c86d4f58bcd6cf3cfd3a102f658339f237d06078fcde3d1a7a3f55fa0b167caa6c2fe2abd49d7390d512075bd1fecb89ae1123a6e6bcfeac95d003480144ec09","ssdeep":"6144:bEGmiYHcvM8qukrMjRhL0O7SsVMGkIGk/PPJ+2FrWEku81rOe+0xokCJnT5c:bkcv8Mj/LHSsVVfGsPXiu81rOCC9Jn2","tlshash":"6a64238593cb1a7b47632f549b278a026f4d133ec474e5ab387a93a0e7092ff095417e","first_seen":"2025-09-09T17:02:28.585233Z","last_seen":"2025-09-09T17:02:28.585233Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1760,"timings":{"blocked":605,"dns":0,"connect":0,"send":0,"wait":641,"receive":514,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"analytics.wpmucdn.com/matomo.js","fqdn":"analytics.wpmucdn.com","domain":"analytics.wpmucdn.com","tld":"wpmucdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:36.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"analytics.wpmucdn.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Aug 2025 06:11:14 GMT","end":"Thu, 20 Nov 2025 06:11:13 GMT"},"fingerprint":{"sha1":"06:A9:8B:2C:FE:08:35:59:A9:CE:E3:03:08:10:D6:9E:DF:1B:B0:E5","sha256":"17:D9:B5:72:5E:5A:B5:41:F1:9E:85:14:54:9E:65:3A:EF:40:52:60:51:4F:2C:15:41:1A:F6:7D:C2:AE:56:C5"}}},"request":{"raw":"GET /matomo.js HTTP/1.1\r\nHost: analytics.wpmucdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 3859600\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=86400\r\ncontent-encoding: br\r\netag: \"6813a155-107aa\"\r\nlast-modified: Thu, 01 May 2025 16:29:09 GMT\r\npragma: public\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/09/2025 14:28:51\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 77ff2d1aadec6196741e85bf7aead11e\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":67498,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2878)","md5":"97d28a3aefbae803f17013706da83e1b","sha1":"2aad8740afe4a5d49c2de29a52b886b2be5bc94c","sha256":"89e35b18e2ddd93f040839eb32f71a22a7781f27fca6e294f9405d5fb0ea2cc3","sha512":"874c1431370e533b59d4377b21110802c7dd63ae40c56d092bfbc7cb482f7a2d52a922a57f53007b30a05972f45ee80f055bfe9500e2fb4d40c6d5bf606ebc6c","ssdeep":"1536:ATgnSINAJrRJqerEKlFXhuXL0+XzsyWbuds06Vdda8EbdAAOV4ITzvBCQaFLa:AT+Z2fu7dzsyWbbVdda8EbdAA0XvBv5","tlshash":"2163d5ca72c275398bca2074603f1187b17aada7144cc4a4f56ac4fa3c3891e957bf78","first_seen":"2024-12-12T23:54:46.369205Z","last_seen":"2026-07-26T04:43:44.390064Z","times_seen":14217,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":114,"dns":103,"connect":1,"send":0,"wait":1,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/12/E272612F-F7EF-4056-8D9B-1BF0797CD597_1_105_c.jpeg?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:37.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/12/E272612F-F7EF-4056-8D9B-1BF0797CD597_1_105_c.jpeg?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:37 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 217906\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"9474a58ef73057384600fc063022e6c3\"\r\nlast-modified: Sun, 31 Aug 2025 02:58:51 GMT\r\nx-amz-expiration: expiry-date=\"Wed, 01 Oct 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=jpg, origSize=240726, smushRatio=9.48, skipped=0, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:37\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 0c95df40600c9455867d66a2c47396ee\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":217906,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, progressive, precision 8, 890x883, components 3","md5":"9474a58ef73057384600fc063022e6c3","sha1":"f99c13cfdbdda15f0dbce102075fd1c0e42fc7b5","sha256":"19223a019e05a3fdee1591e5631814fcd80ed2af48d5fd790e89ec8228893711","sha512":"fb3f54456c5094058d09949e18eb70d6238371965cb83b026a7d09b8374f34c25438cb1ceb6965689a398200deeb7d74691b4e695757239f2ab351938e4a5942","ssdeep":"6144:8Ocq9ng2MklMG5I6rw8ZtQPOiw9cIUEFow:8FqzlMQdtZppZFP","tlshash":"8a2423c07d70c67084300f3cf630fd47be7a96e659a8a7ea75a82625436ca3807793b5","first_seen":"2025-09-09T17:02:28.590063Z","last_seen":"2025-09-09T17:02:28.590063Z","times_seen":1,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":268,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-purpe.xyz/cdn-cgi/challenge-platform/h/g/scripts/jsd/f78657f80e4b/main.js?","fqdn":"claim-purpe.xyz","domain":"claim-purpe.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:38.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-purpe.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Sep 2025 17:41:21 GMT","end":"Fri, 05 Dec 2025 18:41:07 GMT"},"fingerprint":{"sha1":"E7:5B:AD:02:4C:8B:43:9A:40:BB:19:AF:78:D1:31:41:45:E1:9D:2B","sha256":"FA:41:2E:D8:E6:4C:D5:96:19:C5:E9:49:2E:4B:00:CF:B7:E6:74:15:5B:D5:C4:24:D3:C9:F0:C0:62:1D:A7:9F"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/f78657f80e4b/main.js? HTTP/1.1\r\nHost: claim-purpe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _pk_id.17133.f8be=8f118c6db6020ae1.1757437297.; _pk_ses.17133.f8be=1; _ga_8T0TTJ20TF=GS2.1.s1757437297$o1$g0$t1757437297$j60$l0$h0; _ga=GA1.1.1220319025.1757437298\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:38 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 97c83fa969f7b4f1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10048,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10048), with no line terminators","md5":"2709d7bd392a7495f9b6e597d82864a0","sha1":"09ac089ecedcd18b2dbc703ad57cbc41817779d1","sha256":"a4dc8ce7715140c9de641a87aaf803c187d09b7826b9fe9aa79a21b09e934f0f","sha512":"df465292af4cf07bb693eeba3414c560223edb783e28bad8739815fa1b99c33c2853b06b39fbd36837c921e4b0f0daa908f8de339bdb2564282107200bf92172","ssdeep":"192:H1N4Dt9TWkVITDEtQ7axjbW6OiFrDtM+qcMZ3yXZ/NK3LVX9UW:HAjT6MqiFrDkcGCXhuVj","tlshash":"e222e9c6bc493175d230963220af38cfba5cdf1584416c95c052a8fefb722a998afd5d","first_seen":"2025-09-09T17:02:28.591984Z","last_seen":"2025-09-09T17:02:28.591984Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"claim-purpe.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/birdeye-logo.png?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/birdeye-logo.png?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 1868\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"5f93de4b3ddb16c4d3e89ce9cd099108\"\r\nlast-modified: Mon, 08 Sep 2025 13:08:26 GMT\r\nx-amz-expiration: expiry-date=\"Thu, 09 Oct 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=png, origSize=1868, smushRatio=0, skipped=0, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 1216b8780c46d838a3055883a28cc4ef\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1868,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 80 x 80, 8-bit colormap, non-interlaced","md5":"5f93de4b3ddb16c4d3e89ce9cd099108","sha1":"2cf650c00f0ae97137a6bc91bf7e667dd33747e8","sha256":"ff76d488157fb82240e989b555ac791787cb2969c8c6a79c1191d8aa3f386fd5","sha512":"0c0e6d5459df9fd61b982de25abceb1fa99f867e92be85a46206b319c4541e2fa703512ea19995b9760a38f1fda76d426ab203c9124e35c4f39c0a6b77d07575","ssdeep":"","tlshash":"ec31081333563ed8f70ed279c084084c8676490d97ecfd946aabcc3217f8b66929c5e5","first_seen":"2025-09-09T17:02:28.594194Z","last_seen":"2025-10-13T05:39:26.420945Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1428,"timings":{"blocked":713,"dns":0,"connect":0,"send":0,"wait":715,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/solcex-logo.png?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/solcex-logo.png?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 43042\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"823f33263c0a68d6462e8eb63f58c362\"\r\nlast-modified: Mon, 08 Sep 2025 13:08:22 GMT\r\nx-amz-expiration: expiry-date=\"Thu, 09 Oct 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=png, origSize=43042, smushRatio=0, skipped=0, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 6a87025dd6099e485e6a440fea16aa37\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":43042,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"823f33263c0a68d6462e8eb63f58c362","sha1":"ada11e8722c26446c8cad14bea2bc7e8ac5e7ccd","sha256":"09d323b2fbf6d3efb2411585bfde85beb70784861cb4392d39b899987be3fbd6","sha512":"ef2bb2d887d17335f9c977333d34c6408522c82376365e181f4d09c2045fc07d9e0df1db24f9b81e3a2c97747d7957c740f0c0b68f535b99ab967d86aeab57b4","ssdeep":"768:K/jB+l3CecmwgNyjK8TMkB+4qAHkvSGMufvXNUHNAVziQS:KBFeclj7TJ+43GbfvaHrX","tlshash":"61130265644cf9abf4572afb542e143205d16bafcc39c410c416c148ef8ba9c6df3aab","first_seen":"2025-09-09T17:02:28.596106Z","last_seen":"2025-10-13T05:39:26.400755Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1493,"timings":{"blocked":713,"dns":0,"connect":0,"send":0,"wait":654,"receive":126,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/purpe-memes-008.jpeg?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/purpe-memes-008.jpeg?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 303259\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"78a07d5c39891d0fd00453aff3aa9ea4\"\r\nlast-modified: Tue, 09 Sep 2025 11:27:37 GMT\r\nx-amz-expiration: expiry-date=\"Fri, 10 Oct 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=jpg, origSize=303259, smushRatio=0, skipped=1, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: bdc51b386b08719b6bc60d441d525bb2\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":303259,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, progressive, precision 8, 1024x1024, components 3","md5":"78a07d5c39891d0fd00453aff3aa9ea4","sha1":"7447018f2ca2838b6409bb582d2d406ab1fa57fe","sha256":"68959fcbccbf3c26c5a840be63ebf3d4f57f56a07348af8fa487ac1abc25c0fe","sha512":"85678743fb79551025109b3cacf2d129ae3b5e5ab4187714d6ee0f9dff07386f7927844c3e32caccfc11f398d59dda988b40fd49d04b07486b048ff8bdbe8b15","ssdeep":"6144:RItbsSnVzvJJfVXFfTj8Holgu1PVDX7bM/G1fEdK4LS6DBs:+bTVzJJfxWIKu1P1bjfEdK4O6DBs","tlshash":"e254235c6acc07a5c123617038dbaa28cfdf508740ffb96c789d21b9b645144396ebab","first_seen":"2025-09-09T17:02:28.598105Z","last_seen":"2025-10-13T05:39:26.694291Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1634,"timings":{"blocked":615,"dns":0,"connect":0,"send":0,"wait":545,"receive":474,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/12/B444E7F5-0A23-4A95-95F5-587450DA565B_1_105_c.jpeg?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/12/B444E7F5-0A23-4A95-95F5-587450DA565B_1_105_c.jpeg?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 282070\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"fbdfe81f866f1f9951d56d575df8f51c\"\r\nlast-modified: Sat, 23 Aug 2025 15:52:22 GMT\r\nx-amz-expiration: expiry-date=\"Tue, 23 Sep 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=jpg, origSize=282070, smushRatio=0, skipped=1, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: af93a0a62b67139d2be38b3bd0870d55\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":282070,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], progressive, precision 8, 886x886, components 3","md5":"fbdfe81f866f1f9951d56d575df8f51c","sha1":"054a034cd77a80f6a7a40e561b8cee8adb3507a8","sha256":"248b2ff62b7c4a00fec3e761b77dfceaa1272bc22eebf7cbb071a45797978deb","sha512":"92d614f691326b8f6c541904c3c0164f64350f804054f80e0018af6c3bb18ef7e0b256d18129971a26b607c41d8df7b9bc22bd9bf74954e786c34e856de2bff9","ssdeep":"6144:Waypi8g6ZOCR7IkQqiP8g6xbwis7G8xHsxFfopCJcnpnMyLT:W3HxZOCR7IjRP8g6xb9AG8xHGopf2yf","tlshash":"525423f3dea348f0a65c7b2f96242494d7c6d09d9ce13361909eecdb1542b88e22f61d","first_seen":"2025-09-09T17:02:28.60004Z","last_seen":"2025-10-13T05:39:26.59893Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1689,"timings":{"blocked":603,"dns":0,"connect":0,"send":0,"wait":608,"receive":478,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.purpe.xyz/wp-content/uploads/forminator/491_1fa9b8aa0676b694e4ccfd531ddb9cbe/css/style-491.css?ver=1726104647","fqdn":"www.purpe.xyz","domain":"purpe.xyz","tld":"xyz"},"ip":{"addr":"104.26.14.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purpe.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 21:00:45 GMT","end":"Thu, 16 Oct 2025 22:00:29 GMT"},"fingerprint":{"sha1":"90:EE:7C:69:9E:A3:DB:A0:8D:FE:55:C6:0C:98:33:4A:3B:FF:C0:D0","sha256":"48:F6:F1:AA:03:33:D4:F1:2A:7E:35:81:A4:95:B6:E0:FD:D2:20:9A:AE:0E:04:D5:2B:26:36:11:9B:37:93:88"}}},"request":{"raw":"GET /wp-content/uploads/forminator/491_1fa9b8aa0676b694e4ccfd531ddb9cbe/css/style-491.css?ver=1726104647 HTTP/1.1\r\nHost: www.purpe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:35 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 20 Mar 2025 19:43:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67dc6fce-a7d3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nage: 183519\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dYyqb%2BXoK4FRt6vAgUCDygV%2Fk7BBDL%2FBcURf1qvu0dKlBft4%2FoRl%2BNhDhhzxXo98%2FEG6QdJ40LAKaLkncnnR%2BtfFCQPFu6asCeQ%3D\"}]}\r\ncf-ray: 97c83f999e1f56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42963,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"d7fb8f889e04c382cfd5f575441b8542","sha1":"765c1c979e2647d30196b22510b980a2d068ef24","sha256":"afada71c320ecbb1d01de0f03c3f44d213cb2beac3ab1d7434b12b5d03930e42","sha512":"092032400e42e0cf73399420fc280292daaa3e123933c9f09c622b989b4034b02d901cb9c267917411ec723efc81f078e552643b85fc7a2b1712f0a7caa222b3","ssdeep":"384:IzlwbhIP/Fe/rP5fzqbIUOOiWrey+6T3E/GVrL3FQoqxUmVyhmmaejWqW1B8KfbK:Izl4IPxpszY","tlshash":"1113c222febc13562209383deff49cc51aa923b145919fe97cecd091a1c86e0539bb75","first_seen":"2025-09-09T17:02:28.602145Z","last_seen":"2026-02-18T14:16:50.326349Z","times_seen":8,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.purpe.xyz/wp-content/themes/Divi/core/admin/js/common.js?ver=4.27.4","fqdn":"www.purpe.xyz","domain":"purpe.xyz","tld":"xyz"},"ip":{"addr":"104.26.14.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purpe.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 21:00:45 GMT","end":"Thu, 16 Oct 2025 22:00:29 GMT"},"fingerprint":{"sha1":"90:EE:7C:69:9E:A3:DB:A0:8D:FE:55:C6:0C:98:33:4A:3B:FF:C0:D0","sha256":"48:F6:F1:AA:03:33:D4:F1:2A:7E:35:81:A4:95:B6:E0:FD:D2:20:9A:AE:0E:04:D5:2B:26:36:11:9B:37:93:88"}}},"request":{"raw":"GET /wp-content/themes/Divi/core/admin/js/common.js?ver=4.27.4 HTTP/1.1\r\nHost: www.purpe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:35 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 10 Dec 2024 01:09:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"675794dc-53f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nage: 183518\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hB4nqG%2F2NS2A9tHAnKfjAfk%2B1R4wb4jKrqcUyC2vXDD0KFNXIiswOOGorlvtY3sPJZSL%2FlSJIcW%2BrewHdloNNYzMXSwk5rJ0v4c%3D\"}]}\r\ncf-ray: 97c83f998e1356cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1343,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"d71b75b2327258b1d01d50590c1f67ca","sha1":"b7820e4ffb6becc133c48f66d9f683545530b959","sha256":"1ca76922f55b389b8f590ae7e3bcc3a2dccdce3aff1e5a4335af081b76a414ea","sha512":"1a1930881b4d4d4f092999d6449248aea68bf1756f6dc32a4efce5e7bf240a14633e76988321e5aa3e11144fe5e8c9a443adf0fbf09a9b57a98c4d2d3a9347a2","ssdeep":"","tlshash":"bb218b4947ac9015cd2230f6141a70f8b9be90a7cbe00d7bfeb3e618d6c04a6127de9d","first_seen":"2023-03-07T01:02:48Z","last_seen":"2026-07-26T04:03:16.79046Z","times_seen":65519,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-8T0TTJ20TF","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:39:58 GMT","end":"Mon, 10 Nov 2025 08:39:57 GMT"},"fingerprint":{"sha1":"79:B8:10:4F:C4:95:E3:66:3C:DD:AC:2E:39:EF:9E:E6:F3:F9:ED:EC","sha256":"8E:CE:0A:16:CF:6E:E1:89:55:05:76:86:E1:EF:98:4E:A0:AD:29:9C:BB:91:E6:AA:2D:27:5D:C2:B0:00:47:59"}}},"request":{"raw":"GET /gtag/js?id=G-8T0TTJ20TF HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\nexpires: Tue, 09 Sep 2025 17:01:36 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 138579\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":415955,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"c15c2be47cbde71c28103238285412eb","sha1":"936ade297ce14718998a0c15e4c6a72518964794","sha256":"e210bd7cb6aafa321bf9d8405b523279420cbe3e33b5e23087b4c35d218e1750","sha512":"a5ad5374499916008c8af2efc0287fba70266909070c59f30769fbbb7d9228e9a9bdedaf274b98335c165f61f8826ab6c451bf34d7bc4cff669398dc9af9deb1","ssdeep":"6144:DcIjaFqOpdijhhi4qpVxQ2qPo2ZZJSlaindJ+o47Ajn:xjagOpMjhhi4qpVx5qP/ZZujn","tlshash":"699409ce73d670669396e478503f018ba57b29a2b45cc899f1c9cce42d34a9a4237f7c","first_seen":"2025-09-09T17:02:28.605329Z","last_seen":"2025-09-09T17:02:28.605329Z","times_seen":1,"resource_available":false,"data":null}},"time_used":677,"timings":{"blocked":-1,"dns":0,"connect":22,"send":0,"wait":73,"receive":50,"ssl":532},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/purpe-meme-fb-group-006.jpg?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/purpe-meme-fb-group-006.jpg?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 134370\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"734638d94c9c7833dbecd25d28eea41f\"\r\nlast-modified: Mon, 08 Sep 2025 18:48:55 GMT\r\nx-amz-expiration: expiry-date=\"Thu, 09 Oct 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=jpg, origSize=137492, smushRatio=2.27, skipped=0, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: f1505473069fee1d22d4c6ffbe170bb8\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":134370,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1260x1243, components 3","md5":"734638d94c9c7833dbecd25d28eea41f","sha1":"b0dc1ac657c65b8610524f74031ec1ecfab5e33d","sha256":"14335bbc9ce1c9e2f6ac0f603bbccc992b05e282d78d1a252dc9b5be317887b4","sha512":"6dcb3fa0fa975d8f6b19455516e2e7a995d5ee443bd8a74a67d949c090fb3a3a3c5159134f10f3367dbe4c6fee6a69a7d4575b14b51085f96a68424ecfd15b49","ssdeep":"3072:o7+TOdVZZ8Qoi+UBu38oRXte5FwWmDxQvjmCcr/lSZ0b7OBCs:o7ySBo0sRdsFklQvjmvxSub7KCs","tlshash":"c2d312142f1c8d7aed7aa37616dea1490eaa84eee61e0732f4b803f45ed13e4850dd35","first_seen":"2025-09-09T17:02:28.607573Z","last_seen":"2025-09-09T17:02:28.607573Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1542,"timings":{"blocked":613,"dns":0,"connect":0,"send":0,"wait":754,"receive":175,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/purpe-memes-007.jpeg?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/purpe-memes-007.jpeg?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 174155\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"2339416be28edaaebc119ce117a61e6c\"\r\nlast-modified: Fri, 05 Sep 2025 11:30:15 GMT\r\nx-amz-expiration: expiry-date=\"Mon, 06 Oct 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=jpg, origSize=174155, smushRatio=0, skipped=1, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: acaedf0db555ced9bb49bff44ab48e23\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":174155,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, progressive, precision 8, 1024x1024, components 3","md5":"2339416be28edaaebc119ce117a61e6c","sha1":"363e8a86915b144245d77b769d1b9df988bbf943","sha256":"664862bd37a2b74d610979d4d9384186dc5c902842e492b09bd2016319301536","sha512":"979c0a01f1f39ff3b8123de43bb4fc9038c39ce5a5319255402fc7490df442e06a1c81a866348f87c26ea8160c921b070a560031f496114cc8c037721c377e08","ssdeep":"3072:K91x55XQ6Z8ifuXtftSWdGI/WVlHnCJmIjyZTQiG5kaMejstRIWRD:05X5Z1uXtftSWdr/EVCAIjyZTSmNIOD","tlshash":"400412fd0702a1f3f4823c3dfe284f51d5b7a74f1125a623ed630a0e47a64a42595eba","first_seen":"2025-09-09T17:02:28.609955Z","last_seen":"2025-10-13T05:39:26.526624Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1613,"timings":{"blocked":607,"dns":0,"connect":0,"send":0,"wait":617,"receive":389,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.purpe.xyz/wp-content/plugins/forminator/assets/forminator-ui/css/src/form/forminator-form-flat.base.min.css?ver=1.43.0","fqdn":"www.purpe.xyz","domain":"purpe.xyz","tld":"xyz"},"ip":{"addr":"104.26.14.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purpe.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 21:00:45 GMT","end":"Thu, 16 Oct 2025 22:00:29 GMT"},"fingerprint":{"sha1":"90:EE:7C:69:9E:A3:DB:A0:8D:FE:55:C6:0C:98:33:4A:3B:FF:C0:D0","sha256":"48:F6:F1:AA:03:33:D4:F1:2A:7E:35:81:A4:95:B6:E0:FD:D2:20:9A:AE:0E:04:D5:2B:26:36:11:9B:37:93:88"}}},"request":{"raw":"GET /wp-content/plugins/forminator/assets/forminator-ui/css/src/form/forminator-form-flat.base.min.css?ver=1.43.0 HTTP/1.1\r\nHost: www.purpe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:35 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 06 May 2025 17:50:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"681a4bd4-ab9c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XAcI2xUkcHCBhizGXnO%2FjFAFXA8DcQYMcl2ds6gGQ0%2FraFnBhjiC2Wi4z8Aeg8cbgaomjWRXLOnfsym5xsaHEsntqsZfjSvbYh0%3D\"}]}\r\ncf-ray: 97c83f999e2656cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43932,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (43748), with CRLF line terminators","md5":"9291243acc7896fda3587f6b88e82212","sha1":"9e7adb6a40c057a9396f0c831238ca1a3ab48543","sha256":"33bd312adfcdd6bf73314246b918909dd776ae7a792fdca3976c089d36b97c49","sha512":"dde4acce11b1fe38c4c9a2ba0995a82adccb4e5d8cb036b08c082aeee34dbb53f6e56beab93731d6c296f7f45be29868d6692ea66006c97e767177bfdcfc147a","ssdeep":"768:zspOJu99W0VUBWBaE+C+ItWDZKYh7ovtFPnIK8SqKFS9WPm0ni5csbmMOi/6jOPQ:OeDRy","tlshash":"68134562bdfc2368b1223d35efd42ec06146971205a2dfd65eecec95a2892f92713374","first_seen":"2025-09-09T17:02:28.611858Z","last_seen":"2025-10-13T05:39:26.62408Z","times_seen":2,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-P3HC2W3F","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:36.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:39:58 GMT","end":"Mon, 10 Nov 2025 08:39:57 GMT"},"fingerprint":{"sha1":"79:B8:10:4F:C4:95:E3:66:3C:DD:AC:2E:39:EF:9E:E6:F3:F9:ED:EC","sha256":"8E:CE:0A:16:CF:6E:E1:89:55:05:76:86:E1:EF:98:4E:A0:AD:29:9C:BB:91:E6:AA:2D:27:5D:C2:B0:00:47:59"}}},"request":{"raw":"GET /gtm.js?id=GTM-P3HC2W3F HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\nexpires: Tue, 09 Sep 2025 17:01:36 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Tue, 09 Sep 2025 16:15:43 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 95303\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":271260,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2967)","md5":"6bb386afd4b71e5dcddbb10412124079","sha1":"ee683fbf7c7cb87f1c7aa6144e9648a0d587f9f4","sha256":"df67830785274f4e858b3cc2446835ad1e7e8e35f24ba650a4aefb41dfaf1b5a","sha512":"872e99cc4d11402377674c814b8ad443bb9f247b1415a14a638668ca36e2d85dc287f3f9d2bac2b6090bfbc6e609393bb2f09f5d421441bc23e32e15b4e1620f","ssdeep":"6144:+IjaFyxdajhhi4qsVxQ2q+TZZJSlaindzHA9n:7jaoxEjhhi4qsVx5q+ZZL9n","tlshash":"f64407cd77d6b46683a36478403f114bb13b7992f84cc894e186d8d82e74aaa4237f7d","first_seen":"2025-09-09T17:02:28.614541Z","last_seen":"2025-09-09T17:02:28.614541Z","times_seen":1,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/coinbase-wallet-logo.png?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/coinbase-wallet-logo.png?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 2226\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"0e6f6a0c4812586e574eab94ec093675\"\r\nlast-modified: Mon, 08 Sep 2025 13:08:21 GMT\r\nx-amz-expiration: expiry-date=\"Thu, 09 Oct 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=png, origSize=2226, smushRatio=0, skipped=0, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 762980b7ad6f5335c7a4cd16961fc4b3\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2226,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"0e6f6a0c4812586e574eab94ec093675","sha1":"5da39a6886dfdc89826ffd6a9dee5026152bd490","sha256":"e6d51f18ab4cc3bca6612537bf77459bc62992033d79648b05f1b8b1b32f0b60","sha512":"ce123b67ac41bb5dc2239a55b499665a4f02a6e38e987e3306dc9dde1c52b60d42700ba8fed373b374971e0b6c6475c49a3df2543ca9957bbbe3985e8544810a","ssdeep":"","tlshash":"f9413cc30dd47b89e40dc67608de78bd2332a90a6e2719f90e8df15ecd60769c2e3281","first_seen":"2025-09-09T17:02:28.616331Z","last_seen":"2025-10-13T05:39:26.687837Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1341,"timings":{"blocked":715,"dns":0,"connect":0,"send":0,"wait":626,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/purpe-money-stack.png?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/purpe-money-stack.png?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 72888\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"8a36d14bec5af455b04c4c67db81f0c8\"\r\nlast-modified: Sat, 23 Aug 2025 15:52:09 GMT\r\nx-amz-expiration: expiry-date=\"Tue, 23 Sep 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=png, origSize=72888, smushRatio=0, skipped=0, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: a4d6234f4db3e734101546426bbacf54\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":72888,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 268 x 211, 8-bit/color RGBA, non-interlaced","md5":"8a36d14bec5af455b04c4c67db81f0c8","sha1":"2a3c21ccea96167f0f2358fd53c354e11131a9e6","sha256":"948d8f38772b2963d496ea6023922812783abdb2462d827a00715c3510611990","sha512":"5e19e5557d41d0a14ecf58db6920b21580dd5b5d20772f21fdf4ba94e9f2af873964c91d6ee963e37067594e5312cfb91b0d865038b4bc0869d68f8eeb173981","ssdeep":"1536:gfUurXl92y8GOCXVcNDVrNOZhmgmzsvmVh0Yu07Sp/AjCQ7Eq+Jal:gfTXjjwCFcN/chlmzsvo0YuhpiCle","tlshash":"936302a1330add939715702b996ed5c5273c3063bb31e9a2f8335e1f22de8624359b87","first_seen":"2025-09-09T17:02:28.618131Z","last_seen":"2025-10-13T05:39:26.457588Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1272,"timings":{"blocked":637,"dns":0,"connect":0,"send":0,"wait":446,"receive":189,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/purpe-meme-fb-group-009.jpg?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/purpe-meme-fb-group-009.jpg?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 131020\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"ec69b8b26fe86d2f12cef45044f91e0c\"\r\nlast-modified: Sat, 30 Aug 2025 14:23:16 GMT\r\nx-amz-expiration: expiry-date=\"Tue, 30 Sep 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=jpg, origSize=131020, smushRatio=0, skipped=1, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 50933b078931ee18df2d25da88d1f11b\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":131020,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 960x960, components 3","md5":"ec69b8b26fe86d2f12cef45044f91e0c","sha1":"e980931c01188440980f384a3843cf50da41e389","sha256":"12048c278bf1c0f90b307891344bc68076486f17962b608e4b4536ada9119db3","sha512":"38f7e9397b22b1e19ac92703c0e5fd94d5a68bbadf76845b0e9af324e3d0fcf2261bd332a3a9fdb120448f68d35d680be479e26732eeaa5e53975008acee0b2f","ssdeep":"3072:P2107VyGUaiqcSqrxsYhz3q9u5yTHq3x8WVYE0RJAfMEQJlb/:C0B21NEYhza9u5yTnWP0AkRb/","tlshash":"d2d312eb6c28476bcf4ab1785931260de39c15b472adedf6c89181a2ddc202b747bdc4","first_seen":"2025-09-09T17:02:28.620569Z","last_seen":"2025-10-13T05:39:26.362448Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1362,"timings":{"blocked":630,"dns":0,"connect":0,"send":0,"wait":451,"receive":281,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/12/9F740079-F0BE-44A9-825E-ABA7AF432F31_1_105_c.jpeg?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/12/9F740079-F0BE-44A9-825E-ABA7AF432F31_1_105_c.jpeg?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 283762\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"073441312b37661ed8fdd7a22b762aee\"\r\nlast-modified: Sat, 30 Aug 2025 14:23:16 GMT\r\nx-amz-expiration: expiry-date=\"Tue, 30 Sep 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=jpg, origSize=311706, smushRatio=8.96, skipped=0, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 54b1510642a4c58d580c045661628757\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":283762,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, progressive, precision 8, 886x886, components 3","md5":"073441312b37661ed8fdd7a22b762aee","sha1":"a42c9914da2be032b40666170c541c05200deb9a","sha256":"aedbe57e6aac0ab76a822440ceadd3754a616a79a8465d11575117b0b50547e4","sha512":"8e360f74febbf906a7809548c07453b057a032e62dd0e4a61d4e3d14d5a0aafe0f6a6957679233f6cb3520eecd759557a12744159e7e01e3899fa582c9e384ec","ssdeep":"6144:TuNaDlBkBrOik+hOm4jFoRGSrue6CgM4KLL0AE9HeE2AKF:TuNaheBifKIeRGAuUnrL0THNgF","tlshash":"6554238dde9a8ecdf7d42132477ab154cf2945c8a0f351ee1f2a31bd2ee08056aa15cd","first_seen":"2025-09-09T17:02:28.622691Z","last_seen":"2025-09-09T17:02:28.622691Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1610,"timings":{"blocked":611,"dns":0,"connect":0,"send":0,"wait":539,"receive":460,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/12/D21AC555-7727-499A-B725-C1B34F7D506C_1_105_c.jpeg?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/12/D21AC555-7727-499A-B725-C1B34F7D506C_1_105_c.jpeg?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 163965\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"8f10b2780828fafe83a56db5be58a9ed\"\r\nlast-modified: Sat, 23 Aug 2025 15:52:18 GMT\r\nx-amz-expiration: expiry-date=\"Tue, 23 Sep 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=jpg, origSize=163965, smushRatio=0, skipped=1, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 6f0a6e8e5b253c0cac3a112f02ffe6d7\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":163965,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], progressive, precision 8, 886x886, components 3","md5":"8f10b2780828fafe83a56db5be58a9ed","sha1":"b63b5fae3c0e71bb59fdef6e58141587c9d6a689","sha256":"2d1a87b98df01fb7a1a6d2019b924303e87a7bc7d1196f5d9cef1b092dd8f8b4","sha512":"7fb862178259f95a163431dd59cb3999dadb00bb89cca113c092d0ec598101cdc988f9a4105530e06305b48ca37087447bdc3f7fadb2c10063267176c763f195","ssdeep":"3072:BxiZYrnu/HKPv7+Ug0wfgzXizl8ov6TyYso3HiS9U:BxmYrCM3gqzy+K6Ty5UHx9U","tlshash":"7cf3221b7a59ac7acf74b078f413626928a3cd24c3fd682e94fc3a63839e0546360957","first_seen":"2025-09-09T17:02:28.624558Z","last_seen":"2025-10-13T05:39:26.602662Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1513,"timings":{"blocked":602,"dns":0,"connect":0,"send":0,"wait":552,"receive":359,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/purpe-memes-014.jpeg?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/purpe-memes-014.jpeg?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 186376\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"11b621533def0964f6445e92016ff5e0\"\r\nlast-modified: Sat, 06 Sep 2025 16:36:13 GMT\r\nx-amz-expiration: expiry-date=\"Tue, 07 Oct 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=jpg, origSize=186376, smushRatio=0, skipped=0, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: ef29dbe21ae3c58b508d1f3ca8488ea8\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":186376,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, progressive, precision 8, 1024x1024, components 3","md5":"11b621533def0964f6445e92016ff5e0","sha1":"99386793ee7d2115364c12266de4ba12322f0963","sha256":"8d0f7119acc8caa4ec7d100617dc6df7c6f2bf5027d9fbf844d7b51350254460","sha512":"9e96db96c5afbebdefa52b2c105c07708f0d6db023c2e53b673f24754c7ee96a45b26992f628048881591e3c2afbf0f4cb183b6a4b2e720ee271d7169e7ab50e","ssdeep":"3072:A6y8Tt3kmyYackpbsZLnyhyJP13d2EfKFqscnrTBqJFDkR3txx5C1O+oz:A6ys3vyYN4banyhyJN4EfKF16rTB2FY3","tlshash":"cb041297833ca0d7c44e94fe138b87c7b0171e1e9b3dca4e30ba862235a4545f674b66","first_seen":"2025-09-09T17:02:28.62706Z","last_seen":"2025-09-09T17:02:28.62706Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1647,"timings":{"blocked":605,"dns":0,"connect":0,"send":0,"wait":634,"receive":408,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/cropped-purple-pepe-shades-192x192.png?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:39.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/cropped-purple-pepe-shades-192x192.png?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:39 GMT\r\ncontent-type: image/png\r\ncontent-length: 58506\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"bd7403533b0b8557e10c58b69955481d\"\r\nlast-modified: Mon, 08 Sep 2025 13:08:51 GMT\r\nx-amz-expiration: expiry-date=\"Thu, 09 Oct 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=png, origSize=58506, smushRatio=0, skipped=0, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:39\r\ncdn-edgestorageid: 830\r\ncdn-requestid: aef93b7f383a3f473000a7fec3da1c5f\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":58506,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"bd7403533b0b8557e10c58b69955481d","sha1":"a8a8a11978956f3c73a1708afe93ca40ac84f312","sha256":"535c474fec142a0671b2abc94aeefc33da21fe69691d6ae0064c1b88a398844c","sha512":"a70180fd7cae755d46501f07871e5cc6fd1af810b65b642f8368b23cf54faab897cf85c1b854909aa2245d34560ed7c4a66523a10321b059b8ee7e851d9473c2","ssdeep":"768:Oh0Dk8knqOkrwwk+x9I9KIhah249FBE5Sht2rjyeMQB6umfQ56lutOgbdL4nY:UWOqOetPI9KIdoFv+rOepC4EAOgbZ4nY","tlshash":"9a4302f2ef9b35ed4ab79469b6f38924875a33406f00b11ecef589c0c92d7214638997","first_seen":"2025-09-09T17:02:28.628988Z","last_seen":"2025-10-13T05:39:26.63868Z","times_seen":2,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/purpe-solana-coin.png?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/purpe-solana-coin.png?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 81928\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"6947760dab3531cb1986b7e751685063\"\r\nlast-modified: Sat, 23 Aug 2025 15:52:04 GMT\r\nx-amz-expiration: expiry-date=\"Tue, 23 Sep 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=png, origSize=81928, smushRatio=0, skipped=0, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 712c31b811996a08bfe01e14e3a2dcdd\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":81928,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 373 x 373, 8-bit/color RGBA, non-interlaced","md5":"6947760dab3531cb1986b7e751685063","sha1":"6bd919c334370961918e065ff286a18c2e6f7260","sha256":"67420a00186dff1817e023ab89451a7d80d818a519bba6b733e494dc8599d696","sha512":"c2d9b9b0d80565bf532b0a0cb0b0f82d40588150fe4513e622058d17bf3275b29ccd2937f0dad808d5fbb3346417fd10c57f3d4eb5f8d71712d16efcf11504c0","ssdeep":"1536:2eSo30yH0ett2qkVn3sfaRHRkqoHEJ6HYxtirjZ28jxkw1LuVSndMm:Ag0+ttNkZRyXHlHeEjZ2Kv8VSnOm","tlshash":"2e8312af17501a40d326b62a0fbb4a65161db75a7db116ec6cead013c13cd2fc2293b9","first_seen":"2025-09-09T17:02:28.631214Z","last_seen":"2025-10-13T05:39:26.646389Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1329,"timings":{"blocked":642,"dns":0,"connect":0,"send":0,"wait":476,"receive":211,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/12/3277F9CD-C4DD-4A89-ADB8-F6FDFE9F8C4F.jpeg?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/12/3277F9CD-C4DD-4A89-ADB8-F6FDFE9F8C4F.jpeg?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 229164\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"1e5b3b5396a15c105d7aa74293d38eaf\"\r\nlast-modified: Sat, 23 Aug 2025 15:52:14 GMT\r\nx-amz-expiration: expiry-date=\"Tue, 23 Sep 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=jpg, origSize=229164, smushRatio=0, skipped=1, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 12d7077d141f02ef1f9aa63338502161\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":229164,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], progressive, precision 8, 1079x1106, components 3","md5":"1e5b3b5396a15c105d7aa74293d38eaf","sha1":"7aaf8cee24118c3ddfc854bab8651efcdd31629b","sha256":"3186c5631ef0f841d3cb42965353e96d94ca0ed41128ace5dfc9042787bf8174","sha512":"df112c9c0d4c9506db4667c123819dc3f2dc7008339a2987f30d894db1157239c02c04ccd8206aaf24f405f26f93743698acdf1b297b5158baa1d1bf466ff696","ssdeep":"6144:fGmYVTBQVKe426gk63LF438ApxSPKgkBt:fJ+5R6ixSgBt","tlshash":"392423874b56aede8b00b070c29359a0bf9b8a4c6458a1351e4ff8d59ddaf7423d4cf8","first_seen":"2025-09-09T17:02:28.633085Z","last_seen":"2025-10-13T05:39:26.673766Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1689,"timings":{"blocked":604,"dns":0,"connect":0,"send":0,"wait":647,"receive":438,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.purpe.xyz/wp-includes/css/buttons.min.css?ver=6.8.2","fqdn":"www.purpe.xyz","domain":"purpe.xyz","tld":"xyz"},"ip":{"addr":"104.26.14.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purpe.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 21:00:45 GMT","end":"Thu, 16 Oct 2025 22:00:29 GMT"},"fingerprint":{"sha1":"90:EE:7C:69:9E:A3:DB:A0:8D:FE:55:C6:0C:98:33:4A:3B:FF:C0:D0","sha256":"48:F6:F1:AA:03:33:D4:F1:2A:7E:35:81:A4:95:B6:E0:FD:D2:20:9A:AE:0E:04:D5:2B:26:36:11:9B:37:93:88"}}},"request":{"raw":"GET /wp-includes/css/buttons.min.css?ver=6.8.2 HTTP/1.1\r\nHost: www.purpe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:35 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 21 Jul 2024 22:03:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"669d85c1-17ad\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QVXFZPbx8%2Fq7h%2B6XRmSbJkx3aqUFeb8F3LA7SjZdjKvhbsgOXZNs%2FK8wHU5Qs4f2NF1Xs6Zswhjl7c5M63Zehe%2FSL%2Fh26T29I40%3D\"}]}\r\ncf-ray: 97c83f999e2756cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6061,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6026)","md5":"5c113141f5f44bd474a14e5b75e00595","sha1":"9f06dcadb72fc200d5a9b258a58f3804d6f4181a","sha256":"d5a5fea14a12ec9ee91f044a7ff810602662c97d3fad8728497ea4e8c5aef0eb","sha512":"71229398a5cb3cb084aec606a988a92674d3a035df76b0360206e688673b31b07136e8462c624aced748251988ca56f4e4abb0b607eaaa5d173aab325eae4031","ssdeep":"96:lBIiP1NQxABpLsSzYOzCRF3HohBmdOI1q6nW0oTX2E2d/uj2Oc1Zh+r5wuHCcMMI:TZhTw/DV3CXdL+","tlshash":"c1c18eebd141d3193e1276e592626da2f32ffa1590b86be6ac1461fc42c5070341eaeb","first_seen":"2024-02-14T11:04:38Z","last_seen":"2026-07-26T02:39:28.444544Z","times_seen":16255,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.purpe.xyz/wp-content/themes/Divi/core/admin/fonts/modules/all/modules.woff","fqdn":"www.purpe.xyz","domain":"purpe.xyz","tld":"xyz"},"ip":{"addr":"104.26.14.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:36.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purpe.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 21:00:45 GMT","end":"Thu, 16 Oct 2025 22:00:29 GMT"},"fingerprint":{"sha1":"90:EE:7C:69:9E:A3:DB:A0:8D:FE:55:C6:0C:98:33:4A:3B:FF:C0:D0","sha256":"48:F6:F1:AA:03:33:D4:F1:2A:7E:35:81:A4:95:B6:E0:FD:D2:20:9A:AE:0E:04:D5:2B:26:36:11:9B:37:93:88"}}},"request":{"raw":"GET /wp-content/themes/Divi/core/admin/fonts/modules/all/modules.woff HTTP/1.1\r\nHost: www.purpe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://claim-purpe.xyz/\r\nOrigin: https://claim-purpe.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: font/woff\r\ncontent-length: 92084\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 10 Dec 2024 01:09:48 GMT\r\netag: \"675794dc-167b4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\nx-accel-buffering: yes\r\nage: 183517\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=53dn9QGufsfS3VHj3rHLJYxVOd5M0c1GP3Kw4%2FRry8oeC%2BggBBZsuN0B5%2BmGArKSnXyohQqqwmi2CoB00vOm48xQqhjNf628jKejbQ%3D%3D\"}]}\r\nvary: accept-encoding\r\naccept-ranges: bytes\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 97c83f9fb91a76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92084,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 92084, version 2.4","md5":"4f7c51948ce1b802a13ebbccec151d0c","sha1":"5b1d3cd0929108da4b6334c4a487db08c9520f1d","sha256":"fe67b77ac7e0ef4b482dafb86adfa403db1b89a2f337d2dc8bd1278cfe975196","sha512":"87fab156e0c1e79f4dd07075cee8905dcc8c01c7708fbf6e9f6592f1c0f62083c86d0076ec23f73fc4351b51d6e03951ff7aece0ad9305488b910a8f8fefb023","ssdeep":"1536:n2S6qLRqKELiXMjCs7VDmGWALXJ8jzxJ9OIgr26F9BEFDTs8/M/OuWhX5j63QWIh:n2S6qLRqKELiXMjCs7VDmGWAN8H79OIl","tlshash":"e593f97bc3cbcf7fe955e775087b4a252dfadb26926fc40e9a451c869504cf80d28290","first_seen":"2023-09-22T00:38:17Z","last_seen":"2026-07-26T04:11:29.649445Z","times_seen":45189,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":9,"dns":1,"connect":0,"send":0,"wait":27,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.purpe.xyz/wp-admin/admin-ajax.php","fqdn":"www.purpe.xyz","domain":"purpe.xyz","tld":"xyz"},"ip":{"addr":"104.26.14.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:38.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purpe.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 21:00:45 GMT","end":"Thu, 16 Oct 2025 22:00:29 GMT"},"fingerprint":{"sha1":"90:EE:7C:69:9E:A3:DB:A0:8D:FE:55:C6:0C:98:33:4A:3B:FF:C0:D0","sha256":"48:F6:F1:AA:03:33:D4:F1:2A:7E:35:81:A4:95:B6:E0:FD:D2:20:9A:AE:0E:04:D5:2B:26:36:11:9B:37:93:88"}}},"request":{"raw":"POST /wp-admin/admin-ajax.php HTTP/1.1\r\nHost: www.purpe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nContent-Length: 199\r\nOrigin: https://claim-purpe.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Sep 2025 17:01:38 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Accept-Encoding\r\ncf-edge-cache: cache,platform=wordpress\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-frame-options: SAMEORIGIN\r\nx-cache-enabled: true\r\nx-cache-bypass-reason: Special url\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C6zlx3HxysQxPsuNDEOPvPX%2BkxNlcK7sWumkSgweTRz5GtHrE54E6vMBrtuipukeWSHHmahymK5OIYBJbRRc0NxMyg2%2BSJ1YeXoS8w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97c83fa97a9376ef-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4455,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"a4c92e47ea713dfcada9e0588e51137d","sha1":"8f72d5073702da6b4039918231e5dafb8e6f79fb","sha256":"1415724506de8338be7e3f47dd90a6d3c2b7a6c48374c490ccfda1c8e1e7b926","sha512":"748a1053bb0287d892c25559ad4de69d8fa11d68276852eb5e9c84b82b12b0ebfef048694cba855a2579b9687e531a9fa8c27b300bc773555f8a9e68b3179bfd","ssdeep":"96:1ZKB/5ZCZKv5pURHEDD1a7AAFlOAX/YeN6YpL7RVAABAuHvtGZz:1ZK9GZKvAo1a7AAFl3QeN6YpPQAqqS","tlshash":"62912e107d68d26689062bf4f2fd1e356a9b7700b9102e4897ccd83e929cdb66313f74","first_seen":"2025-09-09T17:02:28.636487Z","last_seen":"2025-09-09T17:02:28.636487Z","times_seen":1,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.purpe.xyz/wp-content/themes/Purpe/ctc-style.css?ver=6.8.2","fqdn":"www.purpe.xyz","domain":"purpe.xyz","tld":"xyz"},"ip":{"addr":"104.26.14.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purpe.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 21:00:45 GMT","end":"Thu, 16 Oct 2025 22:00:29 GMT"},"fingerprint":{"sha1":"90:EE:7C:69:9E:A3:DB:A0:8D:FE:55:C6:0C:98:33:4A:3B:FF:C0:D0","sha256":"48:F6:F1:AA:03:33:D4:F1:2A:7E:35:81:A4:95:B6:E0:FD:D2:20:9A:AE:0E:04:D5:2B:26:36:11:9B:37:93:88"}}},"request":{"raw":"GET /wp-content/themes/Purpe/ctc-style.css?ver=6.8.2 HTTP/1.1\r\nHost: www.purpe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:35 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 05 Sep 2024 01:34:37 GMT\r\nvary: accept-encoding\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\ncf-cache-status: HIT\r\nage: 183522\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8cbyLLpSqhtV5B49gOS1O%2Fg06GCnK9HBD%2FWLuodTYvW4X%2BOipiLK02qZKrxldWiaVQNgadnr6jKzAHGiXhJLnkOUntUsAHpMn1k%3D\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\netag: W/\"66d90aad-3c\"\r\ncontent-encoding: br\r\ncf-ray: 97c83f999e2d56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"9500f61130d8e62c0e4818aa4e5fa6e1","sha1":"b963ff17aa2f50a680e1813013fe6efea129f33c","sha256":"19d223a333438fb5d52b81bf61b212df75717d43b109ada6a287b73e050a28f3","sha512":"2c11f6d668b4196b8abadaf59d20c06465ad1d8abb5c0ec84655c75299ce75805e596ff17be8e94145c90eb38ecded5ce90291bef8efc4037a204e6d10c2ca3c","ssdeep":"","tlshash":"d8a002688233c17221945ada9814e30784522b4201259741150d405544550bf256ef55","first_seen":"2025-09-09T17:02:28.638226Z","last_seen":"2026-02-18T14:16:50.308163Z","times_seen":8,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":145,"dns":97,"connect":5,"send":0,"wait":14,"receive":0,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-purpe.xyz/fonts.gstatic.com/s/rubik/v30/iJWKBXyIfDnIV7nBrXyw023e.woff2","fqdn":"claim-purpe.xyz","domain":"claim-purpe.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:36.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-purpe.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Sep 2025 17:41:21 GMT","end":"Fri, 05 Dec 2025 18:41:07 GMT"},"fingerprint":{"sha1":"E7:5B:AD:02:4C:8B:43:9A:40:BB:19:AF:78:D1:31:41:45:E1:9D:2B","sha256":"FA:41:2E:D8:E6:4C:D5:96:19:C5:E9:49:2E:4B:00:CF:B7:E6:74:15:5B:D5:C4:24:D3:C9:F0:C0:62:1D:A7:9F"}}},"request":{"raw":"GET /fonts.gstatic.com/s/rubik/v30/iJWKBXyIfDnIV7nBrXyw023e.woff2 HTTP/1.1\r\nHost: claim-purpe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Tue, 09 Sep 2025 17:01:36 GMT\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Wypiaw3tba%2BQugAe%2FFf%2F%2FPT%2B9vknLLohIoqbEvVk0AZ%2BRrOEO5Nk1GbNPzFs7AI%2BZJFnSAqg07lNrXPT2H3wTNx%2BDdOs8v71O%2BcluUhTKbd2P%2FwsjgeZ0AMLuTAL8A1xslM%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-ray: 97c83f9fafebb4f1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1581036,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10138)","md5":"aa1adcd5a77c8f4f2f6598557bbcb306","sha1":"43555378595bfe0177348c8ae05ee222ad1fc882","sha256":"e388e1b512947f7046784798347dd232fd975cd8ecdb5ab8e5774f8fe70bf6e7","sha512":"3d4cc18bf3e4128c1fe3e894091b4ddf7b85585487d150e5429339898dbe44cb5353b9fa11ce7d213543fdb3acb96b170f9dc70631564da7b642b7538c0948da","ssdeep":"24576:HKSiBJXSQ3fucSH54skc2XVeIUjnEgIPX72bgl2jKwj6xCRHqY2G0:HKSiBJXSQ3fucSH54skc2XVeIUjnEgIj","tlshash":"9b25534d4f7160d072679280abdd1f588a3cb163b4a204ca7bdd6507dec2ee911a63bf","first_seen":"2025-09-09T17:02:28.544208Z","last_seen":"2025-09-09T17:02:28.544208Z","times_seen":1,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"claim-purpe.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/geckoterminal-logo.png?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/geckoterminal-logo.png?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 11086\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"c8b3ba6cd3a6d5df5a916c3f61825e68\"\r\nlast-modified: Mon, 08 Sep 2025 13:08:33 GMT\r\nx-amz-expiration: expiry-date=\"Thu, 09 Oct 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=png, origSize=11247, smushRatio=1.43, skipped=0, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 3573eeee6359f79d04e75a560d8908a8\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":11086,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"c8b3ba6cd3a6d5df5a916c3f61825e68","sha1":"76ca73ac4e3f85576aa03cd695102d7adc59082f","sha256":"efc82484e6bdea5309673b7292f29ac1870d5f123fcb63819485f1938015a90b","sha512":"f1af984aa7ece4db6c1bc5350ee763f7d5bba12ba10e1f0061ac8ef2609facd0fc901d437a04c2a45ba7e4e79fda8ce844edf8d3464a3b7a016ff68fb07cf1b1","ssdeep":"192:aDloU0mQgxfJNR7ZPFziZpcl/xRS4jqW7VVsBS5+eCVlt:wqujxffRXuZpURvj5VsU5uVX","tlshash":"e932d06ddd4082e04dfe14741219c5eed1278ea896b0f28e7cd265da680977ed3b412e","first_seen":"2025-09-09T17:02:28.640259Z","last_seen":"2025-10-13T05:39:26.260754Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1318,"timings":{"blocked":709,"dns":0,"connect":0,"send":0,"wait":608,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/purpe-meme-fb-group-010.jpg?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/purpe-meme-fb-group-010.jpg?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 103162\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"69de14f9b19b10aea03a0ff7af40c6d6\"\r\nlast-modified: Sat, 23 Aug 2025 15:52:08 GMT\r\nx-amz-expiration: expiry-date=\"Tue, 23 Sep 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=jpg, origSize=103162, smushRatio=0, skipped=1, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 2d3a7cfd910ab661edf543be086b60b6\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":103162,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1098x1098, components 3","md5":"69de14f9b19b10aea03a0ff7af40c6d6","sha1":"7940999dfbb871c604b95ec34b8b8bbf36cd5afc","sha256":"d0029e840b8162cc0ef9580e624da964615233676e150e18f354345a9cac5c66","sha512":"1d3e0eaac7696f4c8d8335e42807dade8562f3373bfa68d2c95ced9a005e9ac1f4a632fd6b9d61ead7fd94b3606692ba23c05975f61a5635b80818fb902162a1","ssdeep":"1536:Q8QCQZ/kW3paNu1tQiTv+umTRMCKKf/q+E4oVr1GvU5bQIqfV0X5kTxSHlmQgacZ:qCQNzE0HTGu2MC7HObVrEApyJQZclj","tlshash":"f1a3025f827a0e15c423b73c5077efaa211497725b8cf80e9e49517ca2afdd4e853a4c","first_seen":"2025-09-09T17:02:28.642075Z","last_seen":"2025-10-13T05:39:26.391189Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1321,"timings":{"blocked":625,"dns":0,"connect":0,"send":0,"wait":452,"receive":244,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/12/4E74CC03-6701-4CF3-B0AC-5EE895F18826_1_105_c.jpeg?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/12/4E74CC03-6701-4CF3-B0AC-5EE895F18826_1_105_c.jpeg?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 184915\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"72124be54bc863c567516c06a4183cd9\"\r\nlast-modified: Sat, 23 Aug 2025 15:52:16 GMT\r\nx-amz-expiration: expiry-date=\"Tue, 23 Sep 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=jpg, origSize=184915, smushRatio=0, skipped=1, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: bbe7946cf30a7bc00fbf963227ad970d\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":184915,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], progressive, precision 8, 888x884, components 3","md5":"72124be54bc863c567516c06a4183cd9","sha1":"244e11bf50234e957ece015dd2b69c74dfa5db58","sha256":"e43a41da49138c72bcb2d0644b10dd5c0627970ed2fcc93ac1effdda6f66db41","sha512":"5cc860564f0f7dde047b8ffd3233b9090d6207a5431f45a0b305c69c0304b5bf93b07b5571a0c830040a41fe3d974269791d2cd4db31d5142f4719f50b7a3c91","ssdeep":"3072:lXJlXAA7po1cJCv7vj0btiO33knWamzmaF2KaQeW4MPPjbzJq:lXADb/0RiO33Sbmzm17qPjE","tlshash":"1a0412532a9bcd08e2af727a8605fe210f43177dfaef912c3e9462a59149494cee51b0","first_seen":"2025-09-09T17:02:28.643841Z","last_seen":"2025-10-13T05:39:26.482749Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1272,"timings":{"blocked":603,"dns":0,"connect":0,"send":0,"wait":622,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.purpe.xyz/wp-content/plugins/forminator/assets/forminator-ui/css/src/forminator-utilities.min.css?ver=1.43.0","fqdn":"www.purpe.xyz","domain":"purpe.xyz","tld":"xyz"},"ip":{"addr":"104.26.14.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purpe.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 21:00:45 GMT","end":"Thu, 16 Oct 2025 22:00:29 GMT"},"fingerprint":{"sha1":"90:EE:7C:69:9E:A3:DB:A0:8D:FE:55:C6:0C:98:33:4A:3B:FF:C0:D0","sha256":"48:F6:F1:AA:03:33:D4:F1:2A:7E:35:81:A4:95:B6:E0:FD:D2:20:9A:AE:0E:04:D5:2B:26:36:11:9B:37:93:88"}}},"request":{"raw":"GET /wp-content/plugins/forminator/assets/forminator-ui/css/src/forminator-utilities.min.css?ver=1.43.0 HTTP/1.1\r\nHost: www.purpe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:35 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 06 May 2025 17:50:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"681a4bd4-2a0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nage: 183519\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IS2HjqNbiumAXRnZxw7xZ40M9%2B%2B1vNGIUW2osmDtvZuljrSvwNd5hx8b%2BCd50nOE9CLBWb0H6eUKGgby0pswju9VNL00W4z90Ck%3D\"}]}\r\ncf-ray: 97c83f999e2356cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":672,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (492), with CRLF line terminators","md5":"5918adc62f6f04da5eb22cdfdbbbd917","sha1":"4f234fd721c89db63991fa2f9a0c63ee01616f3e","sha256":"6cb1f0a82438369541144bdcc72deacd81fe03e3b25bf975f848dd2fa6408ae7","sha512":"d3ea67b2571fcd2c3aa341cb1c34cce2181cbde4cace144af54d38612b4ebd3891e62934395b48596488ee3cc4d68e4aec3ea195672eca80a50bece65bd6ced9","ssdeep":"","tlshash":"b2012b77f9a11204e23159649b837fbeda7d426457019e69bd58fb7407414df0703b28","first_seen":"2025-09-09T17:02:28.645925Z","last_seen":"2025-10-13T05:39:26.605899Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-purpe.xyz/fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-mu0SC55I.woff2","fqdn":"claim-purpe.xyz","domain":"claim-purpe.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:36.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-purpe.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Sep 2025 17:41:21 GMT","end":"Fri, 05 Dec 2025 18:41:07 GMT"},"fingerprint":{"sha1":"E7:5B:AD:02:4C:8B:43:9A:40:BB:19:AF:78:D1:31:41:45:E1:9D:2B","sha256":"FA:41:2E:D8:E6:4C:D5:96:19:C5:E9:49:2E:4B:00:CF:B7:E6:74:15:5B:D5:C4:24:D3:C9:F0:C0:62:1D:A7:9F"}}},"request":{"raw":"GET /fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-mu0SC55I.woff2 HTTP/1.1\r\nHost: claim-purpe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Tue, 09 Sep 2025 17:01:36 GMT\r\ncf-cache-status: EXPIRED\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Uh0GzNFW3qPdDjt0NXZN3yjCcDvggkXDndBwYVncYx1d2VS4laoC75R7IAnKerTvrnE%2FrxFpaesCWhj5utOdwPfy0on9w7GLNMrskb2O0MRPs%2FqfefON89brnEVATzFOf%2FA%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-ray: 97c83f9f8fc5b4f1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1581036,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10138)","md5":"aa1adcd5a77c8f4f2f6598557bbcb306","sha1":"43555378595bfe0177348c8ae05ee222ad1fc882","sha256":"e388e1b512947f7046784798347dd232fd975cd8ecdb5ab8e5774f8fe70bf6e7","sha512":"3d4cc18bf3e4128c1fe3e894091b4ddf7b85585487d150e5429339898dbe44cb5353b9fa11ce7d213543fdb3acb96b170f9dc70631564da7b642b7538c0948da","ssdeep":"24576:HKSiBJXSQ3fucSH54skc2XVeIUjnEgIPX72bgl2jKwj6xCRHqY2G0:HKSiBJXSQ3fucSH54skc2XVeIUjnEgIj","tlshash":"9b25534d4f7160d072679280abdd1f588a3cb163b4a204ca7bdd6507dec2ee911a63bf","first_seen":"2025-09-09T17:02:28.544208Z","last_seen":"2025-09-09T17:02:28.544208Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"claim-purpe.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinmarketcop-api.com/@v1/services/connector?referrer=claim-purpe.xyz","fqdn":"coinmarketcop-api.com","domain":"coinmarketcop-api.com","tld":"com"},"ip":{"addr":"172.67.141.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:38.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinmarketcop-api.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 15:47:41 GMT","end":"Thu, 20 Nov 2025 16:45:54 GMT"},"fingerprint":{"sha1":"B0:CF:37:BB:3E:5D:19:87:C9:06:DA:2B:3A:C5:0B:77:11:4C:A2:47","sha256":"FC:6B:44:07:4E:C2:B7:3E:B8:95:B0:E9:D0:96:D9:1C:DC:FE:A5:D7:F6:6B:A4:D5:79:CF:BE:F3:E3:05:67:8E"}}},"request":{"raw":"OPTIONS /@v1/services/connector?referrer=claim-purpe.xyz HTTP/1.1\r\nHost: coinmarketcop-api.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: authorization,x-auth-key,x-direction-safe,x-scale-referrer\r\nReferer: https://claim-purpe.xyz/\r\nOrigin: https://claim-purpe.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Sep 2025 17:01:40 GMT\r\ncontent-length: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://claim-purpe.xyz\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS,PATCH\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1h4zFbX839FIGku3Dby%2Fp2UShhC6sXAnHlgemwI0xwtlT6kWFrraec1A9ip%2F0xlNt%2FSg1f7JBkRXVGNEwa5mnRBwaXXe%2FTH83diHxiuTfJLvPOs%3D\"}]}\r\ncf-ray: 97c83fad1b64b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T04:24:09.297648Z","times_seen":17539466,"resource_available":true,"data":null}},"time_used":1339,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1339,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"coinmarketcop-api.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/purpe-in-space.png?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/purpe-in-space.png?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 586044\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"da79f63b1d3f3e835ad08233cabb2b37\"\r\nlast-modified: Sat, 23 Aug 2025 15:52:14 GMT\r\nx-amz-expiration: expiry-date=\"Tue, 23 Sep 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=png, origSize=586044, smushRatio=0, skipped=0, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 9c7abd78bbb6bf7e05d4380c0d097357\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":586044,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 527 x 756, 8-bit/color RGBA, non-interlaced","md5":"da79f63b1d3f3e835ad08233cabb2b37","sha1":"39c5c191fd29e1a93fa4dde152844c939a4cc40c","sha256":"f86333393ea2215c882d2266a7797294a0ba35d69068da1388775e8a244757e1","sha512":"ee09f197b7976c9212c75ad490de91e7e0b500e0be24c5e9fe3a8465c6790e33225d734b0926b04650f0e614a5a44d177f2bb58578e1be77cfd86cf95ea22207","ssdeep":"12288:rQ8ggJB9O/a4PVxjTiYTbjz8Twa3LYCWD73IdQPYTjyti:tBki4PVgYv8R7YT73IdKqV","tlshash":"7cc423ab026a21d13c921371373ce55f32ac9f5a1ff08e90a134f154ab674dbe2d52b6","first_seen":"2025-09-09T17:02:28.647614Z","last_seen":"2025-10-13T05:39:26.354147Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1303,"timings":{"blocked":634,"dns":0,"connect":0,"send":0,"wait":169,"receive":500,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/purpe-memes-006.jpeg?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/purpe-memes-006.jpeg?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 176470\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"7495c11db3fc9836a53af28a8c433c79\"\r\nlast-modified: Sat, 30 Aug 2025 14:23:15 GMT\r\nx-amz-expiration: expiry-date=\"Tue, 30 Sep 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=jpg, origSize=176470, smushRatio=0, skipped=0, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: a1b3545590f4f4ed465d41d97f714ee3\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":176470,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, progressive, precision 8, 1024x1024, components 3","md5":"7495c11db3fc9836a53af28a8c433c79","sha1":"aaa326d230997ad1ec5938ed64f97c40552df4ac","sha256":"4732d777b95e4067f463f990ab00e74ca8b1aecac4393ce156c46a797a07fbbf","sha512":"c267929b0b1eb26c97d29e07ee88b3ed8d3713fb10b0cda4ee07818691c6799acb0a75979fac955bdd4a640d288c9fec572f8fe3f063a136cbc53f6d24e97307","ssdeep":"3072:O41H49w0b8pBV3ntqyKnokVXBAcf4QIzBnR9LROhr19wuCOX4Z1:OgHaWprA/YQABnRFRI7wuJX4P","tlshash":"9c04122762878164c15f0273c1cf6be496974c1bff8e881e528e473e56938e92ce558d","first_seen":"2025-09-09T17:02:28.649499Z","last_seen":"2025-09-09T17:02:28.649499Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1269,"timings":{"blocked":615,"dns":0,"connect":0,"send":0,"wait":594,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/12/C993C307-CAC0-46ED-A853-D5EA996E8F3E_1_105_c.jpeg?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/12/C993C307-CAC0-46ED-A853-D5EA996E8F3E_1_105_c.jpeg?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 236673\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"40d243ea93ae2c49cbdc74e451cd7a19\"\r\nlast-modified: Sat, 23 Aug 2025 15:52:09 GMT\r\nx-amz-expiration: expiry-date=\"Tue, 23 Sep 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=jpg, origSize=236673, smushRatio=0, skipped=1, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: e626c0a4200a847b3acab2dd7194e11a\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":236673,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], progressive, precision 8, 886x886, components 3","md5":"40d243ea93ae2c49cbdc74e451cd7a19","sha1":"1054eaff172a63cbbea10a3009307298a0c1920f","sha256":"c0899997183ae205267fd6f39f444b83f8c4fa4b64d353b57156735d5473f4ab","sha512":"db0b1d656c1061a54f72f67d5b37bdc45676dc302493c9a393d527b8edc74bdeb2d5dfd766f18693f0da965d45fbe0bb34b73139a017473b588ff68639a121c0","ssdeep":"6144:etPaDZDRXa/Fy+NsASrKoPU5im7ybend0P6yzME:eNM1Ed30m7ywrbE","tlshash":"8c3423b6874521510a951ba40937df232d2776ef49f40a2d3ee458623fef4dca18a3b3","first_seen":"2025-09-09T17:02:28.651227Z","last_seen":"2025-10-13T05:39:26.550327Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1757,"timings":{"blocked":612,"dns":0,"connect":0,"send":0,"wait":717,"receive":428,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/solana-logo.png?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/solana-logo.png?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 28080\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"ce7c2fe9011f0dde2e469faec3130a0b\"\r\nlast-modified: Mon, 08 Sep 2025 13:08:45 GMT\r\nx-amz-expiration: expiry-date=\"Thu, 09 Oct 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=png, origSize=28080, smushRatio=0, skipped=0, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 70a0239237828129df4886f962f60dbe\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":28080,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 847 x 180, 8-bit/color RGBA, non-interlaced","md5":"ce7c2fe9011f0dde2e469faec3130a0b","sha1":"1622f4db39c9a9e8134172e64932996dccf00a72","sha256":"b07eed4b067133d8b187ceb3abbc0a9292afc2444c1e437fbbac3d3df98de17f","sha512":"7d3860fb474474f4c52c92a3dc02c9e4a9ce070addd41c9e827b99736e1f4941c03c5c90d3304b9e9c4a8d057b847f659465df50a518c08a4ac91d921fb58ba7","ssdeep":"768:+L+I4TKJm7st/fqkgu0h+5JgKlocIxZOmNzFouf2:+Lys1t/r2hCorxZzFo02","tlshash":"82c2e0dc41b1d9260fe721386c7e1da6c5065976a3e35ce3c7a5ad8c88b3f1e582188f","first_seen":"2025-09-09T17:02:28.652894Z","last_seen":"2025-10-13T05:39:26.313832Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1442,"timings":{"blocked":612,"dns":0,"connect":0,"send":0,"wait":725,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-purpe.xyz/fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-mu0SC55I.woff2","fqdn":"claim-purpe.xyz","domain":"claim-purpe.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:36.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-purpe.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Sep 2025 17:41:21 GMT","end":"Fri, 05 Dec 2025 18:41:07 GMT"},"fingerprint":{"sha1":"E7:5B:AD:02:4C:8B:43:9A:40:BB:19:AF:78:D1:31:41:45:E1:9D:2B","sha256":"FA:41:2E:D8:E6:4C:D5:96:19:C5:E9:49:2E:4B:00:CF:B7:E6:74:15:5B:D5:C4:24:D3:C9:F0:C0:62:1D:A7:9F"}}},"request":{"raw":"GET /fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-mu0SC55I.woff2 HTTP/1.1\r\nHost: claim-purpe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Tue, 09 Sep 2025 17:01:36 GMT\r\ncf-cache-status: EXPIRED\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=BDriH7aH2LSMG4U0iSuXUfzosTHv0wvSgZ5FMpQXLWfmLoUE9cIZzIbRXp194WuyZohFazpWqwMcjD75TXHj7bAUBB69SiCRns2K1khPrHJW1cSidw3k%2BKB72pzbQ%2BcUzqQ%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-ray: 97c83f9f9fdbb4f1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1581036,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10138)","md5":"aa1adcd5a77c8f4f2f6598557bbcb306","sha1":"43555378595bfe0177348c8ae05ee222ad1fc882","sha256":"e388e1b512947f7046784798347dd232fd975cd8ecdb5ab8e5774f8fe70bf6e7","sha512":"3d4cc18bf3e4128c1fe3e894091b4ddf7b85585487d150e5429339898dbe44cb5353b9fa11ce7d213543fdb3acb96b170f9dc70631564da7b642b7538c0948da","ssdeep":"24576:HKSiBJXSQ3fucSH54skc2XVeIUjnEgIPX72bgl2jKwj6xCRHqY2G0:HKSiBJXSQ3fucSH54skc2XVeIUjnEgIj","tlshash":"9b25534d4f7160d072679280abdd1f588a3cb163b4a204ca7bdd6507dec2ee911a63bf","first_seen":"2025-09-09T17:02:28.544208Z","last_seen":"2025-09-09T17:02:28.544208Z","times_seen":1,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"claim-purpe.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-purpe.xyz/fonts.gstatic.com/s/rubik/v30/iJWKBXyIfDnIV7nBrXyw023e.woff2","fqdn":"claim-purpe.xyz","domain":"claim-purpe.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:37.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-purpe.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Sep 2025 17:41:21 GMT","end":"Fri, 05 Dec 2025 18:41:07 GMT"},"fingerprint":{"sha1":"E7:5B:AD:02:4C:8B:43:9A:40:BB:19:AF:78:D1:31:41:45:E1:9D:2B","sha256":"FA:41:2E:D8:E6:4C:D5:96:19:C5:E9:49:2E:4B:00:CF:B7:E6:74:15:5B:D5:C4:24:D3:C9:F0:C0:62:1D:A7:9F"}}},"request":{"raw":"GET /fonts.gstatic.com/s/rubik/v30/iJWKBXyIfDnIV7nBrXyw023e.woff2 HTTP/1.1\r\nHost: claim-purpe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _pk_id.17133.f8be=8f118c6db6020ae1.1757437297.; _pk_ses.17133.f8be=1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:37 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Tue, 09 Sep 2025 17:01:37 GMT\r\ncf-cache-status: EXPIRED\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=CHrWjkuAvixEzgLMmbrZECIEp8Wzyj7%2FL1DPwSJp6jrnl7Z2t2h1lqIUjmD9CI1v%2BMSr9JFHi9YLVIEpsJXX5CJci9EtdgYu%2FCCmbZgy34FBVLbe4BRpGYpDk8eYZkiMwjs%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-ray: 97c83fa20a3cb4f1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1581036,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10138)","md5":"aa1adcd5a77c8f4f2f6598557bbcb306","sha1":"43555378595bfe0177348c8ae05ee222ad1fc882","sha256":"e388e1b512947f7046784798347dd232fd975cd8ecdb5ab8e5774f8fe70bf6e7","sha512":"3d4cc18bf3e4128c1fe3e894091b4ddf7b85585487d150e5429339898dbe44cb5353b9fa11ce7d213543fdb3acb96b170f9dc70631564da7b642b7538c0948da","ssdeep":"24576:HKSiBJXSQ3fucSH54skc2XVeIUjnEgIPX72bgl2jKwj6xCRHqY2G0:HKSiBJXSQ3fucSH54skc2XVeIUjnEgIj","tlshash":"9b25534d4f7160d072679280abdd1f588a3cb163b4a204ca7bdd6507dec2ee911a63bf","first_seen":"2025-09-09T17:02:28.544208Z","last_seen":"2025-09-09T17:02:28.544208Z","times_seen":1,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"claim-purpe.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"coinmarketcop-api.com/@v1/services/temp-link/create?referrer=claim-purpe.xyz","fqdn":"coinmarketcop-api.com","domain":"coinmarketcop-api.com","tld":"com"},"ip":{"addr":"172.67.141.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:38.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinmarketcop-api.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 15:47:41 GMT","end":"Thu, 20 Nov 2025 16:45:54 GMT"},"fingerprint":{"sha1":"B0:CF:37:BB:3E:5D:19:87:C9:06:DA:2B:3A:C5:0B:77:11:4C:A2:47","sha256":"FC:6B:44:07:4E:C2:B7:3E:B8:95:B0:E9:D0:96:D9:1C:DC:FE:A5:D7:F6:6B:A4:D5:79:CF:BE:F3:E3:05:67:8E"}}},"request":{"raw":"OPTIONS /@v1/services/temp-link/create?referrer=claim-purpe.xyz HTTP/1.1\r\nHost: coinmarketcop-api.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type,x-auth-key,x-auth-key-v2,x-direction-safe,x-scale-referrer\r\nReferer: https://claim-purpe.xyz/\r\nOrigin: https://claim-purpe.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Sep 2025 17:01:39 GMT\r\ncontent-length: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://claim-purpe.xyz\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS,PATCH\r\naccess-control-allow-headers: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uINjFGMQl9PB4tvmHdrSRau6UHvgonZ8BzlrCB9yM3Yr9zH%2FcwasK9JU7Hi8eJRdDMnIz03nO3cM%2FaowAQ2C%2Ba07F3vayXF1LPV3CXZoGzaGhs0%3D\"}]}\r\ncf-ray: 97c83fab9b4fb509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T04:24:09.297648Z","times_seen":17539466,"resource_available":true,"data":null}},"time_used":979,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":978,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"coinmarketcop-api.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/solscan-logo.jpg?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/solscan-logo.jpg?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14343\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"dcd83dd718224ea8207b7c8439aab752\"\r\nlast-modified: Mon, 08 Sep 2025 13:08:35 GMT\r\nx-amz-expiration: expiry-date=\"Thu, 09 Oct 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=jpg, origSize=14437, smushRatio=0.65, skipped=0, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: bbe59195a28af43356e2dfaf94925050\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":14343,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"dcd83dd718224ea8207b7c8439aab752","sha1":"90a3f74024b2cdc3ce7f1f564aeea99ede67a376","sha256":"4898703a8b486735ce03fa770030ec11ad2cf2b6f807308091266aaf7d7cc533","sha512":"2e0e6e9a446b92d9c2cbea07687b551d90dd4a14974f8beb9b83d646b190f40376cf7f446c89f854c17685a4cd9a1110056b042de34557c0d8601ea28744d13e","ssdeep":"384:eG6b3d9PsvPqleNj06y69tdvA1CZMW9glwmqhs6x6u:mz03ZR0K9/mCaF6su","tlshash":"4952cf249bb98007d53e13b7ec9583749b901fb0a53c49abfd582af9c3ad07a4e402d9","first_seen":"2025-09-09T17:02:28.654505Z","last_seen":"2025-10-13T05:39:26.445785Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1427,"timings":{"blocked":700,"dns":0,"connect":0,"send":0,"wait":726,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/tiktok-logo.jpg?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.561Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/tiktok-logo.jpg?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23431\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"d800ce127021655e50667df1734a2a7e\"\r\nlast-modified: Mon, 08 Sep 2025 13:08:37 GMT\r\nx-amz-expiration: expiry-date=\"Thu, 09 Oct 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=jpg, origSize=23431, smushRatio=0, skipped=1, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 9d2964c99198090754bffdb47225a4cd\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":23431,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 600x600, segment length 16, progressive, precision 8, 980x980, components 3","md5":"d800ce127021655e50667df1734a2a7e","sha1":"fd3775499ff33421d0f0d5cf37870a8960424864","sha256":"82065a1f7fffa89d0cf09c43dc8ab7ed60e94195ba2b2e009ecbed171e60ca19","sha512":"e8e47f22f5d6c9fc0cf23ee84f849dd50efbacc68f1217c178557d4f1266a154cc994fe9ba027d3e62adc0d85749761996507e4086582ec8eaaff9c322c1e0b8","ssdeep":"384:BgMVRO3BH0oopuYBl4KXzfwJ8hEPhwqBSMmBcJmLSvaZWqkFAToIQGaw:GsoRUjUYEKW4EJ2WMduFAdQrw","tlshash":"9eb2bf0f9fd61049eac02bb640fb181c5a7b6631045522df5a22392c697ce78bdb1fbd","first_seen":"2025-09-09T17:02:28.656157Z","last_seen":"2026-02-18T14:16:50.333444Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1545,"timings":{"blocked":696,"dns":0,"connect":0,"send":0,"wait":732,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.purpe.xyz/wp-content/plugins/forminator/assets/forminator-ui/css/forminator-icons.min.css?ver=1.43.0","fqdn":"www.purpe.xyz","domain":"purpe.xyz","tld":"xyz"},"ip":{"addr":"104.26.14.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purpe.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 21:00:45 GMT","end":"Thu, 16 Oct 2025 22:00:29 GMT"},"fingerprint":{"sha1":"90:EE:7C:69:9E:A3:DB:A0:8D:FE:55:C6:0C:98:33:4A:3B:FF:C0:D0","sha256":"48:F6:F1:AA:03:33:D4:F1:2A:7E:35:81:A4:95:B6:E0:FD:D2:20:9A:AE:0E:04:D5:2B:26:36:11:9B:37:93:88"}}},"request":{"raw":"GET /wp-content/plugins/forminator/assets/forminator-ui/css/forminator-icons.min.css?ver=1.43.0 HTTP/1.1\r\nHost: www.purpe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:35 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 06 May 2025 17:50:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"681a4bd4-ee6\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nage: 183519\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1QCmXVL%2FEWj8dTC7MdKU%2FbpKLs%2BchZYK0X20wGQ9fxUj2xS%2FuKq1NPxRY3qJe4%2BJEM3fA%2BRyYBXeKVUqsN2b8KlR8aK1Fk87URY%3D\"}]}\r\ncf-ray: 97c83f999e2056cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3814,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (3586), with CRLF line terminators","md5":"bdde1047f954f84e38919f8171d513ef","sha1":"2050c5c6aaf1665e6c3a4237b59c72db301f6121","sha256":"3d1fbbf2ea103eb40ae09480709c49beda107102736beb8f622a21b6ad0b80c2","sha512":"b004d966d9142686d28fa0032ed804093fd1cd891097a645432f49e911810e58a7f5d001b0a4830babf0bfb4c366b9d95e41dac907696b215ccf4f61eed1dd83","ssdeep":"","tlshash":"96716c76aca106c2e731adabd7c86e950514f322b8500ed9b98ed44dc7e12ea138773d","first_seen":"2025-09-09T17:02:28.658122Z","last_seen":"2025-10-13T05:39:26.221272Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.purpe.xyz/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/motion-effects.js?ver=4.27.4","fqdn":"www.purpe.xyz","domain":"purpe.xyz","tld":"xyz"},"ip":{"addr":"104.26.14.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purpe.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 21:00:45 GMT","end":"Thu, 16 Oct 2025 22:00:29 GMT"},"fingerprint":{"sha1":"90:EE:7C:69:9E:A3:DB:A0:8D:FE:55:C6:0C:98:33:4A:3B:FF:C0:D0","sha256":"48:F6:F1:AA:03:33:D4:F1:2A:7E:35:81:A4:95:B6:E0:FD:D2:20:9A:AE:0E:04:D5:2B:26:36:11:9B:37:93:88"}}},"request":{"raw":"GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/motion-effects.js?ver=4.27.4 HTTP/1.1\r\nHost: www.purpe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:35 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 10 Dec 2024 01:09:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"675794dd-26902\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nage: 183518\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x%2FQywpc6M1vSauHh0BEl9Nma9zNFGl4wP177IV5hVAlN71pvuKFCHyCxMn0C2rI3wJo5JiyH0XXtCd4LAEieCItMCUqsrT7MnkA%3D\"}]}\r\ncf-ray: 97c83f998e1756cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157954,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"01db529f22a258e905ba7b5a31eb218f","sha1":"1cdf0a4a508c3645b5db10d4b0ffc076540e2386","sha256":"21299aa0cfccae6adfc1fdc2d6dfd6895c47f6f8b714b2683df914f9b5b485a3","sha512":"a71f3a350f2942243a5158e27ea594a1d03e6e870ae3b3d3080c796b1f8cac9b785a0d7fd239cd7fb6944d6f4b9a57bc068e24d48168a63964055daa93e90eba","ssdeep":"1536:YXI1ZyDo4MCKUivfiOh0Tb6vTDAyGlFLn6Qy5fQKkcPikk0lgmyM7ud0jsykhOwn:+IPB4MeTb6vHucf5ldntjEfhY/5M","tlshash":"c6f35288ba92f46593a3a471403f420bf17a6965705ee4c0e3a6d5e0bd7c48e9173f3e","first_seen":"2024-04-26T01:27:52Z","last_seen":"2026-07-26T00:59:09.324923Z","times_seen":3661,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 02:39:12 GMT","end":"Sat, 22 Nov 2025 03:39:06 GMT"},"fingerprint":{"sha1":"B4:6C:D2:16:CA:52:EE:BD:22:D7:B4:2C:64:FF:A5:EF:67:D8:E1:F8","sha256":"FF:3A:23:84:D6:B2:73:DF:50:6E:1A:45:A4:AB:03:37:0B:C4:4A:8E:82:12:99:10:80:A2:F7:FC:71:E3:BA:1D"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nOrigin: https://claim-purpe.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 97c83f9d98e63181-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-07-26T04:17:08.529054Z","times_seen":337599,"resource_available":true,"data":null}},"time_used":1227,"timings":{"blocked":587,"dns":8,"connect":1,"send":0,"wait":12,"receive":0,"ssl":615},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmarketcop-api.com/@v1/log/join","fqdn":"coinmarketcop-api.com","domain":"coinmarketcop-api.com","tld":"com"},"ip":{"addr":"172.67.141.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:39.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinmarketcop-api.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 15:47:41 GMT","end":"Thu, 20 Nov 2025 16:45:54 GMT"},"fingerprint":{"sha1":"B0:CF:37:BB:3E:5D:19:87:C9:06:DA:2B:3A:C5:0B:77:11:4C:A2:47","sha256":"FC:6B:44:07:4E:C2:B7:3E:B8:95:B0:E9:D0:96:D9:1C:DC:FE:A5:D7:F6:6B:A4:D5:79:CF:BE:F3:E3:05:67:8E"}}},"request":{"raw":"POST /@v1/log/join HTTP/1.1\r\nHost: coinmarketcop-api.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nContent-Type: application/json\r\nx-scale-referrer: claim-purpe.xyz\r\nauthorization: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjdXN0b21lcklkIjoiZlRPTVJ1enAydCIsImdyb3VwX2lkIjo4MDgsImlhdCI6MTc1NzE1ODE0Nn0.hmvhlNlyh2ymYtIYF1rdlXK4PTa4Gyq35L7haBtZlhg\r\nx-device: 0:Windows:Firefox\r\nContent-Length: 2\r\nOrigin: https://claim-purpe.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Sep 2025 17:01:40 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hr81BOrTl79jIsjpzczN%2FiVoRK68bmYe%2F7suHscODqGyIte4AjFuww3bfX6RGl2F7VjNf1tYrH8tbTtBJoI1R2qZKCtU7VX%2F6VdX0SEdfu7%2FiVE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://claim-purpe.xyz\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\netag: W/\"20-llti1nxI8SZi+xVpiFYUSfGpvg8\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 97c83fb01b80b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3b5b4d21f8c87c5e6534b5a1d9d4574a","sha1":"965b62d67c48f12662fb156988561449f1a9be0f","sha256":"24dcf0603597089c21d0ab963001064690004c39e72221981b7faf7a5edd5f25","sha512":"1218be959182a70f35f2eeaeadc640c721f546b6b46b48f21f9acb3dead02d478da0ac6855f6c55777fbf33486b967fad262e93a5da6327ac7517933f9663ba8","ssdeep":"","tlshash":"d18000000e00aca83bc20802b2832028aaf22a80808b20a2800c803a0b028e0c22ba0c","first_seen":"2025-07-26T22:59:19.534167Z","last_seen":"2025-10-13T01:44:36.478944Z","times_seen":529,"resource_available":false,"data":null}},"time_used":1495,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1494,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"coinmarketcop-api.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.bunny.net/css?family=Rubik","fqdn":"fonts.bunny.net","domain":"bunny.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fonts.bunny.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 Aug 2025 22:10:53 GMT","end":"Tue, 04 Nov 2025 22:10:52 GMT"},"fingerprint":{"sha1":"CC:36:51:05:17:06:60:8D:92:18:7A:63:20:AE:DD:C0:73:4B:11:1C","sha256":"91:BE:58:42:12:2D:1C:25:A6:C0:A2:D9:AD:47:6D:76:5B:84:A2:E9:E8:BD:DB:84:41:B6:64:A9:10:87:69:37"}}},"request":{"raw":"GET /css?family=Rubik HTTP/1.1\r\nHost: fonts.bunny.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:35 GMT\r\ncontent-type: text/css; charset=utf-8\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 781720\r\ncdn-uid: 3a60ca70-b89d-4cd5-a4b5-34a3468d7e0f\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\nlast-modified: Mon, 08 Sep 2025 14:32:46 GMT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/08/2025 14:32:46\r\ncdn-edgestorageid: 830\r\ncdn-requestid: ffc5773122a578f836aa770c769000c1\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":3025,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (599)","md5":"d7349062dbcc7faf19b279243b237acb","sha1":"636e1cb7fd4f44993a082c710574d688b3699aef","sha256":"016ebb9835806c0f36da1b0b6eaad678c4868c1c6daf43fd737901db6181c277","sha512":"f7d4438706c13db37bfbfd296deb749e672d09a5b536c8fee93bcb9f0b6586422215b4431ff343600aefb1d2d30c19e1879171346b298abfdf534b9c8309d4ad","ssdeep":"","tlshash":"ad51d0f184151080f7872d9373de4d234e1ea3163589644daf289ce4aca5930a7f3bee","first_seen":"2025-01-22T09:07:54.361888Z","last_seen":"2026-07-25T06:18:42.593895Z","times_seen":274,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":89,"connect":14,"send":0,"wait":2,"receive":0,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/purplepepe-script.png?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/purplepepe-script.png?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 22882\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"5cd2125073fcb03d5aafd95c319bf469\"\r\nlast-modified: Sat, 23 Aug 2025 15:51:52 GMT\r\nx-amz-expiration: expiry-date=\"Tue, 23 Sep 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=png, origSize=22882, smushRatio=0, skipped=0, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 3b2edde93c5819c8b5efba2f4f7853ee\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":22882,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1598 x 1000, 8-bit colormap, non-interlaced","md5":"5cd2125073fcb03d5aafd95c319bf469","sha1":"63839bb33c2b332d2586b22d0f6cdc5bebed04f9","sha256":"69ad1e784fc9cc5bf7374d9c1c233e147449fc141cf7c4159a90076b28bbe6e8","sha512":"f7a276bbd2f708f7c492bd7245a366326499ba59d66117e552ad5bc72b1cc6e69d33f4b2f79e06703909e60870b3cfc6113024bab065df10e92331dbfe22ec77","ssdeep":"384:P8fZIiqi5ozqmzsdG/2lI+ifDK5W0OdIaN6n8icSICm1Jk4z8jDDQQU6g/D:P3Km/sdA+ifDKM0OdHoHIf1e443Q","tlshash":"6ba2e186709a8885cc3b88375ef18339f561ee6ed07414226488769b0d7d24efa72de1","first_seen":"2025-09-09T17:02:28.6624Z","last_seen":"2025-10-13T05:39:26.26358Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1298,"timings":{"blocked":652,"dns":0,"connect":0,"send":0,"wait":561,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/purpe-memes-004.jpeg?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/purpe-memes-004.jpeg?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 176608\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"8eae3aa7093557635831b3a6b8174e16\"\r\nlast-modified: Tue, 12 Aug 2025 15:34:18 GMT\r\nx-amz-expiration: expiry-date=\"Fri, 12 Sep 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=jpg, origSize=176608, smushRatio=0, skipped=0, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: a02880570542e18f5843f3e2c7947553\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":176608,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1024x1024, components 3","md5":"8eae3aa7093557635831b3a6b8174e16","sha1":"7e26615b91444323eec6f422186bf1b704b7ce4a","sha256":"cc471cc30d1d782b6f168f87c3dcf5f361b288259e42ac685dccbe734d55df12","sha512":"d8fcf7f181a1a227bed7786532479703f5c31f0cedd5a1c1ecb50eb372a2f52fc8af6e20e789bd5d59bb5352269502f160f85a88a1ce3a38b661bc292cb35a1a","ssdeep":"3072:lXEa1WtEkTZwcEpxts55CrFr5fbIWnf2b90vIarok9/Tl+Lz++Qe5OuwhSa:n1BkTZwcE65wJ5DIc2bivIaBl+LqHQOZ","tlshash":"970413782fd8b55ffc3625201177abd402e1479eb687eee800e5ecdd92d72390899e90","first_seen":"2025-09-09T17:02:28.664268Z","last_seen":"2025-09-09T17:02:28.664268Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1394,"timings":{"blocked":624,"dns":0,"connect":0,"send":0,"wait":449,"receive":321,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/purpe-memes-010.jpeg?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/purpe-memes-010.jpeg?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 283147\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"ff6477fd97c67f3810cded88db9a9e5c\"\r\nlast-modified: Sat, 23 Aug 2025 15:52:00 GMT\r\nx-amz-expiration: expiry-date=\"Tue, 23 Sep 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=jpg, origSize=283147, smushRatio=0, skipped=1, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: fb6e6d04f53d2009bbec143afd62e272\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":283147,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, progressive, precision 8, 1024x1024, components 3","md5":"ff6477fd97c67f3810cded88db9a9e5c","sha1":"98093132b0506f53d49035ddf7b1f8c57647d544","sha256":"b286f3a5fc57745b34cd3c4f163fedd7efbe634e3d6efe43df1de3428225b3a3","sha512":"c4a07661eb1f3a0d057a14cb36b22091a434122d54fc9d13523826c79acbcb652ea9afd8d67b6dda5b30d940ed4a0d73fa4407f08fda003f2bb870ac36460e98","ssdeep":"6144:vdtY17VcG2nLbMSY9ZHvGDe1Ikhu5v+3Sp9wAfDnsY2/WnaxIBwRTTWJ:38ijbMpDx4v+Cp6SDGergTWJ","tlshash":"0e5423ea6615036f7c05cf30e62ac5761c314ed7b18a8b8993f5487be5f2eae4450c1b","first_seen":"2025-09-09T17:02:28.666045Z","last_seen":"2025-10-13T05:39:26.511226Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1705,"timings":{"blocked":602,"dns":0,"connect":0,"send":0,"wait":629,"receive":474,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"purpe.tempurl.host/wp-content/uploads/2024/09/gaming-09.jpg","fqdn":"purpe.tempurl.host","domain":"purpe.tempurl.host","tld":"tempurl.host"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:36.999Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /wp-content/uploads/2024/09/gaming-09.jpg HTTP/1.1\r\nHost: purpe.tempurl.host\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T04:24:09.297648Z","times_seen":17539466,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"purpe.tempurl.host","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"claim-purpe.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"claim-purpe.xyz","domain":"claim-purpe.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:37.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-purpe.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Sep 2025 17:41:21 GMT","end":"Fri, 05 Dec 2025 18:41:07 GMT"},"fingerprint":{"sha1":"E7:5B:AD:02:4C:8B:43:9A:40:BB:19:AF:78:D1:31:41:45:E1:9D:2B","sha256":"FA:41:2E:D8:E6:4C:D5:96:19:C5:E9:49:2E:4B:00:CF:B7:E6:74:15:5B:D5:C4:24:D3:C9:F0:C0:62:1D:A7:9F"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: claim-purpe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _pk_id.17133.f8be=8f118c6db6020ae1.1757437297.; _pk_ses.17133.f8be=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 09 Sep 2025 17:01:37 GMT\r\ncontent-length: 0\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/f78657f80e4b/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\nserver: cloudflare\r\ncf-ray: 97c83fa32b3db4f1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10048,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T04:24:09.297648Z","times_seen":17539466,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"claim-purpe.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/telegram-logo.png?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/telegram-logo.png?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 38370\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"b0fbdc39db49cd49a3af8d8260a726ee\"\r\nlast-modified: Mon, 08 Sep 2025 13:08:43 GMT\r\nx-amz-expiration: expiry-date=\"Thu, 09 Oct 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=png, origSize=38370, smushRatio=0, skipped=0, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: bbda37c742595e3d52a9fe628f8c0635\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":38370,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"b0fbdc39db49cd49a3af8d8260a726ee","sha1":"d39a993e9bb7af422686e6c8867662a9202aa953","sha256":"4eb64256c2e7f037b1019c3a4350d6586eeec48acaf0549a1852c7db142fc439","sha512":"e457e6656711a5a25a826b2085603cf759fba3dbfcf5996a4b5356802711f207d63346367382520aa35015d8307ccd86867c2fc1ca9638afed63f4b2d19fb94c","ssdeep":"768:/trgjfdAJBzvi+lKFBUQlNS66l657ysctIJI99L6e7tn1En23cJgk:Fr4fcRlfI7yBWI9hH6Jgk","tlshash":"0c03f1c2495a3905d603529979ab3ec87eee08ba39e6fb550f72e8438fd4293d0d2d01","first_seen":"2025-09-09T17:02:28.667762Z","last_seen":"2025-10-13T05:39:26.298618Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1578,"timings":{"blocked":685,"dns":0,"connect":0,"send":0,"wait":718,"receive":175,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/purpe-memes-015.jpeg?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/purpe-memes-015.jpeg?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 173116\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"1ec2ac8de4ed7ebba6c0b8742ba711c7\"\r\nlast-modified: Tue, 12 Aug 2025 11:07:49 GMT\r\nx-amz-expiration: expiry-date=\"Fri, 12 Sep 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=jpg, origSize=173116, smushRatio=0, skipped=1, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 895259d6fba85391f2366970479c1c36\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":173116,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, progressive, precision 8, 1024x1024, components 3","md5":"1ec2ac8de4ed7ebba6c0b8742ba711c7","sha1":"ae53839a4f21489ff3cbb8825b9ea57c111442b3","sha256":"4e9c1bfc5f2e1ad135952af206465da98778d192b06c02bbcda16be6d97fd4c6","sha512":"60336ca2aa50f71c247372c791117b295aefcf7b40e32cc14f0f2a5b4ab87e91c0ec8b06c2fe7e1c0f305db17cac24df23f00c2ea98e78dd4ca9dd755529cc3d","ssdeep":"3072:4AkhrTVBL5raM7dCLRlfne1TCQQLzcLetVb2QKX8Y1UfSaAp7N5rpTkmX:V8rTf5raKd8Q1T+tYx5W1Ap7N5rp/X","tlshash":"9e041252b1800e2b9fe125aac10f11bacc66a39d709e7247758d19083bf4889dcf5fe6","first_seen":"2025-09-09T17:02:28.669668Z","last_seen":"2025-10-13T05:39:26.21833Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1383,"timings":{"blocked":633,"dns":0,"connect":0,"send":0,"wait":445,"receive":305,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-purpe.xyz/fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-mu0SC55I.woff2","fqdn":"claim-purpe.xyz","domain":"claim-purpe.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:36.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-purpe.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Sep 2025 17:41:21 GMT","end":"Fri, 05 Dec 2025 18:41:07 GMT"},"fingerprint":{"sha1":"E7:5B:AD:02:4C:8B:43:9A:40:BB:19:AF:78:D1:31:41:45:E1:9D:2B","sha256":"FA:41:2E:D8:E6:4C:D5:96:19:C5:E9:49:2E:4B:00:CF:B7:E6:74:15:5B:D5:C4:24:D3:C9:F0:C0:62:1D:A7:9F"}}},"request":{"raw":"GET /fonts.gstatic.com/s/opensans/v43/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-mu0SC55I.woff2 HTTP/1.1\r\nHost: claim-purpe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Tue, 09 Sep 2025 17:01:36 GMT\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=NgCuc1k66bhjicU7RBn%2B%2F8qGBgtNVXbChOd2DZ4tc%2FrV23PtZDMn2JxrbZ5WQBrfHBEg%2FFaXDVtBmCCRiwYhoXgULEMlvfJ3oNfZGZEBLbiwCGIHJX0e5vxqLG7efgV7Pzg%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-ray: 97c83f9e2e7cb4f1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1581036,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10138)","md5":"aa1adcd5a77c8f4f2f6598557bbcb306","sha1":"43555378595bfe0177348c8ae05ee222ad1fc882","sha256":"e388e1b512947f7046784798347dd232fd975cd8ecdb5ab8e5774f8fe70bf6e7","sha512":"3d4cc18bf3e4128c1fe3e894091b4ddf7b85585487d150e5429339898dbe44cb5353b9fa11ce7d213543fdb3acb96b170f9dc70631564da7b642b7538c0948da","ssdeep":"24576:HKSiBJXSQ3fucSH54skc2XVeIUjnEgIPX72bgl2jKwj6xCRHqY2G0:HKSiBJXSQ3fucSH54skc2XVeIUjnEgIj","tlshash":"9b25534d4f7160d072679280abdd1f588a3cb163b4a204ca7bdd6507dec2ee911a63bf","first_seen":"2025-09-09T17:02:28.544208Z","last_seen":"2025-09-09T17:02:28.544208Z","times_seen":1,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"claim-purpe.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/purpe-meme-fb-group-008.jpg?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/purpe-meme-fb-group-008.jpg?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 146155\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"e63726619f336936db3fce44fcaeab53\"\r\nlast-modified: Mon, 08 Sep 2025 23:05:27 GMT\r\nx-amz-expiration: expiry-date=\"Thu, 09 Oct 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=jpg, origSize=146155, smushRatio=0, skipped=1, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 2af91e43d42935d2d51d284e3de4a7a8\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":146155,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1227x1118, components 3","md5":"e63726619f336936db3fce44fcaeab53","sha1":"15c94cbb7b3bc3461ea01e369f61cdd7a124a787","sha256":"e8f89e391ab59463f126aec580f4a9a14961e048894de4a72bb5d5b3b004fa00","sha512":"e69ea31c7e11baead7700294e4619eca0a9d45aee956f86aab53f73ec3b70a8ee5228b2c9e91d0756833a7c06ddeef1701e000260264dde81c11c84a7b3cbbf8","ssdeep":"3072:xzhfJycP2ZCMbRER8L6khRFy047i/D6k7eTYAe:ZwCURe8e4Yi/D660YF","tlshash":"2de3124e7bfc4e6ff274f279616d8da4aec83e09284875cb7f51ec0152a63b53a00912","first_seen":"2025-09-09T17:02:28.671501Z","last_seen":"2025-10-13T05:39:26.620651Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1572,"timings":{"blocked":619,"dns":0,"connect":0,"send":0,"wait":581,"receive":372,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/purpe-money-bags.png?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/purpe-money-bags.png?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 105643\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"1675358c6195f56612e71a1a1d6eb088\"\r\nlast-modified: Sat, 23 Aug 2025 15:52:07 GMT\r\nx-amz-expiration: expiry-date=\"Tue, 23 Sep 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=png, origSize=105643, smushRatio=0, skipped=0, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: a488a817f72c58f0fac340031d8ace34\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":105643,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 313 x 401, 8-bit/color RGBA, non-interlaced","md5":"1675358c6195f56612e71a1a1d6eb088","sha1":"7b8d09c5ebf7ebafe87a7b47caf7c6b77e2ad4d6","sha256":"fbf8dc9c2bcfab85f75c95d34a942f1a65011c74c877498b755a886c6850f4c4","sha512":"d8c5c7932d3295edee325f2743c232cf5e26b640e7337f3151af0c328f1614de0ab41ceed9cf12c7a78753de00d011013cfb8a5e4785d340ad47cd38d14e0960","ssdeep":"3072:1r6eIgmCCnpXykd9MvNtYGZ202vsiIErMXnndA1sS:Z6jHPnpikdWzTvusfmMYsS","tlshash":"13a313c8ec53550915ca901f4b752f0ac2242b11e5b6fbb8efe24a74f577c1c8a7e462","first_seen":"2025-09-09T17:02:28.673298Z","last_seen":"2025-10-13T05:39:26.541929Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1349,"timings":{"blocked":638,"dns":0,"connect":0,"send":0,"wait":476,"receive":235,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Montserrat:ital,wght@0,100..900;1,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:38.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:41:11 GMT","end":"Mon, 10 Nov 2025 08:41:10 GMT"},"fingerprint":{"sha1":"74:C1:9B:D3:5D:65:CE:2E:7C:CC:41:C0:7C:F9:2C:AB:41:A3:EC:AA","sha256":"BC:18:82:63:1D:AE:2A:9D:1A:A3:B1:77:B2:AF:6F:0D:AA:CF:1A:88:5A:51:22:46:A8:66:C8:4F:9C:92:20:32"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Montserrat:ital,wght@0,100..900;1,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 09 Sep 2025 17:01:38 GMT\r\ndate: Tue, 09 Sep 2025 17:01:38 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8795,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"bcd01865bb66c8fb8cdc3fc53aa3efc4","sha1":"b51cb0675812dda181acf06adcf1f3de1929f054","sha256":"b8f7ca9074f04c891c152f6bb3fb864afe47e7f6e868299bbf8f1c08123113a8","sha512":"2043d320a4fb406bec163d37ee71b5de9aeb77ca74fc413226b99809af27efa61dc0c80e8d5ad2ca200f945ad6ea9b4f0abe5b879e3ade16cd6cf0cc5d99c1e1","ssdeep":"192:vyEfyZy6yG3gyLyZVyV77xd6n3UQjH+yYwyNFyuy3uySRk73vO6u8:vtfcHjg8cicOhwCFnbL8B","tlshash":"8f02fe91052bd504ea471cc527cf7e369e8e62a67481d1b97ffe2cd9aceac22132471c","first_seen":"2025-09-05T11:33:38.389978Z","last_seen":"2025-09-10T15:30:46.442614Z","times_seen":58,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":72,"dns":1,"connect":7,"send":0,"wait":20,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/purple-pepe-shades.png?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/purple-pepe-shades.png?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 161946\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"e22af09a87d3cd9eacdd75fcbc0a7220\"\r\nlast-modified: Sat, 23 Aug 2025 15:51:59 GMT\r\nx-amz-expiration: expiry-date=\"Tue, 23 Sep 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=png, origSize=161946, smushRatio=0, skipped=0, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: eaafcf4a7598af7bdc09db94673a3c88\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":161946,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 438 x 312, 8-bit/color RGBA, non-interlaced","md5":"e22af09a87d3cd9eacdd75fcbc0a7220","sha1":"82f4156f7de9d57e1769962eebd831f38e761278","sha256":"50b53617dc19d3bee39fe1653fdb1f24eabdacefa8deb7248ebbb4a86e3cc2c3","sha512":"18eea1d7ba021448541fa0dab3744778e7f925c880b9faf4f3329e4892c325dfc924bde85ba6b55b2fe7fb893cd2efdf7d4c561ae42ada9d59c52b1cc0c40073","ssdeep":"3072:r54ez/m0nWMhhKXQAN/ttijvijqL0oBYJtKJusujTbSvEvPs5V5iNNBjNsS/HbOf:rDDm0ndngN7ijacBBYhTbMEvUPA7x/bs","tlshash":"38f312baf5d7dc3512076e30217e7fdc788113b3eafa1991d9a1fda28c134826166863","first_seen":"2025-09-09T17:02:28.675928Z","last_seen":"2025-10-13T05:39:26.326612Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1589,"timings":{"blocked":647,"dns":0,"connect":0,"send":0,"wait":558,"receive":384,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/purpe-memes-011.jpeg?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/purpe-memes-011.jpeg?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 256128\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"bad94405bd7929df2940e0f26ca4bc03\"\r\nlast-modified: Tue, 26 Aug 2025 10:54:38 GMT\r\nx-amz-expiration: expiry-date=\"Fri, 26 Sep 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=jpg, origSize=256128, smushRatio=0, skipped=1, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 1316f5f08b7df066844d18b143f635b8\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":256128,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, progressive, precision 8, 1024x1024, components 3","md5":"bad94405bd7929df2940e0f26ca4bc03","sha1":"4c312cb3fb295df7925da33b38be3b2039feedfc","sha256":"0e2732c5c093df94a03c677585c30325a5d9b3ca12647835e5ddb7c2e0b06bdc","sha512":"5019fa37ee7b8c477f54335c90d2fb60998b2cefce39e5f266003822afbce32738fedbb720298ba05e2f8c48370631525732e11f3721ac966a218d844b100b4a","ssdeep":"6144:bcnjdxyoKoU69gpLI4b8aUwVrd7ki3M8Pi8I2lvymaS8+Lvr37PZL1MF:cxxVUn9I4tVVrCd8Pi8LlF8+LjLZhu","tlshash":"f1442303e48cc83b1cee2bce5598c7f5928d1b2504552e7b5f4b8af251272ecb2579b4","first_seen":"2025-09-09T17:02:28.677885Z","last_seen":"2025-10-13T05:39:26.331807Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1523,"timings":{"blocked":631,"dns":0,"connect":0,"send":0,"wait":483,"receive":409,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-purpe.xyz/fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXiWtFCc.woff2","fqdn":"claim-purpe.xyz","domain":"claim-purpe.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:37.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-purpe.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Sep 2025 17:41:21 GMT","end":"Fri, 05 Dec 2025 18:41:07 GMT"},"fingerprint":{"sha1":"E7:5B:AD:02:4C:8B:43:9A:40:BB:19:AF:78:D1:31:41:45:E1:9D:2B","sha256":"FA:41:2E:D8:E6:4C:D5:96:19:C5:E9:49:2E:4B:00:CF:B7:E6:74:15:5B:D5:C4:24:D3:C9:F0:C0:62:1D:A7:9F"}}},"request":{"raw":"GET /fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXiWtFCc.woff2 HTTP/1.1\r\nHost: claim-purpe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _pk_id.17133.f8be=8f118c6db6020ae1.1757437297.; _pk_ses.17133.f8be=1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:37 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Tue, 09 Sep 2025 17:01:37 GMT\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=rM9XPq6RfP%2BpqmDoe16WCjwaduYRlU9ih05yY6GcCY1ppcxKPlMlkOOEprlb4BbfHmHJRnITdWHrVS6BjhsYwY1PkNzUwE25IWnCBVYDUSKWzIKk0YxVwYtBuKrdeAVZLvY%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-ray: 97c83fa20a40b4f1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1581036,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10138)","md5":"aa1adcd5a77c8f4f2f6598557bbcb306","sha1":"43555378595bfe0177348c8ae05ee222ad1fc882","sha256":"e388e1b512947f7046784798347dd232fd975cd8ecdb5ab8e5774f8fe70bf6e7","sha512":"3d4cc18bf3e4128c1fe3e894091b4ddf7b85585487d150e5429339898dbe44cb5353b9fa11ce7d213543fdb3acb96b170f9dc70631564da7b642b7538c0948da","ssdeep":"24576:HKSiBJXSQ3fucSH54skc2XVeIUjnEgIPX72bgl2jKwj6xCRHqY2G0:HKSiBJXSQ3fucSH54skc2XVeIUjnEgIj","tlshash":"9b25534d4f7160d072679280abdd1f588a3cb163b4a204ca7bdd6507dec2ee911a63bf","first_seen":"2025-09-09T17:02:28.544208Z","last_seen":"2025-09-09T17:02:28.544208Z","times_seen":1,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"claim-purpe.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/07/purple-pepe-construction.png?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/07/purple-pepe-construction.png?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 264907\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"956f3472468a04394006c8ce86ed7afd\"\r\nlast-modified: Sat, 23 Aug 2025 15:51:51 GMT\r\nx-amz-expiration: expiry-date=\"Tue, 23 Sep 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=png, origSize=264907, smushRatio=0, skipped=0, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: dd7144efeb73c1cd7e22a1f5b5249a48\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":264907,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 953 x 1024, 8-bit/color RGBA, non-interlaced","md5":"956f3472468a04394006c8ce86ed7afd","sha1":"1df0d22ef23c5a86a1e78dec34a8770788dc2fcc","sha256":"deee0848df6d8ec0d8544bfa9f58b221f879675ae261ac4733ac73a4190c27df","sha512":"e371fe8b68c0ec54596da8d1f2bb0711aeca30ab5be5b2b96181f51580a69ada749fd56ed5524e4c006bbffb145bc18c9eba277b18bc87430173a83340df44e0","ssdeep":"6144:DndbOUc7KSLTuKupfz2F3XTS3gvA7yHa2TZPDoVJkn31C:5WKSLTIrq3XTOK/6yoVJk3w","tlshash":"fe4423c487ef1203d62fae7844244da9f8bc919f0c56d88574992cc09ec6a9bf714b97","first_seen":"2025-09-09T17:02:28.679934Z","last_seen":"2025-10-13T05:39:26.283043Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1843,"timings":{"blocked":654,"dns":13,"connect":4,"send":0,"wait":146,"receive":370,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.purpe.xyz/wp-content/themes/Divi/js/scripts.min.js?ver=4.27.4","fqdn":"www.purpe.xyz","domain":"purpe.xyz","tld":"xyz"},"ip":{"addr":"104.26.14.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purpe.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 21:00:45 GMT","end":"Thu, 16 Oct 2025 22:00:29 GMT"},"fingerprint":{"sha1":"90:EE:7C:69:9E:A3:DB:A0:8D:FE:55:C6:0C:98:33:4A:3B:FF:C0:D0","sha256":"48:F6:F1:AA:03:33:D4:F1:2A:7E:35:81:A4:95:B6:E0:FD:D2:20:9A:AE:0E:04:D5:2B:26:36:11:9B:37:93:88"}}},"request":{"raw":"GET /wp-content/themes/Divi/js/scripts.min.js?ver=4.27.4 HTTP/1.1\r\nHost: www.purpe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:35 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 10 Dec 2024 01:09:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"675794dc-42f9f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nage: 183519\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HKmEvzzmuMEjTBB5zu8x29J7a%2Bjxn%2Fa1loMa5ceMsXFxRxFQjBU5RPUYbWzh0sNOCPK30dYvRy5pI9qMuglwoWK9mZW%2B%2BqlteLo%3D\"}]}\r\ncf-ray: 97c83f999e2a56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":274335,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65467)","md5":"ffeda0ad944eaea8e25836de4a379be5","sha1":"cb2199a64629ba9f207d1764603b5bd81b71e3cb","sha256":"ad97778077e648e9c0adbd33005dd7d89fc0313a9b6caef7bf29ed253af8a312","sha512":"a4977979923df809a86687950b16bc56519963f7380751d9c06b134ab3d76de0d1d5911c009584f46f58e9726d9824f349d90ff16451f65afd254adfe706d03e","ssdeep":"3072:NIsL0dW9z+hDJ6eJOIZurwtux3E0pyPNgaO5S0PYO1DZ/n7OK:z0dWwnectux3xmNFJ0QOpZ7","tlshash":"d644d74cb360b4f162fb65b5116f670ab1726d17a40688c0e172e0f85db8d8e6263f7e","first_seen":"2024-11-11T11:08:50.353221Z","last_seen":"2026-07-26T00:59:09.315806Z","times_seen":29461,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.purpe.xyz/wp-admin/admin-ajax.php","fqdn":"www.purpe.xyz","domain":"purpe.xyz","tld":"xyz"},"ip":{"addr":"104.26.14.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:38.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purpe.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 21:00:45 GMT","end":"Thu, 16 Oct 2025 22:00:29 GMT"},"fingerprint":{"sha1":"90:EE:7C:69:9E:A3:DB:A0:8D:FE:55:C6:0C:98:33:4A:3B:FF:C0:D0","sha256":"48:F6:F1:AA:03:33:D4:F1:2A:7E:35:81:A4:95:B6:E0:FD:D2:20:9A:AE:0E:04:D5:2B:26:36:11:9B:37:93:88"}}},"request":{"raw":"POST /wp-admin/admin-ajax.php HTTP/1.1\r\nHost: www.purpe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nContent-Length: 199\r\nOrigin: https://claim-purpe.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Sep 2025 17:01:38 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Accept-Encoding\r\ncf-edge-cache: cache,platform=wordpress\r\nx-robots-tag: noindex\r\nx-content-type-options: nosniff\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-frame-options: SAMEORIGIN\r\nx-cache-enabled: true\r\nx-cache-bypass-reason: Special url\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oNfI%2F8AToWW4vMPQtbUznWz1a4cu0f7%2FvpwmFo8ap%2BHQt96S1ASOANqv11vDUL2PK%2BUmK3HTiUBKJcDHGWLXiAPQd0Et3fSHhvsYBg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 97c83fa97a8d76ef-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4455,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"53fd012a3c570c906f00d5f1474c8c2d","sha1":"6cb5b17d3947aa5eb93601a977675e7fcfcbee9a","sha256":"e6a20a50265d064b7e7819e3bb60ceccf1b59590416c59c3df3b5025574c1d18","sha512":"376939640a4cd9b2b35e6697795371ff58cc9e6496b568df36204dddcfcc87e0f8b43315cc54430b4e318b3a1999c577e3f172a3fe95029f0102263e470aa383","ssdeep":"96:1ZKB2ZKS1EQ1a7AAFlOxX/YeN6YpL7RVAABAuHvtGZz:1ZKkZKS71a7AAFleQeN6YpPQAqqS","tlshash":"08911f103d68d26649562bf4f6fd1e346a9b7700b9202e4897ccd83e929cdb66313f74","first_seen":"2025-09-09T17:02:28.682232Z","last_seen":"2025-09-09T17:02:28.682232Z","times_seen":1,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.purpe.xyz/wp-content/themes/Purpe/style.css?ver=4.27.4","fqdn":"www.purpe.xyz","domain":"purpe.xyz","tld":"xyz"},"ip":{"addr":"104.26.14.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purpe.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 21:00:45 GMT","end":"Thu, 16 Oct 2025 22:00:29 GMT"},"fingerprint":{"sha1":"90:EE:7C:69:9E:A3:DB:A0:8D:FE:55:C6:0C:98:33:4A:3B:FF:C0:D0","sha256":"48:F6:F1:AA:03:33:D4:F1:2A:7E:35:81:A4:95:B6:E0:FD:D2:20:9A:AE:0E:04:D5:2B:26:36:11:9B:37:93:88"}}},"request":{"raw":"GET /wp-content/themes/Purpe/style.css?ver=4.27.4 HTTP/1.1\r\nHost: www.purpe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:35 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 05 Sep 2024 01:34:35 GMT\r\nvary: Accept-Encoding\r\netag: W/\"66d90aab-103\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wcOaXzVg6QFz9iR7l42xJYbYBoJmGv%2BcwxWQ3C2AbROJKf4tmAs2xrmCjALTAJ7IAAiiAskx8C4vkpa1X8zgWVmE3W2F14evtds%3D\"}]}\r\ncf-ray: 97c83f99ce4456cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":259,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"7fdd832619a814c30940bd2263f8d918","sha1":"7d760bc9c97e7389297375e0fc84ba69b9ddc3cf","sha256":"11137cf02da4bb20eddd61d00272726bf743cc8a08e964d765e5b008c19dd18d","sha512":"6776c8c050f40370f0bb3412fce4e9fcf463abb2a5be340304c9a30d27f083567d79478c4dfd2660afd1dff633508215a87701b148d76a2f892b6222ddb23d52","ssdeep":"","tlshash":"fad05ba94227c17572b11beb98316a0dfa655b052b5156415449462511571fb4037e3c","first_seen":"2025-09-09T17:02:28.6837Z","last_seen":"2026-02-18T14:16:50.297752Z","times_seen":8,"resource_available":false,"data":null}},"time_used":527,"timings":{"blocked":177,"dns":105,"connect":1,"send":0,"wait":130,"receive":0,"ssl":102},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/gaming-09.jpg?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:37.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/gaming-09.jpg?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:37 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 153176\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"f91276ccd9ff5d5f81af754432636f95\"\r\nlast-modified: Sun, 31 Aug 2025 02:58:50 GMT\r\nx-amz-expiration: expiry-date=\"Wed, 01 Oct 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=jpg, origSize=153176, smushRatio=0, skipped=1, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:37\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 6d21377ca0622ce21f795928e9eb5b90\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":153176,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 2560x2248, components 3","md5":"f91276ccd9ff5d5f81af754432636f95","sha1":"b0634a89b5076f775661f96fc3749f9a6a13328b","sha256":"ae6b776b4932ab6d0441fb775219006e5557cc9a552fda7b776525b77a2bee25","sha512":"e0743347a52c1bf17bb38af08c5e6edbbfad835bd938804aa88af85a4bc3e3c3b7e87a8e21494f968bbaac1540b5410788f312d52daa063c827f4f9404aa3071","ssdeep":"3072:r6mAr/sDwWVMUWmUEJM6RAaZtZKnlIFra0R3mi1Ut:v0URM7wRAanZKlIFvet","tlshash":"44e3f1f1b7f8bad7d6bc7336855b9f173b27267aa3ad258727260015a4a33103c68106","first_seen":"2025-07-01T07:17:21.929916Z","last_seen":"2026-03-21T09:51:48.619229Z","times_seen":10,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":144,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"coinmarketcop-api.com/@v1/services/temp-link/create?referrer=claim-purpe.xyz","fqdn":"coinmarketcop-api.com","domain":"coinmarketcop-api.com","tld":"com"},"ip":{"addr":"172.67.141.61","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:39.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coinmarketcop-api.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 22 Aug 2025 15:47:41 GMT","end":"Thu, 20 Nov 2025 16:45:54 GMT"},"fingerprint":{"sha1":"B0:CF:37:BB:3E:5D:19:87:C9:06:DA:2B:3A:C5:0B:77:11:4C:A2:47","sha256":"FC:6B:44:07:4E:C2:B7:3E:B8:95:B0:E9:D0:96:D9:1C:DC:FE:A5:D7:F6:6B:A4:D5:79:CF:BE:F3:E3:05:67:8E"}}},"request":{"raw":"POST /@v1/services/temp-link/create?referrer=claim-purpe.xyz HTTP/1.1\r\nHost: coinmarketcop-api.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nContent-Type: application/json\r\nAuthorization: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJjdXN0b21lcklkIjoiZlRPTVJ1enAydCIsImdyb3VwX2lkIjo4MDgsImlhdCI6MTc1NzE1ODE0Nn0.hmvhlNlyh2ymYtIYF1rdlXK4PTa4Gyq35L7haBtZlhg\r\nX-Direction-Safe: 1757437298485\r\nX-Scale-Referrer: claim-purpe.xyz\r\nX-Auth-Key: bahm0rZg6iBLJx5aaieO%2FTNEhuAzfKa5bkifUtmXpBE%3D\r\nX-Auth-Key-V2: 7wh15Gj3CFSajM9Mrbl999J7xsy9Tz9dcdd4qY9YIwo%3D\r\nContent-Length: 2033\r\nOrigin: https://claim-purpe.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Sep 2025 17:01:40 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tf0CA0vIT8CV%2Bfygno0GGQsI0Yszn%2FneNeGI3jncY5CWE4dmuWO4GXeYW%2BwJ50RvmgzfuMpff%2BbzTJuPf76uP2rEDTLt0iiZVgqgTifViiHLZ3c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://claim-purpe.xyz\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\netag: W/\"254-AB6zMfcIpJpa5C2dkvzBjXLXYYM\"\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 97c83fb1bb92b509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":596,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"03af68509de88bd28a86f2b0496087e4","sha1":"001eb331f708a49a5ae42d9d92fcc18d72d76183","sha256":"e6f43ca55b3c3ff29776e0596572c88c2802b1b92e2ee5aa0b2c6028b86e230b","sha512":"75134eabc151c3051b50cd8530e82911c503847306e913be92b9d4ab3d2ca239d39bf3623d0a71a950c253f97984a30ce9d96a02b37cf2418d42cd118a36a8b8","ssdeep":"","tlshash":"88f096eb9f5941ad4fa201d576a5dc88f884b63dcbc8c0b833c1c0682f816d67568e5b","first_seen":"2025-09-09T17:02:28.687189Z","last_seen":"2025-09-09T17:02:28.687189Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1456,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1455,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"coinmarketcop-api.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/twitter-x-logo.jpg?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/twitter-x-logo.jpg?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 36679\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"d8f63afb6ab79433b9ace2e3e79d4a6a\"\r\nlast-modified: Mon, 08 Sep 2025 13:08:41 GMT\r\nx-amz-expiration: expiry-date=\"Thu, 09 Oct 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=jpg, origSize=36679, smushRatio=0, skipped=1, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: fe5e1ef82e3719f469992a385458d76e\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":36679,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1440x1440, components 3","md5":"d8f63afb6ab79433b9ace2e3e79d4a6a","sha1":"bb5b83b7399f17310b619982fabaffbc9ebca19e","sha256":"a19ddcdb25d3172e9053751998eb6e17af7d1b342cef7d9f1057e564b36c2d9f","sha512":"6cb86c3b5a1ec9bbb42fab910a114d094f642295023a9c607abfe7955aecdbfe8761fb20b976870b99a83839dac4a5a5d10bb4ee0426e0548d6f038e31c451e3","ssdeep":"768:FgdZZPkvtZOkr+FsbQa2yavciiuiQLgfuTMrWJ:FgVuZZ+Fs89vcq/gfnY","tlshash":"13f2e096319fc49ec6af267654b743338f13a8f21584d56bc4854fb2e3a022e98c8c3d","first_seen":"2025-09-09T17:02:28.688665Z","last_seen":"2025-10-13T05:39:26.691004Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1586,"timings":{"blocked":693,"dns":0,"connect":0,"send":0,"wait":726,"receive":167,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/12/82DE14C3-F43C-4BB0-AC80-B02FF6814AD4_1_105_c.jpeg?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/12/82DE14C3-F43C-4BB0-AC80-B02FF6814AD4_1_105_c.jpeg?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 123225\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"29248643595a96f5728dbda583193b74\"\r\nlast-modified: Sat, 30 Aug 2025 14:23:16 GMT\r\nx-amz-expiration: expiry-date=\"Tue, 30 Sep 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=jpg, origSize=123225, smushRatio=0, skipped=1, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 22e97d58678ec046be7b670dd68e6ce0\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":123225,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], progressive, precision 8, 886x886, components 3","md5":"29248643595a96f5728dbda583193b74","sha1":"34dc4fe77dea4ff68fc8896e83e6cfd3b75139f4","sha256":"510f11fb5ed97cda99e9140a21e201ea7631fee845f66e0eddeeb44407638532","sha512":"4acc8234b3b85aca400bb48773596645ff6c92538637d45698abbba1f618d3c7cded285c28fb3a32cd3e0ab9d8523e79c47d17df9827463b6cb461b7c32162a7","ssdeep":"3072:fU03g7x4QvMtMGbBKCvDym7S4au/QRDXvo8KDRE69i0wv5pM:fl3g7tvg4sDyYUu/mDFMJ9YxS","tlshash":"8cc3120f85a255fee315992120ea492ee7b9ed3cb57d5d09b042c1aff8d28163001f7b","first_seen":"2025-09-09T17:02:28.690085Z","last_seen":"2025-10-13T05:39:26.500466Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1472,"timings":{"blocked":623,"dns":0,"connect":0,"send":0,"wait":538,"receive":311,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.purpe.xyz/wp-includes/css/dist/block-library/style.min.css?ver=6.8.2","fqdn":"www.purpe.xyz","domain":"purpe.xyz","tld":"xyz"},"ip":{"addr":"104.26.14.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purpe.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 21:00:45 GMT","end":"Thu, 16 Oct 2025 22:00:29 GMT"},"fingerprint":{"sha1":"90:EE:7C:69:9E:A3:DB:A0:8D:FE:55:C6:0C:98:33:4A:3B:FF:C0:D0","sha256":"48:F6:F1:AA:03:33:D4:F1:2A:7E:35:81:A4:95:B6:E0:FD:D2:20:9A:AE:0E:04:D5:2B:26:36:11:9B:37:93:88"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=6.8.2 HTTP/1.1\r\nHost: www.purpe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:35 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 15 Jul 2025 23:05:04 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6876dea0-1c679\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mpEHZWS9zcddTLYAQMNJIYG3oSe9dJY6xqJV41%2FBJVUmk3DoXTVw3WfIEgNH4%2FKZgELBmzYENyVDmdtZL9Sy8GNRbbYIXOvnufA%3D\"}]}\r\ncf-ray: 97c83f998e0f56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":116345,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55654)","md5":"a06b3af98203ddc303997e0e0caaff83","sha1":"04c3e7de74a890d18014588c4e1f077a52d79acc","sha256":"838ede31a58a3cdb411d6dd7f13cbe65d4a26193d9fa31882854e63938f12bac","sha512":"4ce1079b8dc07043b0201dc74f5888b50aa530a4e604eecd7673e225946de62c421b290a707014ddaf4366591f8c4767737b5689bc44d57eb0a11aef905cead9","ssdeep":"3072:seeJu1iQg5MG7x+qehvP0x2pck2qkA3Pu:b1iQg5MG7x+qehvP0x2pck2lA2","tlshash":"34b3615417b4dcf935ffa73a5e4ee248a503aa41c68a57ebe066d190618ca490cf3f0f","first_seen":"2025-07-15T17:03:07.843749Z","last_seen":"2026-07-26T04:03:16.844443Z","times_seen":177480,"resource_available":false,"data":null}},"time_used":593,"timings":{"blocked":150,"dns":108,"connect":1,"send":0,"wait":258,"receive":0,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/purpe-meme-fb-group-011.jpg?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/purpe-meme-fb-group-011.jpg?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 173608\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"56834a83bc58a86bbd5d8cb622ff6e31\"\r\nlast-modified: Mon, 08 Sep 2025 18:48:56 GMT\r\nx-amz-expiration: expiry-date=\"Thu, 09 Oct 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=jpg, origSize=183587, smushRatio=5.44, skipped=0, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: f4005687289a83b69a051d8ab286a87b\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":173608,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1024x1024, components 3","md5":"56834a83bc58a86bbd5d8cb622ff6e31","sha1":"574f7d7ebb7c1968973e0a41f16b8460dacb91fb","sha256":"9d8ceaba62b39c55586ed5189c4f98f4e83b28c43e80633f307c342537aceb91","sha512":"9c99d8a080804b63109ec131a0a6fbe4526b10a4fdc751627b30764c42726f71bb1b85b619dbc4559e6c6cb6a3e012361f3955267325997025db912c5d700e22","ssdeep":"3072:bK/qP7NJtaeXI/qV7scSJrw8sKxd0R6x6HQo8o7kE2UpT8gL:W47LXI/8d4uRk6HQosE2e5L","tlshash":"bf041361dc6ac6b08dc24df1be2cb0caab374e04d8382ab50ddce09d1748576f8b5749","first_seen":"2025-09-09T17:02:28.69245Z","last_seen":"2025-09-09T17:02:28.69245Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1579,"timings":{"blocked":618,"dns":0,"connect":0,"send":0,"wait":572,"receive":389,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/12/C81EF4DC-6622-4F8B-854C-E4264EAD5572.jpeg?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/12/C81EF4DC-6622-4F8B-854C-E4264EAD5572.jpeg?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 162192\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"93c15be6733f1e7fab513f7a0b05bab6\"\r\nlast-modified: Sat, 30 Aug 2025 14:23:16 GMT\r\nx-amz-expiration: expiry-date=\"Tue, 30 Sep 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=jpg, origSize=215283, smushRatio=24.66, skipped=0, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 6c8ffa475d1330ea0ddd54b6b8938162\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":162192,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, progressive, precision 8, 960x950, components 3","md5":"93c15be6733f1e7fab513f7a0b05bab6","sha1":"128c32d7c41804a258fd7462e489a218bddf3556","sha256":"4de1f0d7c0839ac428c193606a8cfd4792bbfc64415118b787881af14ff54538","sha512":"b70b5b187718da75474548b50721e53f03c6489d54d615918a9fb8248d8dd6f9d64d535612123c998728eeea74dc66a17b5cb05bd1eb098d4170da9f83d307df","ssdeep":"3072:GHL7XkxIfSn7+CsapVGIYPhhef4xtmPDguF+kAg6Wv7IxtmnOgQVjcBpNK2s:S7XeIKiCsKAIiNw8uF+26FtmOg+jcLKN","tlshash":"95f322bbb69d5784e12f68f1e1ca2c74682e1de0a03b46dec7c7d4d5a2f780821e0861","first_seen":"2025-09-09T17:02:28.69407Z","last_seen":"2025-09-09T17:02:28.69407Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1486,"timings":{"blocked":605,"dns":0,"connect":0,"send":0,"wait":544,"receive":337,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.purpe.xyz/wp-content/plugins/forminator/assets/js/library/jquery.validate.min.js?ver=1.43.0","fqdn":"www.purpe.xyz","domain":"purpe.xyz","tld":"xyz"},"ip":{"addr":"104.26.14.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purpe.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 21:00:45 GMT","end":"Thu, 16 Oct 2025 22:00:29 GMT"},"fingerprint":{"sha1":"90:EE:7C:69:9E:A3:DB:A0:8D:FE:55:C6:0C:98:33:4A:3B:FF:C0:D0","sha256":"48:F6:F1:AA:03:33:D4:F1:2A:7E:35:81:A4:95:B6:E0:FD:D2:20:9A:AE:0E:04:D5:2B:26:36:11:9B:37:93:88"}}},"request":{"raw":"GET /wp-content/plugins/forminator/assets/js/library/jquery.validate.min.js?ver=1.43.0 HTTP/1.1\r\nHost: www.purpe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:35 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 06 May 2025 17:50:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"681a4bd4-6207\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uf8RUy7fdNxqb538IXFA7ka1cpN%2B1dPO9Jr24tCOaGFDp4pvmNnZ9PVCQBqelZxOt93uEZWd5jiLVbq2DIEo%2FcZWQM59fe7TpSk%3D\"}]}\r\ncf-ray: 97c83f998e1456cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25095,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (24955)","md5":"aa64af3761af4d692bc69a2f676a28e3","sha1":"07b35ef1d3551db7b44c034ae4a1d22878b5675c","sha256":"6a771e69902d8e674992bb366177ec9ea7a697da9e65107c92473a672ad82415","sha512":"c98b6f6b04a4d2e5d67d9f457848e35c9de4264d9a3451a266778c6802fd7808e1394ee3fa57f5a27ec7a96529b5ee3de7d810177bb3497975937592e902230d","ssdeep":"768:ycWZ6/8lHJdkMioFpg5SUBQyQEny+L+gxV4Ky47ZD4:yg0d3ioFpg5SUBQyQEny+PaKyCd4","tlshash":"50b2a78976d670065e9720f4909ba60b61b66961e008e83c75b8e4d1bef8fcc50f7f78","first_seen":"2024-06-29T13:37:30Z","last_seen":"2026-07-25T03:02:22.877623Z","times_seen":3326,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.purpe.xyz/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/sticky-elements.js?ver=4.27.4","fqdn":"www.purpe.xyz","domain":"purpe.xyz","tld":"xyz"},"ip":{"addr":"104.26.14.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purpe.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 21:00:45 GMT","end":"Thu, 16 Oct 2025 22:00:29 GMT"},"fingerprint":{"sha1":"90:EE:7C:69:9E:A3:DB:A0:8D:FE:55:C6:0C:98:33:4A:3B:FF:C0:D0","sha256":"48:F6:F1:AA:03:33:D4:F1:2A:7E:35:81:A4:95:B6:E0:FD:D2:20:9A:AE:0E:04:D5:2B:26:36:11:9B:37:93:88"}}},"request":{"raw":"GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/sticky-elements.js?ver=4.27.4 HTTP/1.1\r\nHost: www.purpe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:35 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 10 Dec 2024 01:09:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"675794dd-330a1\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XwOLFe%2F9Am4LT6FLMTkMcligQIdfa6krlqg%2BL1jOFNXjEouTJ7VzXCOYV3Op%2BX4Im7AEFOH5jDTU8CMs8WYHUfDp6ExHtbc8C%2BM%3D\"}]}\r\ncf-ray: 97c83f998e1856cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":209057,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ac161fcf9d71ce5bd0ca746144f68db8","sha1":"4644da0f6f8b4ba0dae60ad3d99ced41673ac10e","sha256":"b24aa7e74310a0cc0723f431099e76ab2dddbde19a580b3c3da79d88a80e6893","sha512":"d9820fe8fbd30133e6d5fe7bad2ac28eccafc613803f2c3967aed2ac7edb6f70cdcb1360b81b4a48bb695e7f9ed23227d468e8a2c11eb7a4469f7a9436c61260","ssdeep":"3072:OXJznO0tuTwPyoDcvA4EIoyR5CcBadyW24cNlad5:qzO0tuTwPyu0EIokC4alHj","tlshash":"bd14d989b6d1f4b152e76069443f060af17a9c19704ae8c0e362e5e4ed7d98f6023f7e","first_seen":"2024-10-03T15:35:02Z","last_seen":"2026-07-26T00:59:09.337124Z","times_seen":7958,"resource_available":true,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.purpe.xyz/wp-content/themes/Divi/core/admin/fonts/fontawesome/fa-brands-400.woff2","fqdn":"www.purpe.xyz","domain":"purpe.xyz","tld":"xyz"},"ip":{"addr":"104.26.14.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:37.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purpe.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 21:00:45 GMT","end":"Thu, 16 Oct 2025 22:00:29 GMT"},"fingerprint":{"sha1":"90:EE:7C:69:9E:A3:DB:A0:8D:FE:55:C6:0C:98:33:4A:3B:FF:C0:D0","sha256":"48:F6:F1:AA:03:33:D4:F1:2A:7E:35:81:A4:95:B6:E0:FD:D2:20:9A:AE:0E:04:D5:2B:26:36:11:9B:37:93:88"}}},"request":{"raw":"GET /wp-content/themes/Divi/core/admin/fonts/fontawesome/fa-brands-400.woff2 HTTP/1.1\r\nHost: www.purpe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://claim-purpe.xyz/\r\nOrigin: https://claim-purpe.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 09 Sep 2025 17:01:37 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 78460\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 10 Dec 2024 01:09:48 GMT\r\netag: \"675794dc-1327c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\ncf-cache-status: MISS\r\nx-accel-buffering: yes\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ourtF9Kfs%2FAHLs7n%2FTisElqWH1%2FgRK3ElhABh3oOOO2dTLbdXSSRzC941nLzGmHie9cFgZ8aINLM6Jko3sgn0Qri3wMkhXuEjg170w%3D%3D\"}]}\r\nvary: accept-encoding\r\naccept-ranges: bytes\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 97c83fa2198776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78460,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 78460, version 331.-31392","md5":"f075c50f89795e4cdb4d45b51f1a6800","sha1":"f726c4275bb494a045fde059175f072de06c01df","sha256":"71b3ce72680f4183d28db86b184542051fd533bb1146933233e4f6a20cf98cba","sha512":"5f4f35e9acdb825a245e678a834b2bc6d5c302693fffc3497717024c2d8385ffdeb233d4d7f368f1356a2adfcaab0a89157edbcca45b9f310f1cdd7f44cac955","ssdeep":"1536:uZWBokruo7jgeq3Yv8E9MjaR3yOWaaqPbkJSmMlckzeSUSalX:sWBbuo/vqov8yTS/qPmMekzyx","tlshash":"7b73124d6fe2a9eaa9bc3f332fb38412ac819d654bf2c1b3055e12d51c8177da8d4135","first_seen":"2023-04-06T10:15:59Z","last_seen":"2026-07-26T04:46:55.883411Z","times_seen":21601,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/purpe-meme-fb-group-007.jpg?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/purpe-meme-fb-group-007.jpg?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 140125\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"b3c337114548c335964dcf21941915e9\"\r\nlast-modified: Mon, 08 Sep 2025 18:49:00 GMT\r\nx-amz-expiration: expiry-date=\"Thu, 09 Oct 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=jpg, origSize=141233, smushRatio=0.78, skipped=0, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 7f30f2b435bcbc10d45dc6987634ccea\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":140125,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1231x1204, components 3","md5":"b3c337114548c335964dcf21941915e9","sha1":"c38b0293dd5b90438e991cde8c835ac2533ca28e","sha256":"dceaf569b697873ad4f5c9add326feb72cffabd90db84c02cd3fe7599408f28c","sha512":"fb2abce01b96423d83ce2f757bfb5199a7b751d41851397b172c4bd2df5ddcbfce7d69f3d77ed2b4650dbfa98d04e1286f4a26d666523718bb66449085d5a6ff","ssdeep":"3072:tQbFWt6TpYbTEmceAEEYeK6/OUFiQw3Nu+quzF0ZYWP/rVSAQhryqSHk4S:tQbFq6TpiEmctEBeLJ23NSuZ0yMrVChp","tlshash":"8cd31243f838680af9c349bbe0b9ce1f2bb6dd470bab458a57b1db6640d51f606e1121","first_seen":"2025-09-09T17:02:28.697658Z","last_seen":"2025-09-09T17:02:28.697658Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1558,"timings":{"blocked":622,"dns":0,"connect":0,"send":0,"wait":571,"receive":365,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=GT-TX26G55T","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:39:58 GMT","end":"Mon, 10 Nov 2025 08:39:57 GMT"},"fingerprint":{"sha1":"79:B8:10:4F:C4:95:E3:66:3C:DD:AC:2E:39:EF:9E:E6:F3:F9:ED:EC","sha256":"8E:CE:0A:16:CF:6E:E1:89:55:05:76:86:E1:EF:98:4E:A0:AD:29:9C:BB:91:E6:AA:2D:27:5D:C2:B0:00:47:59"}}},"request":{"raw":"GET /gtag/js?id=GT-TX26G55T HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\nexpires: Tue, 09 Sep 2025 17:01:36 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 138558\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":415953,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"47d081f828a249c892d10293e4f546fd","sha1":"b3fda7c06658ff83e6d0e36d6cc07727ef27f642","sha256":"ef7fb7f20568c1e09b10dbebd675fcaa0a5bd9c30389db63b06c2b30b1460c80","sha512":"ef76abb12d9ef6142dc4279d7a50b5c7e44508d18112de2fdd535cf74cc82070f6b2f3128958d16e9a3f93090a72d1eb52560a82a5716f73b0ab60c80b334b8f","ssdeep":"6144:DUIjaFqOpdijhhi4qpVxQ2qPo2ZZJSlaindJ+p47Ajn:hjagOpMjhhi4qpVx5qP/ZZTjn","tlshash":"699409ce73d670669396e478503f018ba57b29a2b45cc899f1c9cce42d34a9a4237f7c","first_seen":"2025-09-09T17:02:28.69925Z","last_seen":"2025-09-09T17:02:28.69925Z","times_seen":1,"resource_available":false,"data":null}},"time_used":684,"timings":{"blocked":-1,"dns":1,"connect":21,"send":0,"wait":47,"receive":81,"ssl":533},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/coingecko-logo.png?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/coingecko-logo.png?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 5246\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"4511dbf91b8d2c03f7d2b07f74b7e4ea\"\r\nlast-modified: Mon, 08 Sep 2025 13:08:30 GMT\r\nx-amz-expiration: expiry-date=\"Thu, 09 Oct 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=png, origSize=5246, smushRatio=0, skipped=0, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 1b59b18e95c891c49e527ae11a98a087\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":5246,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 225, 8-bit colormap, non-interlaced","md5":"4511dbf91b8d2c03f7d2b07f74b7e4ea","sha1":"aff7a7a4c97dfeff2a1d9e2eab32db0a9987b094","sha256":"20d22a71633dd2b391cdf9ade4a7891a965afb1b02430b032d94c5a950eb5e8c","sha512":"31954560beae58198ede3df144ab39b109eb4dd95577e6b4e793aa6f3d999db1f2b4b968dcab3710200c1a1039dd6958243003545a2fbc6960ab9ed5c125eb75","ssdeep":"96:PlBUPrusYPpCX0G9OrqUQ6K7YWyg+NPJisrKivgP3TkadgMrMgCtnyvVY:QPysyjGsrqxR+1J9rZg/Tp6MdqyvVY","tlshash":"e6b18d9fdd885721ba5fc61140f480fdb67890d90281eab21a554816ff926f73026be2","first_seen":"2025-09-09T17:02:28.700779Z","last_seen":"2025-10-13T05:39:26.494187Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1312,"timings":{"blocked":709,"dns":0,"connect":0,"send":0,"wait":603,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/purple-pepe-lambo-bags.png?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/purple-pepe-lambo-bags.png?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 263737\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"c541487c922fdba62eb176bef4440cc9\"\r\nlast-modified: Sat, 23 Aug 2025 15:52:12 GMT\r\nx-amz-expiration: expiry-date=\"Tue, 23 Sep 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=png, origSize=263737, smushRatio=0, skipped=0, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 3761ff15d51c3b9026964c3736daa189\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":263737,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"c541487c922fdba62eb176bef4440cc9","sha1":"0e353b5ec129674884fabed66c4e94c78e23b715","sha256":"61ae7136dd55089793a04f79a5f06e11b194a342c4a2d74100cad72316e63521","sha512":"36fc6cd839b9bd2352f4d6f8d2e8b320a97398e294a8ce2013974e2f9b624e96310cbe450584eeaa7dce575acbe6c646cc78f77f48e812c525c0fef52a2cab2d","ssdeep":"6144:O101AnuEUShbDjqPQdz5BwLKP2O5J8meMqa6gw:BGnufefqYdAmp5WmedD","tlshash":"dc44239b6001ed58c05d7cfdc63cb54d138a477a295ba68c9536aca20a174e8f3c2bf7","first_seen":"2025-09-09T17:02:28.70225Z","last_seen":"2025-10-13T05:39:26.616441Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1505,"timings":{"blocked":635,"dns":0,"connect":0,"send":0,"wait":466,"receive":404,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/12/632A3168-3EB8-489D-8BDF-BABA4E0A9E25_1_105_c.jpeg?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/12/632A3168-3EB8-489D-8BDF-BABA4E0A9E25_1_105_c.jpeg?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 243932\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"c14f768029db32435700365a904b2346\"\r\nlast-modified: Sat, 30 Aug 2025 14:23:15 GMT\r\nx-amz-expiration: expiry-date=\"Tue, 30 Sep 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=jpg, origSize=264444, smushRatio=7.76, skipped=0, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 8f92538c4e2cc71f84eee3118a5bd64b\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":243932,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, progressive, precision 8, 886x886, components 3","md5":"c14f768029db32435700365a904b2346","sha1":"d902d47a48960b2faf4b0970ed6897d779db244b","sha256":"152e8ed746d5efe99671b3bc325b04016c6647a0fc2ded6f28f231d8800381df","sha512":"ea3ed084c519f42bed07267ac116c34e9e3d8edb4ac74a42705bffd48746feaad2b9c863603a23494f0c38296eb03c143ce0ed2eecbc4c5db44144b3e9b9ce0d","ssdeep":"6144:/F67zOj4X55FXdRXgsbxuQF4wUpjyJwiT/3XKM:/Q744X1bDbxuQNUpWTT/KM","tlshash":"9e342322d04e98cc71c6bc914d2396186ee6b0d1b47c5bbe3dd4525fa970bd81db83b8","first_seen":"2025-09-09T17:02:28.703951Z","last_seen":"2025-10-13T05:39:26.522098Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1460,"timings":{"blocked":627,"dns":0,"connect":0,"send":0,"wait":455,"receive":378,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-P3HC2W3F","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:36.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 18 Aug 2025 08:39:58 GMT","end":"Mon, 10 Nov 2025 08:39:57 GMT"},"fingerprint":{"sha1":"79:B8:10:4F:C4:95:E3:66:3C:DD:AC:2E:39:EF:9E:E6:F3:F9:ED:EC","sha256":"8E:CE:0A:16:CF:6E:E1:89:55:05:76:86:E1:EF:98:4E:A0:AD:29:9C:BB:91:E6:AA:2D:27:5D:C2:B0:00:47:59"}}},"request":{"raw":"GET /gtm.js?id=GTM-P3HC2W3F HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\nexpires: Tue, 09 Sep 2025 17:01:36 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Tue, 09 Sep 2025 16:15:43 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 95300\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":271260,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2967)","md5":"eb8132d727fc2dbf16ee5ea125fd0199","sha1":"3cf866b3a181801e08d1de6202bf39ac4350f6d1","sha256":"eb03068863c45898b68b568ffee1ca19551c700f61ada362e27e1d29dfe0611c","sha512":"35f7b0cceec6ae44d228dcb8f7cb4227380f377641f2e506b4fa501a0a66ae0b035b11258e376da08d38b76ee7d60d5f841c6173726802f64fccf8b7a799b2f3","ssdeep":"6144:sIjaFyxdajhhi4qsVxQ2q+TZZJSlaindzHA9n:tjaoxEjhhi4qsVx5q+ZZL9n","tlshash":"1e4407cd77d6b46683a36478403f114bb13b7992f84cc894e186d8d82e74aaa4237f7d","first_seen":"2025-09-09T17:02:28.705532Z","last_seen":"2025-09-09T17:02:28.705532Z","times_seen":1,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-purpe.xyz/cdn-cgi/rum?","fqdn":"claim-purpe.xyz","domain":"claim-purpe.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:38.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-purpe.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Sep 2025 17:41:21 GMT","end":"Fri, 05 Dec 2025 18:41:07 GMT"},"fingerprint":{"sha1":"E7:5B:AD:02:4C:8B:43:9A:40:BB:19:AF:78:D1:31:41:45:E1:9D:2B","sha256":"FA:41:2E:D8:E6:4C:D5:96:19:C5:E9:49:2E:4B:00:CF:B7:E6:74:15:5B:D5:C4:24:D3:C9:F0:C0:62:1D:A7:9F"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: claim-purpe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\ncontent-type: application/json\r\nContent-Length: 1046\r\nOrigin: https://claim-purpe.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _pk_id.17133.f8be=8f118c6db6020ae1.1757437297.; _pk_ses.17133.f8be=1; _ga_8T0TTJ20TF=GS2.1.s1757437297$o1$g0$t1757437297$j60$l0$h0; _ga=GA1.1.1220319025.1757437298\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Tue, 09 Sep 2025 17:01:38 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UkKZbGhHkSbgW6uA%2F3MhQ%2FzyXXAG2T%2B0bQr%2FK5FANTNnpO%2BuDMqXkZ44QCeeH%2F%2BfdLE40JzJdtXEyOm5vBE24grKqk4JqNrDhFMsAn8%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 97c83faccd62b4f1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":151,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"45efc4779b2e6b43ed200755328af518","sha1":"badb6097a3c8fad00517f38352ba72b9f7b6637b","sha256":"d66dd0f2f24c4343661a5396e1ba76782fe651f7d422209eded956ebf90900fc","sha512":"862ceb668672d90ed3da9419ca69bf0214b5c34dec2353fea792a75fb1c0c2e5fd54e6e56cf1e9d4d60c4eaa7d98411f5cb5e128be2661d9bbd084d0dbd085e0","ssdeep":"","tlshash":"a1c02b3d35637e0c8563303522c3b190d0c6833774ba00220500c00330cb2e9cac33d7","first_seen":"2023-09-18T10:37:28Z","last_seen":"2026-07-26T04:12:22.51439Z","times_seen":19309,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"claim-purpe.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.purpe.xyz/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"www.purpe.xyz","domain":"purpe.xyz","tld":"xyz"},"ip":{"addr":"104.26.14.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purpe.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 21:00:45 GMT","end":"Thu, 16 Oct 2025 22:00:29 GMT"},"fingerprint":{"sha1":"90:EE:7C:69:9E:A3:DB:A0:8D:FE:55:C6:0C:98:33:4A:3B:FF:C0:D0","sha256":"48:F6:F1:AA:03:33:D4:F1:2A:7E:35:81:A4:95:B6:E0:FD:D2:20:9A:AE:0E:04:D5:2B:26:36:11:9B:37:93:88"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: www.purpe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:35 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 21 Jul 2024 22:03:45 GMT\r\nvary: Accept-Encoding\r\netag: W/\"669d85c1-15601\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W%2F4QmDi4qltsKDqNMw5QXyxbDoaNqLlgwfcr4HRvamVJYn8kyu8VxmpHpOtkIyVLFOkYEEA02nSNsSBzibPTJ%2BIh13600JL1lyQ%3D\"}]}\r\ncf-ray: 97c83f99be3e56cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-26T04:24:27.668384Z","times_seen":990992,"resource_available":true,"data":null}},"time_used":596,"timings":{"blocked":159,"dns":99,"connect":5,"send":0,"wait":233,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/purple-pepe-first-image-001.png?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/purple-pepe-first-image-001.png?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 530627\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"4d1a016a4447696037d0c091b7c22acc\"\r\nlast-modified: Sat, 23 Aug 2025 15:51:55 GMT\r\nx-amz-expiration: expiry-date=\"Tue, 23 Sep 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=png, origSize=530627, smushRatio=0, skipped=0, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 20216780d8c8cb4cdb799ab41a6909a9\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":530627,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 872 x 945, 8-bit/color RGBA, non-interlaced","md5":"4d1a016a4447696037d0c091b7c22acc","sha1":"7f04c8e0d15473f1ac0ce442879e67df7b35f6ab","sha256":"ac107cb4e7d08337c10af5b37f3013ad4fbf5788f3390e0a7580c3130b12145a","sha512":"00da910ca8950f246d606cada04e48d205268093c6718ed0950bc291395618974d3c053256ae6c91962c7dfd68946be1e124cc8abbac4cefa903e3cb12090fc4","ssdeep":"12288:Cv+yJA0x2diblGMLqJPKdoELyfiV+qzPdlcojlRi:CvVlf21eZefy+qzPk","tlshash":"05b423b33204f941c49f13679a5a0e19972b69951e8b27883ac57f357a37b4c87c30db","first_seen":"2025-09-09T17:02:28.708347Z","last_seen":"2025-10-13T05:39:26.609036Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1700,"timings":{"blocked":651,"dns":0,"connect":0,"send":0,"wait":491,"receive":558,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/12/2502DC98-F546-48A2-A274-CD95F3E75A68_1_105_c.jpeg?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/12/2502DC98-F546-48A2-A274-CD95F3E75A68_1_105_c.jpeg?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 192813\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"10c19d742900f31e60f907c9fb471f9d\"\r\nlast-modified: Sat, 23 Aug 2025 15:51:54 GMT\r\nx-amz-expiration: expiry-date=\"Tue, 23 Sep 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=jpg, origSize=192813, smushRatio=0, skipped=1, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: e81941b72359207052524ee37782464f\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":192813,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], progressive, precision 8, 892x881, components 3","md5":"10c19d742900f31e60f907c9fb471f9d","sha1":"c0c4ede0d9f093d535583c64660286d2f10ee2a3","sha256":"20c7a59e51f31d409a137e0b18b3f53f9ee3942a0119d9e7d358afeeb1838f46","sha512":"8cf45375a58b279baf5b99f13502b086e1c9b6bf5df0b1e9cdc42d9c43e522edf3c2ea12ce0c64abd3830fe49555b081bece78b376b1b5f2ba4eb73187b74ede","ssdeep":"3072:dMdnDO42NO0cvjW7Hv6YlgNxUmKdmZfnJK+9tRmzHqaGaTJtso/z00o3x1PXO0:daShNO0cLWzv6ZxUps5wKt6q0nscz0LL","tlshash":"2a141281fab4158cca74127c485dff428abb2b1f3a761270f2007a642b444de6e5fad7","first_seen":"2025-09-09T17:02:28.709849Z","last_seen":"2025-10-13T05:39:26.466956Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1513,"timings":{"blocked":632,"dns":0,"connect":0,"send":0,"wait":507,"receive":374,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/purpe-memes-003.jpeg?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/purpe-memes-003.jpeg?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 173241\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"026bc8c531edcd9e45181badabfd3a31\"\r\nlast-modified: Fri, 15 Aug 2025 20:50:29 GMT\r\nx-amz-expiration: expiry-date=\"Mon, 15 Sep 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=jpg, origSize=173241, smushRatio=0, skipped=0, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 78d9675e06926a4befde2c9751cce855\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":173241,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1024x1024, components 3","md5":"026bc8c531edcd9e45181badabfd3a31","sha1":"240bc2f94c082768a25b7c156a0880670685c0f7","sha256":"519c551a4a47932b280d2b68f6f8dfa5a5b9688caf2ebededbcc1f0f9857c47c","sha512":"b337576b134b3a2f9c8bb3cb4b404f08e7d91e7a79b0afefc04f8a05af15f3151079af784789538e4fc96cf043b906f69505a76dba45f5f29c28583479318011","ssdeep":"3072:HCQvf39LemfZLyw8su6QvLzuJF9fnFqicGp2TFwwi:HC0oyeNsuW1dCSb","tlshash":"d3041207d34eb2b5d197c9f2a38e6630a386c71ff66f46667a2b4d30e0f48911d29271","first_seen":"2025-09-09T17:02:28.711609Z","last_seen":"2025-09-09T17:02:28.711609Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1406,"timings":{"blocked":629,"dns":0,"connect":0,"send":0,"wait":454,"receive":323,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/12/2939856D-D47E-4EEC-A731-80D77836C861_1_105_c.jpeg?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/12/2939856D-D47E-4EEC-A731-80D77836C861_1_105_c.jpeg?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 229559\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"7507decaf2fba16c6e4f5511222821b3\"\r\nlast-modified: Sat, 23 Aug 2025 15:51:58 GMT\r\nx-amz-expiration: expiry-date=\"Tue, 23 Sep 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=jpg, origSize=229559, smushRatio=0, skipped=1, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 01983a8dc41db89e0714f36d4a162189\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":229559,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], progressive, precision 8, 886x886, components 3","md5":"7507decaf2fba16c6e4f5511222821b3","sha1":"2ad99cfb1807739ba980c740df2c807091108159","sha256":"50fec53f2909ed5574965fb918e19075dc4b932e6b4703b821796173d39f3ce5","sha512":"9a3e42ce2d7686add7922d44f954364ca212329db1fe31b8c7d598f3fa5ea55a60f0fbb850c093bb01d46c25c9bf1b69c3157208a7f3dedb68a2923084668d7b","ssdeep":"6144:usv24Xd8XltLtGPy/S91m1uRXx+nSsDj+aG5dezIR5HCjG+kw1og:Dv24inKmwBM3jE5NCd1d","tlshash":"622422460583d841af177e37f9aabb93bbf54be5dca0894772226c651c84230fc849f6","first_seen":"2025-09-09T17:02:28.713117Z","last_seen":"2025-10-13T05:39:26.653846Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1593,"timings":{"blocked":604,"dns":0,"connect":0,"send":0,"wait":552,"receive":437,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"claim-purpe.xyz/fonts.gstatic.com/s/anekdevanagari/v16/jVyd7nP0CGrUsxB-QiRgw0NlLaVt_QUAkYxLRoCL23mlrWExpYkTsmE.woff2","fqdn":"claim-purpe.xyz","domain":"claim-purpe.xyz","tld":"xyz"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:37.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"claim-purpe.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 06 Sep 2025 17:41:21 GMT","end":"Fri, 05 Dec 2025 18:41:07 GMT"},"fingerprint":{"sha1":"E7:5B:AD:02:4C:8B:43:9A:40:BB:19:AF:78:D1:31:41:45:E1:9D:2B","sha256":"FA:41:2E:D8:E6:4C:D5:96:19:C5:E9:49:2E:4B:00:CF:B7:E6:74:15:5B:D5:C4:24:D3:C9:F0:C0:62:1D:A7:9F"}}},"request":{"raw":"GET /fonts.gstatic.com/s/anekdevanagari/v16/jVyd7nP0CGrUsxB-QiRgw0NlLaVt_QUAkYxLRoCL23mlrWExpYkTsmE.woff2 HTTP/1.1\r\nHost: claim-purpe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _pk_id.17133.f8be=8f118c6db6020ae1.1757437297.; _pk_ses.17133.f8be=1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:37 GMT\r\ncontent-type: text/html; charset=utf-8\r\nlast-modified: Tue, 09 Sep 2025 17:01:37 GMT\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=IB9Z%2FVvepNDd4bbX7TSvDJcDH%2FCTCh0TB8y0uYsOankuqBBhkjYz7loOsaFkZsstPNFec2Pvoowlv5SkgGdoJssdnk9ZMlYn3HKyKPO8ZNNbQx5pEeVBabcLtgmrHUh8FXk%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncf-ray: 97c83fa1fa34b4f1-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1581036,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10138)","md5":"aa1adcd5a77c8f4f2f6598557bbcb306","sha1":"43555378595bfe0177348c8ae05ee222ad1fc882","sha256":"e388e1b512947f7046784798347dd232fd975cd8ecdb5ab8e5774f8fe70bf6e7","sha512":"3d4cc18bf3e4128c1fe3e894091b4ddf7b85585487d150e5429339898dbe44cb5353b9fa11ce7d213543fdb3acb96b170f9dc70631564da7b642b7538c0948da","ssdeep":"24576:HKSiBJXSQ3fucSH54skc2XVeIUjnEgIPX72bgl2jKwj6xCRHqY2G0:HKSiBJXSQ3fucSH54skc2XVeIUjnEgIj","tlshash":"9b25534d4f7160d072679280abdd1f588a3cb163b4a204ca7bdd6507dec2ee911a63bf","first_seen":"2025-09-09T17:02:28.544208Z","last_seen":"2025-09-09T17:02:28.544208Z","times_seen":1,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-09","alert":"Sinkholed","trigger":"claim-purpe.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.bunny.net/css?family=Roboto","fqdn":"fonts.bunny.net","domain":"bunny.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fonts.bunny.net","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 06 Aug 2025 22:10:53 GMT","end":"Tue, 04 Nov 2025 22:10:52 GMT"},"fingerprint":{"sha1":"CC:36:51:05:17:06:60:8D:92:18:7A:63:20:AE:DD:C0:73:4B:11:1C","sha256":"91:BE:58:42:12:2D:1C:25:A6:C0:A2:D9:AD:47:6D:76:5B:84:A2:E9:E8:BD:DB:84:41:B6:64:A9:10:87:69:37"}}},"request":{"raw":"GET /css?family=Roboto HTTP/1.1\r\nHost: fonts.bunny.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:35 GMT\r\ncontent-type: text/css; charset=utf-8\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 781720\r\ncdn-uid: 3a60ca70-b89d-4cd5-a4b5-34a3468d7e0f\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\nlast-modified: Mon, 08 Sep 2025 14:29:59 GMT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/08/2025 14:29:59\r\ncdn-edgestorageid: 830\r\ncdn-requestid: b3ef9dae053a95e31556ba31479f46e6\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2817,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"878a7cf4452c13db71fd448de1de66f1","sha1":"7f8ec360e675fc4f197d11e1e4a4d9e3798e56d1","sha256":"f197cb23a02d011365c9b29e081881311e9f5af148ed92925b995fa928ae6123","sha512":"903097aa02c04f43568ed45d1f0d28ba036839bcf8870aac46baa426267b9eb6c43c3e01a55ea3641b931810572d9fe0f852285eeaa1fe4383cf7a6a1e711d3e","ssdeep":"","tlshash":"25518eb74019200413c32c9723daae15fe1f510a7089f456ee2ddca86ee6d3553e2b6e","first_seen":"2025-01-18T19:40:28.925946Z","last_seen":"2026-04-05T22:11:07.294631Z","times_seen":885,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":92,"connect":14,"send":0,"wait":3,"receive":0,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/12/6B85ECB5-0A7C-4E5E-8CA8-27867FBF6946_1_105_c.jpeg?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/12/6B85ECB5-0A7C-4E5E-8CA8-27867FBF6946_1_105_c.jpeg?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 313173\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"79ff396d83270caca6f33381b74574fc\"\r\nlast-modified: Sat, 30 Aug 2025 13:48:04 GMT\r\nx-amz-expiration: expiry-date=\"Tue, 30 Sep 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=jpg, origSize=313173, smushRatio=0, skipped=1, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: ad6193d669d9c7f26d8e2032ae925362\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":313173,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], progressive, precision 8, 886x886, components 3","md5":"79ff396d83270caca6f33381b74574fc","sha1":"6ef5e207cec1f82bf3e0246bf6a41a4fe08cc138","sha256":"c99f532f346d992e704aa4c04886fedc39e9f62e4ce7f97ce1b06ebfa2b5ac88","sha512":"5c7b3fea9a72856ce77c3e0de628ea31f73e79a48aa94f05f2f701c406b7c92c1b10a2d4fe65eaa0f7016f6f00837b0cf9e8a9264ed24d0e1ea3daf9e2ac5c5f","ssdeep":"6144:Nn6RF31ogu9n0nL0oAr8Xv3Xj1L+1c+Y92aix2OMsfGVLlQc:N6RF3X20LTnDxr97iJ1fG5ac","tlshash":"7164239a062cfd1bddb148d1dc0f58d392903fea5c9da003a6e9562f58b80b5476bb3c","first_seen":"2025-09-09T17:02:28.715288Z","last_seen":"2025-10-13T05:39:26.357535Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1750,"timings":{"blocked":605,"dns":0,"connect":0,"send":0,"wait":655,"receive":490,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.purpe.xyz/wp-content/plugins/forminator/assets/forminator-ui/css/src/grid/forminator-grid.open.min.css?ver=1.43.0","fqdn":"www.purpe.xyz","domain":"purpe.xyz","tld":"xyz"},"ip":{"addr":"104.26.14.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purpe.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Jul 2025 21:00:45 GMT","end":"Thu, 16 Oct 2025 22:00:29 GMT"},"fingerprint":{"sha1":"90:EE:7C:69:9E:A3:DB:A0:8D:FE:55:C6:0C:98:33:4A:3B:FF:C0:D0","sha256":"48:F6:F1:AA:03:33:D4:F1:2A:7E:35:81:A4:95:B6:E0:FD:D2:20:9A:AE:0E:04:D5:2B:26:36:11:9B:37:93:88"}}},"request":{"raw":"GET /wp-content/plugins/forminator/assets/forminator-ui/css/src/grid/forminator-grid.open.min.css?ver=1.43.0 HTTP/1.1\r\nHost: www.purpe.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:35 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 06 May 2025 17:50:12 GMT\r\nvary: Accept-Encoding\r\netag: W/\"681a4bd4-147a\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\ncontent-encoding: br\r\ncf-cache-status: HIT\r\nage: 183519\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kexsQ6TieAW%2BcLFmF7Gu0djXNQ1oHpLU6mkaJMDIMsQP95QBWbabXluZP1ilR38ylKgVoDfH%2B%2FXjiCX%2BK1SeN%2FZhLluwYnz6A0w%3D\"}]}\r\ncf-ray: 97c83f999e2456cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5242,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5062), with CRLF line terminators","md5":"feeb2d6842d28920e3826302fdc1775a","sha1":"aa9797d0cc07d36176a16c2191e8bdcb8195a23c","sha256":"65bb3f7f8c3c0f83d18dab4fa8c278b6d7000add62db777f1a8772e56f83894d","sha512":"2ab39876343d42547b0b92f52ca335ca658a624bb37695d6fcd0edffc17a42e471992410e11a0aeaab740de5c700b08c8c08b9dfd147cbb23cb7b4dfd152eac8","ssdeep":"96:etvt2t4t3t0thtrt2tXtqotmtROtEtFqfthtWmthttgtptVtPtdtrt/t0tyQt1t/:etvt2t4t3t0thtrt2tXtqotmtROtEtF2","tlshash":"f6b16da6bcbc277431623d30d7da6dd0445297042622efd21fedcc462a4a7e66707bb4","first_seen":"2025-09-09T17:02:28.716929Z","last_seen":"2025-10-13T05:39:26.316901Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"b3682341.smushcdn.com/3682341/wp-content/uploads/2024/09/cropped-purple-pepe-first-image-001.png?lossy=0\u0026strip=1\u0026webp=0","fqdn":"b3682341.smushcdn.com","domain":"b3682341.smushcdn.com","tld":"smushcdn.com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://claim-purpe.xyz/","date":"2025-09-09T17:01:35.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.smushcdn.com","organization":""},"issuer":{"commonName":"RapidSSL TLS ECC CA G1","organization":"DigiCert Inc"},"validity":{"start":"Thu, 30 Jan 2025 00:00:00 GMT","end":"Thu, 29 Jan 2026 23:59:59 GMT"},"fingerprint":{"sha1":"13:F4:FE:09:01:BB:9E:79:61:C1:5D:E1:7E:FE:CF:5D:A9:5C:44:28","sha256":"4D:D2:83:CC:E0:5B:4A:FE:43:AC:AD:E4:0C:8A:9D:8F:86:2A:5A:E2:13:65:8D:E4:49:28:7A:38:EB:85:91:16"}}},"request":{"raw":"GET /3682341/wp-content/uploads/2024/09/cropped-purple-pepe-first-image-001.png?lossy=0\u0026strip=1\u0026webp=0 HTTP/1.1\r\nHost: b3682341.smushcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://claim-purpe.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 09 Sep 2025 17:01:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 222708\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 2538072\r\ncdn-uid: 778bbc1f-fc99-4e43-843d-a54ddaa69624\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\netag: \"237b2122f83f96e3785fbc5d03338b7d\"\r\nlast-modified: Sat, 23 Aug 2025 15:52:03 GMT\r\nx-amz-expiration: expiry-date=\"Tue, 23 Sep 2025 00:00:00 GMT\", rule-id=\"expire\"\r\nsmushed: origFmt=png, origSize=222708, smushRatio=0, skipped=0, originCache=HIT\r\ncdn-proxyver: 1.34\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/09/2025 17:01:36\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 3a64cb7626c612238396eb3ec0969dd9\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":222708,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"237b2122f83f96e3785fbc5d03338b7d","sha1":"9c21da299be6358597cc03d11b9777ec4a281b9e","sha256":"7c95d0af95999829f4a41cee6758e84d2d7caf2363a3b6abca3eab17bcb8a6e8","sha512":"c356c46707ee451611b2ae1182c560641a1e120ac3491473144de8901982df1228696e73c9f948eefdbc8cf461338ae848cb83be19edc0e15bb2ec9a8271ce37","ssdeep":"6144:t7oDvVmrXIfxmaivlb9TrYoZmCjR5RS2wO:9oD9uX4xotBD9RvwO","tlshash":"032423fed8eb9414dad78767a0cc7c38fe6419ae9e18dcb5267370010f11b4c89ae952","first_seen":"2025-09-09T17:02:28.718456Z","last_seen":"2025-10-13T05:39:26.451426Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1460,"timings":{"blocked":644,"dns":0,"connect":0,"send":0,"wait":475,"receive":341,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}