{"report_id":"1a3a86d4-027f-478b-88ee-e3199fd7e678","version":6,"status":"done","tags":[],"date":"2026-01-28T19:43:52Z","url":{"schema":"https","addr":"airdrop.moonbirbes.xyz/","fqdn":"airdrop.moonbirbes.xyz","domain":"moonbirbes.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.29","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"airdrop.moonbirbes.xyz/","fqdn":"airdrop.moonbirbes.xyz","domain":"moonbirbes.xyz","tld":"xyz"},"title":"MoonBirds | AirDrop","dom":{"size":43009,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (16074)","md5":"111e0299afa0bdb931d56604ffb4162e","sha1":"222102c50f3defc36f063c102cbdec5962db5fcf","sha256":"da13afa32dc902fa8cf323516c8b69ed4a6d545a2f6e83d8d5e7f05c30fa1cfd","sha512":"108a37a9307cd5a83a26dc5f2bf531ff072efb3c43c72c3830b3c1a8020a60e58b28e5ad75778bac5924cc79c81dd49fbf4e7160e6c4df74c5c97f4623faca21","ssdeep":"768:KmzQH2L0r82It4uSRhKut5NFgl+FU+xHyvfSDIJPJWf3b8fzwZPROHXL0hDgmwc5:RzOLBKZJ/zPLwJvzoCxkm","tlshash":"56133070f450283b351ba1ef2ac28f6d76a6a456cc27660873fc8182dfd6ef69d63414","dom_hash":"domhashbc51b01f98cf7a3ac4444818cae6ca0d","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"airdrop.moonbirbes.xyz/","fqdn":"airdrop.moonbirbes.xyz","domain":"moonbirbes.xyz","tld":"xyz"},"ip":{"addr":"104.21.32.29","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-04T19:43:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"airdrop.moonbirbes.xyz","ip":{"addr":"172.67.182.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-28","domain_rank":0,"first_seen":"2026-01-28T19:40:39.987045Z","last_seen":"2026-01-28T19:40:39.987045Z","alert_count":0,"request_count":27,"received_data":1414529,"sent_data":13478,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"airdrop.moonbirbes.xyz/","fqdn":"airdrop.moonbirbes.xyz","domain":"moonbirbes.xyz","tld":"xyz"},"ip":{"addr":"172.67.182.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"269184e3504aae95e2b0ce7666438b00","sha1":"a6802ee4c1021b344ee662a82068467329d50fd9","sha256":"2ab42cf0412a38c90d3d9ca5ac3f441f89a0db07f5e04ced3b3cca4d5f164f62","sha512":"e08b1f8d74ebbbad7f7a059ae8e0275d8bd6e9b94faf9bf9b2433b84a8be65e760962485bbb5be78cf36d6190ea356b4e2c14561557a80935f99105a52d99b5b","ssdeep":"","tlshash":"96c0120970746566048e786d08cf08897f268412610849c599dcc8547fb1e6942b084c","size":173,"data":"","first_seen":"2024-12-04T06:49:00.889058Z","last_seen":"2026-05-18T19:43:40.54405Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrop.moonbirbes.xyz/","fqdn":"airdrop.moonbirbes.xyz","domain":"moonbirbes.xyz","tld":"xyz"},"ip":{"addr":"172.67.182.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"297a907d4e5b4c2198915e66274d9c9a","sha1":"e0f98af49ab0f7a270e2d739436181f924449098","sha256":"0fdbc26d9d5bd7f6a4bc38acfb91fc663c57463d43a08447f1386b3354cd84de","sha512":"48487cbd59e60a259a5836fc0315243da500d617e94e06b3073f79bb834bd141c9e5cfb59c42a3c2086c920c21be5996e589d4658513cf31d95bfc5757a4a44e","ssdeep":"","tlshash":"1371bc3beb00173bdc8fb9fdced5b4c02e62497262496560691ce102b16cd7087bed88","size":3741,"data":"","first_seen":"2025-08-14T22:39:51.132287Z","last_seen":"2026-06-03T14:16:15.147553Z","times_seen":3139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrop.moonbirbes.xyz/expo.plus.umd.js","fqdn":"airdrop.moonbirbes.xyz","domain":"moonbirbes.xyz","tld":"xyz"},"ip":{"addr":"172.67.182.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9d6e766f86dddc9309f038984cb455d5","sha1":"5c48eb526660faab3b19b990d87cdac1dcd64cb6","sha256":"996565832f7347a13905fa90dd612fa618d64bce518aa8d645c54cfdea91fabf","sha512":"fd8b17e9cd28707bf33be9f4ae9a7ec7416d5abf2497431977a0997620eacfc98d3d62cb7d6679b9b2a9dcc0c3bab0f4dea6ce5229c0bc70b5d4938f79be7743","ssdeep":"3072:WHeWADq5XhlkXMPz6uEwLiEpLG/bAb5p0bGg4Pvg8k8FsUeaznX1:W+WADq5XheXMPQjEpPb55wi","tlshash":"96743eff098350bd823853db74a5c5b98efcb9524b882c2be7a55645f81066634e33b3","size":356689,"data":"","first_seen":"2026-01-27T12:09:53.495616Z","last_seen":"2026-01-28T19:43:54.417007Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrop.moonbirbes.xyz/","fqdn":"airdrop.moonbirbes.xyz","domain":"moonbirbes.xyz","tld":"xyz"},"ip":{"addr":"172.67.182.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f15c08ce1fcf3e1d653c2d02e562b0f3","sha1":"4048a30a2ba6254b4160f7fd072c068be16ce15b","sha256":"c1912cdcc3e977ed8552eb405c8002ee90dfac05a345a5f39caccdc98932fe65","sha512":"3dad10d5cd46ae45f8f0089211ae5a50b8e0ad14bf36c287b03eb2c7f9de92c909ecc743e0e4d5448a83c4fe627cccd613b10ae620781435e4fe7c06362630ba","ssdeep":"3072:IKjpOjdOZNqqYKJpm6QqACmj9wL/yX59MduGCPfeoy8FsUeaznXk:Ip6rh9mjJX5X+9","tlshash":"2b744eff098760bd823553eb78a5c5b58efcbd5247882c2ae7a55601f85066234e33b3","size":349161,"data":"","first_seen":"2026-01-27T12:09:53.511084Z","last_seen":"2026-01-28T19:43:54.420604Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrop.moonbirbes.xyz/","fqdn":"airdrop.moonbirbes.xyz","domain":"moonbirbes.xyz","tld":"xyz"},"ip":{"addr":"172.67.182.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7701841bc6fdbcfb07f261d5bf52459c","sha1":"4e7123342cdd41bec739044a14a22a924b4c8860","sha256":"ee1ed6046341fc3966c70f25fe05b608a99c7f310df24917c992fd45bc4ceaf3","sha512":"762e264a4bc85306014b44d180d863b9429366d2613e588e989bb0cdcf3deffd24d29269e1cee8e0e765a4c1100407787df79883fbc95b0845f3ff1ce4c3d36f","ssdeep":"","tlshash":"5e11482cb4f62272153b3139475fa38e3a7150933009e9093d6d8a910fe4e1a69a6eda","size":983,"data":"","first_seen":"2026-01-27T12:09:53.512626Z","last_seen":"2026-01-28T19:43:54.421392Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrop.moonbirbes.xyz/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fdayjs.esm.min.js%3Ft%3D29493823%26u%3DyHbvCglwwSMI2ZDpGDY5MjU2NDRlMjhjZmYzYzM0MDI3ZGZjZq1_pbqJ1SHc3zpNCg","fqdn":"airdrop.moonbirbes.xyz","domain":"moonbirbes.xyz","tld":"xyz"},"ip":{"addr":"172.67.182.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c835ce0aa761a791b29ba4c102a85e28","sha1":"828e40328ca8ff740f1090e6f63e170c1592a62c","sha256":"4ee6631554867dc1bfadbfe5f4b4ebf4cec5164ba142f8db92f840c2028496cf","sha512":"49cefc3ca9614cebafe201eef12b5cdebcdd19da6ab30f530d7a81a8ef91fca5f02eb63108b8056c2dbd4c22b8b337aae939a712f4a876bdeef21a1e2a9f3225","ssdeep":"6144:9ujB8gltIeTM5/S8g6zRhNgDzQebuazBzqXQPkBAUvVdZcml4L:ihltVM/g6ZszQeqazNqXQcBvK","tlshash":"29d4bcec970a167788cb97b6423363afef884d1a236b3c406ec19cd1574a74e53ea15c","size":641034,"data":"","first_seen":"2026-01-01T19:22:06.925398Z","last_seen":"2026-03-30T11:52:16.142566Z","times_seen":405,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"airdrop.moonbirbes.xyz/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7SUc.woff2","fqdn":"airdrop.moonbirbes.xyz","domain":"moonbirbes.xyz","tld":"xyz"},"ip":{"addr":"172.67.182.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://airdrop.moonbirbes.xyz/","date":"2026-01-28T19:43:30.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonbirbes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 16:53:44 GMT","end":"Tue, 28 Apr 2026 17:51:30 GMT"},"fingerprint":{"sha1":"2B:FC:9A:91:B8:B0:EB:D4:BA:0B:FE:0B:02:C8:A7:E0:0C:F9:A2:D0","sha256":"F6:4C:DA:42:8F:24:73:EC:6C:4B:BC:BC:B1:E1:6A:2D:04:57:08:56:24:E5:4F:D9:F3:90:B6:81:A1:B8:B6:18"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7SUc.woff2 HTTP/1.1\r\nHost: airdrop.moonbirbes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop.moonbirbes.xyz/css2-1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 19:43:30 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'none'\r\nx-content-type-options: nosniff, nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\nx-cast-cache: STALE\r\nage: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZOSKHIsK16ORBMTaxaoMOvYnjYk068NyEUQdMZ%2BNqA4zC5GDvpgyALKQESl5wr%2BlYil5%2FpT0Cnuh37136JtW83BRSWQmaoRtvs9ie2r4Nx3gRBZJp4w%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c52faa49a2b5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":184,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"48481ddae1747dc916015d6397ff0aac","sha1":"3dbe6dfa4966ea0c26a2961738c3e92dd85513d5","sha256":"252e35c9e7ac24fb79dd66b140c352c693cdfe3a9568f98d0a55832ffad529f4","sha512":"27d41a2bc06c67f34053de4886e643bba392a5f415ee0fd359c1ec5b69b25c4a2768fbb87896bc4c51581fcb39cca6b63d53ed9319fdc314abf35e0189342d0b","ssdeep":"","tlshash":"16c080df10122205173597041ac1779436d73bdd16d6d6887b46f057dce466ac9c7398","first_seen":"2026-01-28T19:40:42.759697Z","last_seen":"2026-01-28T19:43:54.410802Z","times_seen":2,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrop.moonbirbes.xyz/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"airdrop.moonbirbes.xyz","domain":"moonbirbes.xyz","tld":"xyz"},"ip":{"addr":"172.67.182.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://airdrop.moonbirbes.xyz/","date":"2026-01-28T19:43:30.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonbirbes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 16:53:44 GMT","end":"Tue, 28 Apr 2026 17:51:30 GMT"},"fingerprint":{"sha1":"2B:FC:9A:91:B8:B0:EB:D4:BA:0B:FE:0B:02:C8:A7:E0:0C:F9:A2:D0","sha256":"F6:4C:DA:42:8F:24:73:EC:6C:4B:BC:BC:B1:E1:6A:2D:04:57:08:56:24:E5:4F:D9:F3:90:B6:81:A1:B8:B6:18"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: airdrop.moonbirbes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop.moonbirbes.xyz/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 19:43:30 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'none'\r\nx-content-type-options: nosniff, nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\nx-cast-cache: STALE\r\nage: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Zy4KYmmn1KtKivXDywvlhAL72fUyjczHU21xPXEEQLDK3tWTXDZ%2FSP09xpcgUbkTo%2FAYSVPUE5Ko5lvX%2FgyDMcaeE8%2B2ZfozuK8YgU74z%2FklT9o9%2Bg%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c52faa6ea4e5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":181,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"c63185c4c73181b44ee3a23844003ac1","sha1":"5af6fdbcf8284c9157b3305a964962a16ac67cf6","sha256":"a92d5e1b31ba73f854081a1dbce840f95c8864f6731df26c62c105f34d9bd20d","sha512":"daf98ec3bfa4017f4fb3733d762f4144f92ef4df282aa5d2b969fed51deee4aaa93c0cb79de5f5b1ec9904e38efeb6d0dcc08a50bd2b2cb7fb27d2b25efa56ca","ssdeep":"","tlshash":"d6c0809f20015105073557041fc1775836d73bed15da95447f47e057dce5756c5c7398","first_seen":"2026-01-28T19:40:42.761236Z","last_seen":"2026-01-28T19:43:54.411509Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrop.moonbirbes.xyz/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7SUc.woff2","fqdn":"airdrop.moonbirbes.xyz","domain":"moonbirbes.xyz","tld":"xyz"},"ip":{"addr":"172.67.182.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://airdrop.moonbirbes.xyz/","date":"2026-01-28T19:43:30.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonbirbes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 16:53:44 GMT","end":"Tue, 28 Apr 2026 17:51:30 GMT"},"fingerprint":{"sha1":"2B:FC:9A:91:B8:B0:EB:D4:BA:0B:FE:0B:02:C8:A7:E0:0C:F9:A2:D0","sha256":"F6:4C:DA:42:8F:24:73:EC:6C:4B:BC:BC:B1:E1:6A:2D:04:57:08:56:24:E5:4F:D9:F3:90:B6:81:A1:B8:B6:18"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7SUc.woff2 HTTP/1.1\r\nHost: airdrop.moonbirbes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop.moonbirbes.xyz/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 19:43:30 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'none'\r\nx-content-type-options: nosniff, nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\nx-cast-cache: STALE\r\nage: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9TbvLkaYmi61WlVEw5UbMqmV%2B8bMNt1UNXlQE02mYAa732%2FBtF5Mz6xbnu2dCPVm7f1cNSETCUSHNz6srJWfcRt2a0Y5do6GrstF%2B9ja%2FMpmld4PqHo%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c52faa6ea515fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":184,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"48481ddae1747dc916015d6397ff0aac","sha1":"3dbe6dfa4966ea0c26a2961738c3e92dd85513d5","sha256":"252e35c9e7ac24fb79dd66b140c352c693cdfe3a9568f98d0a55832ffad529f4","sha512":"27d41a2bc06c67f34053de4886e643bba392a5f415ee0fd359c1ec5b69b25c4a2768fbb87896bc4c51581fcb39cca6b63d53ed9319fdc314abf35e0189342d0b","ssdeep":"","tlshash":"16c080df10122205173597041ac1779436d73bdd16d6d6887b46f057dce466ac9c7398","first_seen":"2026-01-28T19:40:42.759697Z","last_seen":"2026-01-28T19:43:54.410802Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrop.moonbirbes.xyz/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"airdrop.moonbirbes.xyz","domain":"moonbirbes.xyz","tld":"xyz"},"ip":{"addr":"172.67.182.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://airdrop.moonbirbes.xyz/","date":"2026-01-28T19:43:29.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonbirbes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 16:53:44 GMT","end":"Tue, 28 Apr 2026 17:51:30 GMT"},"fingerprint":{"sha1":"2B:FC:9A:91:B8:B0:EB:D4:BA:0B:FE:0B:02:C8:A7:E0:0C:F9:A2:D0","sha256":"F6:4C:DA:42:8F:24:73:EC:6C:4B:BC:BC:B1:E1:6A:2D:04:57:08:56:24:E5:4F:D9:F3:90:B6:81:A1:B8:B6:18"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: airdrop.moonbirbes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop.moonbirbes.xyz/css2-1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 19:43:30 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'none'\r\nx-content-type-options: nosniff, nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\nx-cast-cache: STALE\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=up%2BvWhO2lUaJ0qJEEqi2dOAJ510Z1VzhJoFTu5hZU%2FJrUMADHKifT5Rf0l1CHc6OWPU6TFIDx82bYNeohcbAKiJaz%2F6qU%2Bg91oZKMAdQhIWOHSPG%2BLc%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c52faa47a215fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":181,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"c63185c4c73181b44ee3a23844003ac1","sha1":"5af6fdbcf8284c9157b3305a964962a16ac67cf6","sha256":"a92d5e1b31ba73f854081a1dbce840f95c8864f6731df26c62c105f34d9bd20d","sha512":"daf98ec3bfa4017f4fb3733d762f4144f92ef4df282aa5d2b969fed51deee4aaa93c0cb79de5f5b1ec9904e38efeb6d0dcc08a50bd2b2cb7fb27d2b25efa56ca","ssdeep":"","tlshash":"d6c0809f20015105073557041fc1775836d73bed15da95447f47e057dce5756c5c7398","first_seen":"2026-01-28T19:40:42.761236Z","last_seen":"2026-01-28T19:43:54.411509Z","times_seen":2,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrop.moonbirbes.xyz/9dlxd.css","fqdn":"airdrop.moonbirbes.xyz","domain":"moonbirbes.xyz","tld":"xyz"},"ip":{"addr":"172.67.182.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://airdrop.moonbirbes.xyz/","date":"2026-01-28T19:43:29.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonbirbes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 16:53:44 GMT","end":"Tue, 28 Apr 2026 17:51:30 GMT"},"fingerprint":{"sha1":"2B:FC:9A:91:B8:B0:EB:D4:BA:0B:FE:0B:02:C8:A7:E0:0C:F9:A2:D0","sha256":"F6:4C:DA:42:8F:24:73:EC:6C:4B:BC:BC:B1:E1:6A:2D:04:57:08:56:24:E5:4F:D9:F3:90:B6:81:A1:B8:B6:18"}}},"request":{"raw":"GET /9dlxd.css HTTP/1.1\r\nHost: airdrop.moonbirbes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop.moonbirbes.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 19:43:29 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 28 Jan 2026 17:27:50 GMT\r\netag: W/\"18c3a-19c05a5b17e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AkLR6wezEdake7lmNW3M4ou%2BAT69JDXF1dKYPMmhF8c3eN98d3KpeAde8l7DJxNtQijk4xRTu7ZUG7T2J1QExyHfc1hWaR3b7AobtgkJ5xuxPsFZ4Rg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c52faa16a0a5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":101434,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (41066)","md5":"77edadcee2aadfb1c573c6849e6b6f4b","sha1":"1781c815f6fd6dfc75312cfb2e99709fcffccc3c","sha256":"dd61f2d3bf2b0a2b6f31242ec61888313fa8dced5eed31e9c67e243bbbf08ff9","sha512":"6af29a86d492ab85e8945bee153b9340698ea27738f8aea5e739c970ec579813452f119599e4a86c96be3ba31ee810b02aa55010915eabb752975cdcd2a140cb","ssdeep":"1536:PMCMPMCMjMCM4MCMwMCM3sVMX70vebPMKXSFPTytGuCprfZC8:q70vedCFbytGuCpfZC8","tlshash":"cfa3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2026-01-27T11:12:46.140606Z","last_seen":"2026-02-14T07:55:45.654268Z","times_seen":16,"resource_available":false,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":385,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrop.moonbirbes.xyz/bafkreifesrdorgmwpy2zfrnzvqb5guc7petxirvf2v2vaxqntytmrwyyw4.png","fqdn":"airdrop.moonbirbes.xyz","domain":"moonbirbes.xyz","tld":"xyz"},"ip":{"addr":"172.67.182.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://airdrop.moonbirbes.xyz/","date":"2026-01-28T19:43:29.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonbirbes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 16:53:44 GMT","end":"Tue, 28 Apr 2026 17:51:30 GMT"},"fingerprint":{"sha1":"2B:FC:9A:91:B8:B0:EB:D4:BA:0B:FE:0B:02:C8:A7:E0:0C:F9:A2:D0","sha256":"F6:4C:DA:42:8F:24:73:EC:6C:4B:BC:BC:B1:E1:6A:2D:04:57:08:56:24:E5:4F:D9:F3:90:B6:81:A1:B8:B6:18"}}},"request":{"raw":"GET /bafkreifesrdorgmwpy2zfrnzvqb5guc7petxirvf2v2vaxqntytmrwyyw4.png HTTP/1.1\r\nHost: airdrop.moonbirbes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop.moonbirbes.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 19:43:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 5394\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 28 Jan 2026 17:27:50 GMT\r\netag: W/\"1512-19c05a5b182\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JXlZ3xLgwA5%2BE0U5MlUYATBcdGgscLhIXDlwXfadNeOZGHuI8bq%2BQiSgtklwtXrtV1S08aCE14GQH7sj%2BeznXMqRgGFCuPEINMmS%2Bf0nObvVXFqWjZU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c52faa16a0d5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5394,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 401x402, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"eef71258de7a12a58e89d1c68ef2e51f","sha1":"9e85a5060491bb5b0fbf1a9aaef60dab9db26e95","sha256":"f072f55ffb215073c0978c77ed3be187fec4a05c6c0e60b8ff93af31038a2518","sha512":"1285a7ae2bf1b1a461930421a28bbde59f5870ce8eb56024d42af3b3cbd8200f2483c63a1c94162209b4fdf53f58dc7a4fbe83dcb9d3a69fb7366aa5005615d0","ssdeep":"96:bc9zQiAcqa5i9427nNZAtmWdFPFcjUI2uwOpT44H6jJ10khmd4nZAhwusX0+b:46b/f9xYtmWbFc/2IT49jztHb","tlshash":"b8b18d070997883a3c8b36afdd7006644304896f9e385bddf466c732862da53062ed9f","first_seen":"2026-01-27T11:12:46.141967Z","last_seen":"2026-02-14T07:55:45.650171Z","times_seen":18,"resource_available":false,"data":null}},"time_used":388,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":388,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrop.moonbirbes.xyz/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7SUc.woff2","fqdn":"airdrop.moonbirbes.xyz","domain":"moonbirbes.xyz","tld":"xyz"},"ip":{"addr":"172.67.182.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://airdrop.moonbirbes.xyz/","date":"2026-01-28T19:43:30.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonbirbes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 16:53:44 GMT","end":"Tue, 28 Apr 2026 17:51:30 GMT"},"fingerprint":{"sha1":"2B:FC:9A:91:B8:B0:EB:D4:BA:0B:FE:0B:02:C8:A7:E0:0C:F9:A2:D0","sha256":"F6:4C:DA:42:8F:24:73:EC:6C:4B:BC:BC:B1:E1:6A:2D:04:57:08:56:24:E5:4F:D9:F3:90:B6:81:A1:B8:B6:18"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7SUc.woff2 HTTP/1.1\r\nHost: airdrop.moonbirbes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop.moonbirbes.xyz/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 19:43:30 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'none'\r\nx-content-type-options: nosniff, nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\nx-cast-cache: STALE\r\nage: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gLARFzynS9MJZjgukImm2ngmJHnB3O1k79vja0xsQUzLPMx7NJVr9sOBhKBLjs8BRhzjn9hEU%2BTjJWrp0FBZJd3257IeueqhOcT064sOR6EuhOxF32g%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c52faa6ea4f5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":184,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"48481ddae1747dc916015d6397ff0aac","sha1":"3dbe6dfa4966ea0c26a2961738c3e92dd85513d5","sha256":"252e35c9e7ac24fb79dd66b140c352c693cdfe3a9568f98d0a55832ffad529f4","sha512":"27d41a2bc06c67f34053de4886e643bba392a5f415ee0fd359c1ec5b69b25c4a2768fbb87896bc4c51581fcb39cca6b63d53ed9319fdc314abf35e0189342d0b","ssdeep":"","tlshash":"16c080df10122205173597041ac1779436d73bdd16d6d6887b46f057dce466ac9c7398","first_seen":"2026-01-28T19:40:42.759697Z","last_seen":"2026-01-28T19:43:54.410802Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrop.moonbirbes.xyz/fa-solid-900.woff2","fqdn":"airdrop.moonbirbes.xyz","domain":"moonbirbes.xyz","tld":"xyz"},"ip":{"addr":"172.67.182.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://airdrop.moonbirbes.xyz/","date":"2026-01-28T19:43:29.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonbirbes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 16:53:44 GMT","end":"Tue, 28 Apr 2026 17:51:30 GMT"},"fingerprint":{"sha1":"2B:FC:9A:91:B8:B0:EB:D4:BA:0B:FE:0B:02:C8:A7:E0:0C:F9:A2:D0","sha256":"F6:4C:DA:42:8F:24:73:EC:6C:4B:BC:BC:B1:E1:6A:2D:04:57:08:56:24:E5:4F:D9:F3:90:B6:81:A1:B8:B6:18"}}},"request":{"raw":"GET /fa-solid-900.woff2 HTTP/1.1\r\nHost: airdrop.moonbirbes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop.moonbirbes.xyz/9dlxd.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 19:43:30 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 150124\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 28 Jan 2026 17:27:50 GMT\r\netag: W/\"24a6c-19c05a5b19a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b9Hbsj6b1ywoqQOEJr8NWFRLDdS8myQEGr3ZO0meXDkmHpph5pXXWz5AAs90zSjDoNw81PbLO8xunjRVxV3ShMZEwD1DZERaQikr3wlUPFBAGu%2FIW9Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c52faa46a1f5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":150124,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 150124, version 772.256","md5":"c64278386c2bbb5e293e11b94ca2f6d1","sha1":"6b99aa650bd12a36caa14e0127435d8f4cd3ba73","sha256":"7152a6933ee3d690ec2af3d09da9d701723d16aa3410a6d80f28ff8866f3b880","sha512":"0ccdc1515510d902c0b4a48b863c48bad86e1f766b1f9c890a64e28d91ee7c6d488241c531fc094d15b29c211da71e092587a987e24ee8e67ef8ea99c284e821","ssdeep":"3072:7sCbk7w0ZXdkN6iMjif3Lr7x7wAtf+D7gDk1feXDLnurWHqrNIuv5n0:7sCbkFZXdC7MaLr9w2mIY1feXXurWyNW","tlshash":"28e3123cf2c6d486735f5aeadb79636894fd0a2e74ecc67d26b982112048f828174d1d","first_seen":"2023-04-09T20:30:06Z","last_seen":"2026-06-08T19:48:22.11381Z","times_seen":37746,"resource_available":false,"data":null}},"time_used":488,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":358,"receive":130,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrop.moonbirbes.xyz/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7SUc.woff2","fqdn":"airdrop.moonbirbes.xyz","domain":"moonbirbes.xyz","tld":"xyz"},"ip":{"addr":"172.67.182.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://airdrop.moonbirbes.xyz/","date":"2026-01-28T19:43:30.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonbirbes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 16:53:44 GMT","end":"Tue, 28 Apr 2026 17:51:30 GMT"},"fingerprint":{"sha1":"2B:FC:9A:91:B8:B0:EB:D4:BA:0B:FE:0B:02:C8:A7:E0:0C:F9:A2:D0","sha256":"F6:4C:DA:42:8F:24:73:EC:6C:4B:BC:BC:B1:E1:6A:2D:04:57:08:56:24:E5:4F:D9:F3:90:B6:81:A1:B8:B6:18"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7SUc.woff2 HTTP/1.1\r\nHost: airdrop.moonbirbes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop.moonbirbes.xyz/css2-1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 19:43:30 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'none'\r\nx-content-type-options: nosniff, nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\nx-cast-cache: STALE\r\nage: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6XB%2B40Brjfbt8KWQnlInL0KCylRakrHB0pOt4HHi7sUmq8gnbqE%2FKTdd0j0qs2iQ7QPKluDL4noaQR6FUV9063uTn0yiufFZggdVzp%2ByEjpjehvN6T0%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c52faa48a245fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":184,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"48481ddae1747dc916015d6397ff0aac","sha1":"3dbe6dfa4966ea0c26a2961738c3e92dd85513d5","sha256":"252e35c9e7ac24fb79dd66b140c352c693cdfe3a9568f98d0a55832ffad529f4","sha512":"27d41a2bc06c67f34053de4886e643bba392a5f415ee0fd359c1ec5b69b25c4a2768fbb87896bc4c51581fcb39cca6b63d53ed9319fdc314abf35e0189342d0b","ssdeep":"","tlshash":"16c080df10122205173597041ac1779436d73bdd16d6d6887b46f057dce466ac9c7398","first_seen":"2026-01-28T19:40:42.759697Z","last_seen":"2026-01-28T19:43:54.410802Z","times_seen":2,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrop.moonbirbes.xyz/secureproxy?e=ping_proxy","fqdn":"airdrop.moonbirbes.xyz","domain":"moonbirbes.xyz","tld":"xyz"},"ip":{"addr":"172.67.182.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://airdrop.moonbirbes.xyz/","date":"2026-01-28T19:43:30.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonbirbes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 16:53:44 GMT","end":"Tue, 28 Apr 2026 17:51:30 GMT"},"fingerprint":{"sha1":"2B:FC:9A:91:B8:B0:EB:D4:BA:0B:FE:0B:02:C8:A7:E0:0C:F9:A2:D0","sha256":"F6:4C:DA:42:8F:24:73:EC:6C:4B:BC:BC:B1:E1:6A:2D:04:57:08:56:24:E5:4F:D9:F3:90:B6:81:A1:B8:B6:18"}}},"request":{"raw":"GET /secureproxy?e=ping_proxy HTTP/1.1\r\nHost: airdrop.moonbirbes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://airdrop.moonbirbes.xyz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 19:43:30 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qC5NaKkVlqxXXg6VOEFc5BZJYOlr4BF8hSU1%2BSHb9pnm%2FDlA0QTVL2rSNKyvZPVTiFTKQhRf9I9cG0vZmchRch8UTQz%2BuuO7yeZtPqOHgdyQC2uj8Wo%3D\"}]}\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9c52faa68a4a5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"6fdb087aa3fbfbcb8287a593a0919e61","sha1":"0e514a0662bcb69dc863953d1ce26e3d40e81a87","sha256":"9795c5ff8937f23526ccb207a5684c1fc94a7854e19c021b39d944e51f5baef2","sha512":"be5457d14c930b51b47ab152850c1ceaafe6ef88c8671b48164abbc83410b0c07a1e178540f6cdeac5f2672cadb1d1cbbb3434b3e39bc2c50c4646a2bae57437","ssdeep":"","tlshash":"fe300000300000000000000c0000000000000000000000000000000000300000000000","first_seen":"2023-04-12T09:14:15Z","last_seen":"2026-06-08T13:09:33.777887Z","times_seen":8784,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrop.moonbirbes.xyz/partners.svg","fqdn":"airdrop.moonbirbes.xyz","domain":"moonbirbes.xyz","tld":"xyz"},"ip":{"addr":"172.67.182.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://airdrop.moonbirbes.xyz/","date":"2026-01-28T19:43:29.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonbirbes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 16:53:44 GMT","end":"Tue, 28 Apr 2026 17:51:30 GMT"},"fingerprint":{"sha1":"2B:FC:9A:91:B8:B0:EB:D4:BA:0B:FE:0B:02:C8:A7:E0:0C:F9:A2:D0","sha256":"F6:4C:DA:42:8F:24:73:EC:6C:4B:BC:BC:B1:E1:6A:2D:04:57:08:56:24:E5:4F:D9:F3:90:B6:81:A1:B8:B6:18"}}},"request":{"raw":"GET /partners.svg HTTP/1.1\r\nHost: airdrop.moonbirbes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop.moonbirbes.xyz/skfhx.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 19:43:30 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 28 Jan 2026 17:27:50 GMT\r\netag: W/\"b2d3-19c05a5b19e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TUqGC%2BHohfwllC7doI%2BLSA0Lx7lUWlfNhCn4KIANzF6YCH9ekr5rsgeT2iupq8mpJvXNwPZc%2FGaxyk2qrfQKlItt4UDBJSwjN5IlJdGjUurzkkWK0%2Fw%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c52faa45a1e5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45779,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7f22aa5a0907db8601fe547ae17fb8cd","sha1":"00ad41d4e8f817203378bdda7031d9efd978d86d","sha256":"f8ed2880d52516945036dc4c2c00894556486a2e74822a83928ee326a81276a3","sha512":"3c0007baeec55935b9c90c504f3ca754a4fbe10dd4c3464c1e4d712692db86f50207315a566767a49e7b7a4102919d2f72791aff8d3a7aaf2a27ed406f01516c","ssdeep":"768:9LcpJ31FycE22R2Qfk9vEodzfQu6qjo6dvTW4jVv:23y06ejQu6qLvTpv","tlshash":"7b230aedb7a562e0e844e7f59a2954b43f2b18fe3e16c724c2598f64f94105cc8d9cc2","first_seen":"2026-01-22T01:53:14.342559Z","last_seen":"2026-06-07T12:20:26.920769Z","times_seen":214,"resource_available":false,"data":null}},"time_used":433,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":375,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrop.moonbirbes.xyz/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7SUc.woff2","fqdn":"airdrop.moonbirbes.xyz","domain":"moonbirbes.xyz","tld":"xyz"},"ip":{"addr":"172.67.182.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://airdrop.moonbirbes.xyz/","date":"2026-01-28T19:43:29.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonbirbes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 16:53:44 GMT","end":"Tue, 28 Apr 2026 17:51:30 GMT"},"fingerprint":{"sha1":"2B:FC:9A:91:B8:B0:EB:D4:BA:0B:FE:0B:02:C8:A7:E0:0C:F9:A2:D0","sha256":"F6:4C:DA:42:8F:24:73:EC:6C:4B:BC:BC:B1:E1:6A:2D:04:57:08:56:24:E5:4F:D9:F3:90:B6:81:A1:B8:B6:18"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7SUc.woff2 HTTP/1.1\r\nHost: airdrop.moonbirbes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop.moonbirbes.xyz/css2-1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 19:43:30 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'none'\r\nx-content-type-options: nosniff, nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\nx-cast-cache: STALE\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mTBsgcc2MesbuABVRIf%2BlmsdfgOWDKeAWruSA9n2UNqYoMYOP6bV%2Fhu4Z%2FOi4lowlklT6l%2FOb86HCnaIiIcU5D%2FYm5nEj%2BWFjCC1JJdpZWzbbUrGUVg%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c52faa47a225fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":184,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"48481ddae1747dc916015d6397ff0aac","sha1":"3dbe6dfa4966ea0c26a2961738c3e92dd85513d5","sha256":"252e35c9e7ac24fb79dd66b140c352c693cdfe3a9568f98d0a55832ffad529f4","sha512":"27d41a2bc06c67f34053de4886e643bba392a5f415ee0fd359c1ec5b69b25c4a2768fbb87896bc4c51581fcb39cca6b63d53ed9319fdc314abf35e0189342d0b","ssdeep":"","tlshash":"16c080df10122205173597041ac1779436d73bdd16d6d6887b46f057dce466ac9c7398","first_seen":"2026-01-28T19:40:42.759697Z","last_seen":"2026-01-28T19:43:54.410802Z","times_seen":2,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrop.moonbirbes.xyz/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"airdrop.moonbirbes.xyz","domain":"moonbirbes.xyz","tld":"xyz"},"ip":{"addr":"172.67.182.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://airdrop.moonbirbes.xyz/","date":"2026-01-28T19:43:30.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonbirbes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 16:53:44 GMT","end":"Tue, 28 Apr 2026 17:51:30 GMT"},"fingerprint":{"sha1":"2B:FC:9A:91:B8:B0:EB:D4:BA:0B:FE:0B:02:C8:A7:E0:0C:F9:A2:D0","sha256":"F6:4C:DA:42:8F:24:73:EC:6C:4B:BC:BC:B1:E1:6A:2D:04:57:08:56:24:E5:4F:D9:F3:90:B6:81:A1:B8:B6:18"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: airdrop.moonbirbes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop.moonbirbes.xyz/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 19:43:30 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'none'\r\nx-content-type-options: nosniff, nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\nx-cast-cache: STALE\r\nage: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FQ2hy%2BIxkzxQ38cABH1IKfz54lXdL4cb1VKXB3A5MupqF93zCHey6rYwuKv1VfMKqDagwxcFDg4WFg9dgOWXJmj6ablGdZfP%2FJdzuXCTuekLZoIzIwA%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c52faa48a275fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":181,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"c63185c4c73181b44ee3a23844003ac1","sha1":"5af6fdbcf8284c9157b3305a964962a16ac67cf6","sha256":"a92d5e1b31ba73f854081a1dbce840f95c8864f6731df26c62c105f34d9bd20d","sha512":"daf98ec3bfa4017f4fb3733d762f4144f92ef4df282aa5d2b969fed51deee4aaa93c0cb79de5f5b1ec9904e38efeb6d0dcc08a50bd2b2cb7fb27d2b25efa56ca","ssdeep":"","tlshash":"d6c0809f20015105073557041fc1775836d73bed15da95447f47e057dce5756c5c7398","first_seen":"2026-01-28T19:40:42.761236Z","last_seen":"2026-01-28T19:43:54.411509Z","times_seen":2,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrop.moonbirbes.xyz/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7SUc.woff2","fqdn":"airdrop.moonbirbes.xyz","domain":"moonbirbes.xyz","tld":"xyz"},"ip":{"addr":"172.67.182.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://airdrop.moonbirbes.xyz/","date":"2026-01-28T19:43:30.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonbirbes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 16:53:44 GMT","end":"Tue, 28 Apr 2026 17:51:30 GMT"},"fingerprint":{"sha1":"2B:FC:9A:91:B8:B0:EB:D4:BA:0B:FE:0B:02:C8:A7:E0:0C:F9:A2:D0","sha256":"F6:4C:DA:42:8F:24:73:EC:6C:4B:BC:BC:B1:E1:6A:2D:04:57:08:56:24:E5:4F:D9:F3:90:B6:81:A1:B8:B6:18"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7SUc.woff2 HTTP/1.1\r\nHost: airdrop.moonbirbes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop.moonbirbes.xyz/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 19:43:30 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'none'\r\nx-content-type-options: nosniff, nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\nx-cast-cache: STALE\r\nage: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=urrq5cIBFglujFAMB5kgPTF6IXAgCrJoFq9ePN%2BIEhdbNTyC8UzbjwqG6lrfm7XwmRYUZhpVgamoUYvP9qjqHiLY5JYgQvxPmA%2BsZK8%2B3bVEsH9UerA%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c52faa48a295fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":184,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"48481ddae1747dc916015d6397ff0aac","sha1":"3dbe6dfa4966ea0c26a2961738c3e92dd85513d5","sha256":"252e35c9e7ac24fb79dd66b140c352c693cdfe3a9568f98d0a55832ffad529f4","sha512":"27d41a2bc06c67f34053de4886e643bba392a5f415ee0fd359c1ec5b69b25c4a2768fbb87896bc4c51581fcb39cca6b63d53ed9319fdc314abf35e0189342d0b","ssdeep":"","tlshash":"16c080df10122205173597041ac1779436d73bdd16d6d6887b46f057dce466ac9c7398","first_seen":"2026-01-28T19:40:42.759697Z","last_seen":"2026-01-28T19:43:54.410802Z","times_seen":2,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrop.moonbirbes.xyz/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"airdrop.moonbirbes.xyz","domain":"moonbirbes.xyz","tld":"xyz"},"ip":{"addr":"172.67.182.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://airdrop.moonbirbes.xyz/","date":"2026-01-28T19:43:30.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonbirbes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 16:53:44 GMT","end":"Tue, 28 Apr 2026 17:51:30 GMT"},"fingerprint":{"sha1":"2B:FC:9A:91:B8:B0:EB:D4:BA:0B:FE:0B:02:C8:A7:E0:0C:F9:A2:D0","sha256":"F6:4C:DA:42:8F:24:73:EC:6C:4B:BC:BC:B1:E1:6A:2D:04:57:08:56:24:E5:4F:D9:F3:90:B6:81:A1:B8:B6:18"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: airdrop.moonbirbes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop.moonbirbes.xyz/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 19:43:30 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'none'\r\nx-content-type-options: nosniff, nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\nx-cast-cache: STALE\r\nage: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9KGU4gw19ie1l62PK6aJf7d3BY13yOw1Z4tCjmsnfQPXYBFsZw%2FMY4b6P2sCopfZrJh80BjCRnOZd3v6fGajLbIUahmbJtF10GvElpe0wSBPvdEwwHU%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c52faa6ea505fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":181,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"c63185c4c73181b44ee3a23844003ac1","sha1":"5af6fdbcf8284c9157b3305a964962a16ac67cf6","sha256":"a92d5e1b31ba73f854081a1dbce840f95c8864f6731df26c62c105f34d9bd20d","sha512":"daf98ec3bfa4017f4fb3733d762f4144f92ef4df282aa5d2b969fed51deee4aaa93c0cb79de5f5b1ec9904e38efeb6d0dcc08a50bd2b2cb7fb27d2b25efa56ca","ssdeep":"","tlshash":"d6c0809f20015105073557041fc1775836d73bed15da95447f47e057dce5756c5c7398","first_seen":"2026-01-28T19:40:42.761236Z","last_seen":"2026-01-28T19:43:54.411509Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrop.moonbirbes.xyz/bafkreifesrdorgmwpy2zfrnzvqb5guc7petxirvf2v2vaxqntytmrwyyw4.png","fqdn":"airdrop.moonbirbes.xyz","domain":"moonbirbes.xyz","tld":"xyz"},"ip":{"addr":"172.67.182.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://airdrop.moonbirbes.xyz/","date":"2026-01-28T19:43:30.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonbirbes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 16:53:44 GMT","end":"Tue, 28 Apr 2026 17:51:30 GMT"},"fingerprint":{"sha1":"2B:FC:9A:91:B8:B0:EB:D4:BA:0B:FE:0B:02:C8:A7:E0:0C:F9:A2:D0","sha256":"F6:4C:DA:42:8F:24:73:EC:6C:4B:BC:BC:B1:E1:6A:2D:04:57:08:56:24:E5:4F:D9:F3:90:B6:81:A1:B8:B6:18"}}},"request":{"raw":"GET /bafkreifesrdorgmwpy2zfrnzvqb5guc7petxirvf2v2vaxqntytmrwyyw4.png HTTP/1.1\r\nHost: airdrop.moonbirbes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop.moonbirbes.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 19:43:30 GMT\r\ncontent-type: image/png\r\ncontent-length: 5394\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 28 Jan 2026 17:27:50 GMT\r\netag: W/\"1512-19c05a5b182\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pBvzQ9jWAZZgmIpJfy1E2tCf%2FBjbxj%2FrXAwrwmfUydBn13uSh1icrCZmIGdYSLwbTn0ryy%2FunNPHKBOw0EFFlhsHaMSgVQF52V58xrylKzLTg60fTD0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c52faa77a575fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":5394,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 401x402, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"eef71258de7a12a58e89d1c68ef2e51f","sha1":"9e85a5060491bb5b0fbf1a9aaef60dab9db26e95","sha256":"f072f55ffb215073c0978c77ed3be187fec4a05c6c0e60b8ff93af31038a2518","sha512":"1285a7ae2bf1b1a461930421a28bbde59f5870ce8eb56024d42af3b3cbd8200f2483c63a1c94162209b4fdf53f58dc7a4fbe83dcb9d3a69fb7366aa5005615d0","ssdeep":"96:bc9zQiAcqa5i9427nNZAtmWdFPFcjUI2uwOpT44H6jJ10khmd4nZAhwusX0+b:46b/f9xYtmWbFc/2IT49jztHb","tlshash":"b8b18d070997883a3c8b36afdd7006644304896f9e385bddf466c732862da53062ed9f","first_seen":"2026-01-27T11:12:46.141967Z","last_seen":"2026-02-14T07:55:45.650171Z","times_seen":18,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrop.moonbirbes.xyz/secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fdayjs.esm.min.js%3Ft%3D29493823%26u%3DyHbvCglwwSMI2ZDpGDY5MjU2NDRlMjhjZmYzYzM0MDI3ZGZjZq1_pbqJ1SHc3zpNCg","fqdn":"airdrop.moonbirbes.xyz","domain":"moonbirbes.xyz","tld":"xyz"},"ip":{"addr":"172.67.182.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://airdrop.moonbirbes.xyz/","date":"2026-01-28T19:43:30.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonbirbes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 16:53:44 GMT","end":"Tue, 28 Apr 2026 17:51:30 GMT"},"fingerprint":{"sha1":"2B:FC:9A:91:B8:B0:EB:D4:BA:0B:FE:0B:02:C8:A7:E0:0C:F9:A2:D0","sha256":"F6:4C:DA:42:8F:24:73:EC:6C:4B:BC:BC:B1:E1:6A:2D:04:57:08:56:24:E5:4F:D9:F3:90:B6:81:A1:B8:B6:18"}}},"request":{"raw":"GET /secureproxy?s=%2F%40v1%2Fcdn%2Fjs%2Fdayjs.esm.min.js%3Ft%3D29493823%26u%3DyHbvCglwwSMI2ZDpGDY5MjU2NDRlMjhjZmYzYzM0MDI3ZGZjZq1_pbqJ1SHc3zpNCg HTTP/1.1\r\nHost: airdrop.moonbirbes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop.moonbirbes.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 19:43:30 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\nvary: Accept-Encoding\r\ncache-control: no-store, must-revalidate, no-cache\r\netag: W/\"9c80a-go5AMoyo/3QPEJDm9j4XDBWSpiw\"\r\nexpires: 0\r\npragma: no-cache\r\ncontent-disposition: attachment; filename=dayjs.esm.min.js\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 01/28/2026 19:43:30\r\ncdn-edgestorageid: 1056\r\ncdn-requestid: 82d3ededd7546bba85c74499457b5cef\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yyAnoMWVcrYA0xPDectVXsCsvOUtytekuyMQPlP9owJICiazNQkbKP4WulxFNFpP6wvIuj3c%2B37UpM3iQ6sL3RhJTa1%2BBDBgSw8p32FCyw3NN%2BvC7aI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c52faa7aa585fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":641034,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c835ce0aa761a791b29ba4c102a85e28","sha1":"828e40328ca8ff740f1090e6f63e170c1592a62c","sha256":"4ee6631554867dc1bfadbfe5f4b4ebf4cec5164ba142f8db92f840c2028496cf","sha512":"49cefc3ca9614cebafe201eef12b5cdebcdd19da6ab30f530d7a81a8ef91fca5f02eb63108b8056c2dbd4c22b8b337aae939a712f4a876bdeef21a1e2a9f3225","ssdeep":"6144:9ujB8gltIeTM5/S8g6zRhNgDzQebuazBzqXQPkBAUvVdZcml4L:ihltVM/g6ZszQeqazNqXQcBvK","tlshash":"29d4bcec970a167788cb97b6423363afef884d1a236b3c406ec19cd1574a74e53ea15c","first_seen":"2026-01-01T19:22:06.925398Z","last_seen":"2026-03-30T11:52:16.142566Z","times_seen":405,"resource_available":true,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":143,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrop.moonbirbes.xyz/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"airdrop.moonbirbes.xyz","domain":"moonbirbes.xyz","tld":"xyz"},"ip":{"addr":"172.67.182.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://airdrop.moonbirbes.xyz/","date":"2026-01-28T19:43:29.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonbirbes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 16:53:44 GMT","end":"Tue, 28 Apr 2026 17:51:30 GMT"},"fingerprint":{"sha1":"2B:FC:9A:91:B8:B0:EB:D4:BA:0B:FE:0B:02:C8:A7:E0:0C:F9:A2:D0","sha256":"F6:4C:DA:42:8F:24:73:EC:6C:4B:BC:BC:B1:E1:6A:2D:04:57:08:56:24:E5:4F:D9:F3:90:B6:81:A1:B8:B6:18"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: airdrop.moonbirbes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop.moonbirbes.xyz/css2-1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 19:43:30 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'none'\r\nx-content-type-options: nosniff, nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\nx-cast-cache: STALE\r\nage: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6VsEmGHoF7cZ4pE8MBNYawBIbrjidvskda92u23GfA0UH80lPQHlQlcjGPd%2BKavtaQ9PJB7OW2dQi3mWn5U54F3MHXLT4GnpT7P6TNJham45Qhga6zs%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c52faa47a205fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":181,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"c63185c4c73181b44ee3a23844003ac1","sha1":"5af6fdbcf8284c9157b3305a964962a16ac67cf6","sha256":"a92d5e1b31ba73f854081a1dbce840f95c8864f6731df26c62c105f34d9bd20d","sha512":"daf98ec3bfa4017f4fb3733d762f4144f92ef4df282aa5d2b969fed51deee4aaa93c0cb79de5f5b1ec9904e38efeb6d0dcc08a50bd2b2cb7fb27d2b25efa56ca","ssdeep":"","tlshash":"d6c0809f20015105073557041fc1775836d73bed15da95447f47e057dce5756c5c7398","first_seen":"2026-01-28T19:40:42.761236Z","last_seen":"2026-01-28T19:43:54.411509Z","times_seen":2,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrop.moonbirbes.xyz/skfhx.css","fqdn":"airdrop.moonbirbes.xyz","domain":"moonbirbes.xyz","tld":"xyz"},"ip":{"addr":"172.67.182.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://airdrop.moonbirbes.xyz/","date":"2026-01-28T19:43:29.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonbirbes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 16:53:44 GMT","end":"Tue, 28 Apr 2026 17:51:30 GMT"},"fingerprint":{"sha1":"2B:FC:9A:91:B8:B0:EB:D4:BA:0B:FE:0B:02:C8:A7:E0:0C:F9:A2:D0","sha256":"F6:4C:DA:42:8F:24:73:EC:6C:4B:BC:BC:B1:E1:6A:2D:04:57:08:56:24:E5:4F:D9:F3:90:B6:81:A1:B8:B6:18"}}},"request":{"raw":"GET /skfhx.css HTTP/1.1\r\nHost: airdrop.moonbirbes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop.moonbirbes.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 19:43:29 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 28 Jan 2026 17:27:50 GMT\r\netag: W/\"493e-19c05a5b19e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7zEvo3WTVVe4XD3%2Fs7iztnTp%2BnbWi4JBa7lxOJ5BwUs%2BhTPwn2AJ7jA32xs%2B5mUh73RAng40IHU8VDG%2Fkl3hz%2BspC7guYvRDkdjlbtjFdk3Wau510Sk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c52faa16a0b5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":18750,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"82aef9a3e1c80478f5323ae7a8ae7668","sha1":"7eb9f4a4d04cba5dca28002dada802abf4c42974","sha256":"5d3197ca298eb840cb43e77bf3fbb6c75bfa01280d4975ba225004c5da5c3934","sha512":"de21db733b730f86bd48a3d43aad885bd42e8166878800363d83bc4673165514a20753ac166c3ee70bb8667eacb69e9f6da7cc1a0c1eedc962318d9899b8fc19","ssdeep":"192:uS6ipGfMckARAjQl+7BNL8k/83Vt5uwrfaTcboz8Dd3AY5UtkJdeENMCKUC0hHv2:adDFuBJ9/GTjvd6bUHyV","tlshash":"018206d2276950247d3bf5582ba79b4db3a8e042990aca7d7bd4206c5fc93ec11e3b4c","first_seen":"2026-01-27T11:12:46.136264Z","last_seen":"2026-02-14T07:55:45.650736Z","times_seen":16,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":398,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrop.moonbirbes.xyz/css2-1.css","fqdn":"airdrop.moonbirbes.xyz","domain":"moonbirbes.xyz","tld":"xyz"},"ip":{"addr":"172.67.182.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://airdrop.moonbirbes.xyz/","date":"2026-01-28T19:43:29.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonbirbes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 16:53:44 GMT","end":"Tue, 28 Apr 2026 17:51:30 GMT"},"fingerprint":{"sha1":"2B:FC:9A:91:B8:B0:EB:D4:BA:0B:FE:0B:02:C8:A7:E0:0C:F9:A2:D0","sha256":"F6:4C:DA:42:8F:24:73:EC:6C:4B:BC:BC:B1:E1:6A:2D:04:57:08:56:24:E5:4F:D9:F3:90:B6:81:A1:B8:B6:18"}}},"request":{"raw":"GET /css2-1.css HTTP/1.1\r\nHost: airdrop.moonbirbes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop.moonbirbes.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 19:43:29 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 28 Jan 2026 17:27:50 GMT\r\netag: W/\"22ac-19c05a5b186\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AeZfk54B81vCTBKCtAJaPYtUF9XTL5rCH1QYXX9Ulaqbz0BYJY5t95i5ZaIs7Jv%2BNRtEHGxtE7LakRAUpCIuRq5QPbfg8l5EW0d8TfHMWgV47yQcPNk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c52faa16a0c5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":8876,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"32d1fd2d07f445f23195a2cd483c0a46","sha1":"c0de21743339926a1ce72a9218fb2adbd6ff8340","sha256":"cc5506f8da260c59c421a591a46298de671810d49540a3759866657c4f23401e","sha512":"b70b499c15b205fde524cae8907ff2d80b2f34e412f6ef3d02972b67abd70137cabda9842417b1662f06f93d32fc1a740f807de1f05ac83f8b6d7e812eeac3e9","ssdeep":"192:9TNe7m34MJD7TOdUm3/TJ8eTrUdm3iWJldTE7em3R1JGk:h/P0NNPq7","tlshash":"f802ab91042b5100e7970cd627cf3f366edc2148a049dabc2ffd188aaceadb953a574d","first_seen":"2024-12-13T17:42:20.393767Z","last_seen":"2026-06-06T08:48:04.04893Z","times_seen":635,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrop.moonbirbes.xyz/expo.plus.umd.js","fqdn":"airdrop.moonbirbes.xyz","domain":"moonbirbes.xyz","tld":"xyz"},"ip":{"addr":"172.67.182.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://airdrop.moonbirbes.xyz/","date":"2026-01-28T19:43:29.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonbirbes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 16:53:44 GMT","end":"Tue, 28 Apr 2026 17:51:30 GMT"},"fingerprint":{"sha1":"2B:FC:9A:91:B8:B0:EB:D4:BA:0B:FE:0B:02:C8:A7:E0:0C:F9:A2:D0","sha256":"F6:4C:DA:42:8F:24:73:EC:6C:4B:BC:BC:B1:E1:6A:2D:04:57:08:56:24:E5:4F:D9:F3:90:B6:81:A1:B8:B6:18"}}},"request":{"raw":"GET /expo.plus.umd.js HTTP/1.1\r\nHost: airdrop.moonbirbes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop.moonbirbes.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 19:43:29 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 28 Jan 2026 17:27:50 GMT\r\netag: W/\"57151-19c05a5b18a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oYyakTj1%2FgHmECPb19Dx0qQUcCndYlV7pep7d5PWw2oyFaKmFYB4VOXZVxRssWui0CrQ4WVW9XTO04kYiU%2B%2FS9l1Bt9lLHVhkQTM%2BnQUnOsEB5eaDD0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c52faa16a0e5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":356689,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65159)","md5":"9d6e766f86dddc9309f038984cb455d5","sha1":"5c48eb526660faab3b19b990d87cdac1dcd64cb6","sha256":"996565832f7347a13905fa90dd612fa618d64bce518aa8d645c54cfdea91fabf","sha512":"fd8b17e9cd28707bf33be9f4ae9a7ec7416d5abf2497431977a0997620eacfc98d3d62cb7d6679b9b2a9dcc0c3bab0f4dea6ce5229c0bc70b5d4938f79be7743","ssdeep":"3072:WHeWADq5XhlkXMPz6uEwLiEpLG/bAb5p0bGg4Pvg8k8FsUeaznX1:W+WADq5XheXMPQjEpPb55wi","tlshash":"96743eff098350bd823853db74a5c5b98efcb9524b882c2be7a55645f81066634e33b3","first_seen":"2026-01-27T12:09:53.495616Z","last_seen":"2026-01-28T19:43:54.417007Z","times_seen":7,"resource_available":true,"data":null}},"time_used":554,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":442,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrop.moonbirbes.xyz/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7SUc.woff2","fqdn":"airdrop.moonbirbes.xyz","domain":"moonbirbes.xyz","tld":"xyz"},"ip":{"addr":"172.67.182.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://airdrop.moonbirbes.xyz/","date":"2026-01-28T19:43:30.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonbirbes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 16:53:44 GMT","end":"Tue, 28 Apr 2026 17:51:30 GMT"},"fingerprint":{"sha1":"2B:FC:9A:91:B8:B0:EB:D4:BA:0B:FE:0B:02:C8:A7:E0:0C:F9:A2:D0","sha256":"F6:4C:DA:42:8F:24:73:EC:6C:4B:BC:BC:B1:E1:6A:2D:04:57:08:56:24:E5:4F:D9:F3:90:B6:81:A1:B8:B6:18"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7SUc.woff2 HTTP/1.1\r\nHost: airdrop.moonbirbes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop.moonbirbes.xyz/css2-1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 19:43:30 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'none'\r\nx-content-type-options: nosniff, nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\nx-cast-cache: STALE\r\nage: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ptClHAxdVbBz1%2BzUyjHni8ZNLceIddYSkvdzk09xEqruUwoWUxNi80%2FUzZOcKfwKgpyNACTEwX3bd7hYG5o%2FHqB3jItDOet9qSDNGBOPnqQbOm579Ck%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c52faa48a285fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":184,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"48481ddae1747dc916015d6397ff0aac","sha1":"3dbe6dfa4966ea0c26a2961738c3e92dd85513d5","sha256":"252e35c9e7ac24fb79dd66b140c352c693cdfe3a9568f98d0a55832ffad529f4","sha512":"27d41a2bc06c67f34053de4886e643bba392a5f415ee0fd359c1ec5b69b25c4a2768fbb87896bc4c51581fcb39cca6b63d53ed9319fdc314abf35e0189342d0b","ssdeep":"","tlshash":"16c080df10122205173597041ac1779436d73bdd16d6d6887b46f057dce466ac9c7398","first_seen":"2026-01-28T19:40:42.759697Z","last_seen":"2026-01-28T19:43:54.410802Z","times_seen":2,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrop.moonbirbes.xyz/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"airdrop.moonbirbes.xyz","domain":"moonbirbes.xyz","tld":"xyz"},"ip":{"addr":"172.67.182.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://airdrop.moonbirbes.xyz/","date":"2026-01-28T19:43:30.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonbirbes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 16:53:44 GMT","end":"Tue, 28 Apr 2026 17:51:30 GMT"},"fingerprint":{"sha1":"2B:FC:9A:91:B8:B0:EB:D4:BA:0B:FE:0B:02:C8:A7:E0:0C:F9:A2:D0","sha256":"F6:4C:DA:42:8F:24:73:EC:6C:4B:BC:BC:B1:E1:6A:2D:04:57:08:56:24:E5:4F:D9:F3:90:B6:81:A1:B8:B6:18"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: airdrop.moonbirbes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop.moonbirbes.xyz/css2-1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 19:43:30 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'none'\r\nx-content-type-options: nosniff, nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\nx-cast-cache: STALE\r\nage: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=14Bj89hf1qHVeynuEp41gtGRxXRuSR5NhAiJDWUEDjtJDNjAxzrClGOIATn%2BQIwpvMUCfwqcyXlwiniJ8GXg2JzDFXzBT3J8M2zTP0NX1QwsgD5tmPs%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c52faa49a2a5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":181,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"c63185c4c73181b44ee3a23844003ac1","sha1":"5af6fdbcf8284c9157b3305a964962a16ac67cf6","sha256":"a92d5e1b31ba73f854081a1dbce840f95c8864f6731df26c62c105f34d9bd20d","sha512":"daf98ec3bfa4017f4fb3733d762f4144f92ef4df282aa5d2b969fed51deee4aaa93c0cb79de5f5b1ec9904e38efeb6d0dcc08a50bd2b2cb7fb27d2b25efa56ca","ssdeep":"","tlshash":"d6c0809f20015105073557041fc1775836d73bed15da95447f47e057dce5756c5c7398","first_seen":"2026-01-28T19:40:42.761236Z","last_seen":"2026-01-28T19:43:54.411509Z","times_seen":2,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrop.moonbirbes.xyz//secureproxy?s=%2Fjmpd%2F","fqdn":"airdrop.moonbirbes.xyz","domain":"moonbirbes.xyz","tld":"xyz"},"ip":{"addr":"172.67.182.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://airdrop.moonbirbes.xyz/","date":"2026-01-28T19:43:31.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonbirbes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 16:53:44 GMT","end":"Tue, 28 Apr 2026 17:51:30 GMT"},"fingerprint":{"sha1":"2B:FC:9A:91:B8:B0:EB:D4:BA:0B:FE:0B:02:C8:A7:E0:0C:F9:A2:D0","sha256":"F6:4C:DA:42:8F:24:73:EC:6C:4B:BC:BC:B1:E1:6A:2D:04:57:08:56:24:E5:4F:D9:F3:90:B6:81:A1:B8:B6:18"}}},"request":{"raw":"POST //secureproxy?s=%2Fjmpd%2F HTTP/1.1\r\nHost: airdrop.moonbirbes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://airdrop.moonbirbes.xyz/\r\ncontent-type: application/json\r\nContent-Length: 2212\r\nOrigin: https://airdrop.moonbirbes.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2212,"data":"{\"route\":\"8XUwkBv9vhPYfVpD1fxb7EC65sUXJdqr\",\"payload\":\"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\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 19:43:31 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\ncdn-pullzone: 4623665\r\ncdn-requestcountrycode: NL\r\ncache-control: no-cache\r\netag: W/\"db-w4v2tRWfJ9K8ixFOUovCaHL9a6I\"\r\nx-ratelimit-limit: 10000\r\nx-ratelimit-remaining: 9999\r\nx-ratelimit-reset: 1769629471306\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 01/28/2026 19:43:31\r\ncdn-edgestorageid: 883\r\ncdn-requestid: 357f517190eda146aaf5c76645bc4520\r\ncdn-requesttime: 0\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YOM%2Bp7EcLdRCdyGbMP5hp7vhs38YpGRpvIHzyiPuvChXCopUNNFx3%2FxqK9QBWB%2BpwKNieyWmZh9xJ3iSG4FF2pC6l0zwid5yyI3RfYDbdmF87MkXjM4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c52faac3a995fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":219,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"89bd5866427225f1c270b593939e936b","sha1":"c38bf6b5159f27d2bc8b114e528bc26872fd6ba2","sha256":"aa7a422717a630222a688102cc4a5593f330229668d2a0aea30733e8b80acf9b","sha512":"fa758a87ad83278df5038e2a1224e50f5dcd929d6f1310404e0cc210e1367165084286cdba035b967f61dc1370c85a2dd9ff1d1e72daa9f9c4fb0efb69b69970","ssdeep":"","tlshash":"65d0974825a68fa990121ec08000bee63162e01000c004ea320484073c30dc4ae30299","first_seen":"2026-01-28T19:43:54.417512Z","last_seen":"2026-01-28T19:43:54.417512Z","times_seen":1,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":342,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrop.moonbirbes.xyz/","fqdn":"airdrop.moonbirbes.xyz","domain":"moonbirbes.xyz","tld":"xyz"},"ip":{"addr":"172.67.182.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-28T19:43:28.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonbirbes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 16:53:44 GMT","end":"Tue, 28 Apr 2026 17:51:30 GMT"},"fingerprint":{"sha1":"2B:FC:9A:91:B8:B0:EB:D4:BA:0B:FE:0B:02:C8:A7:E0:0C:F9:A2:D0","sha256":"F6:4C:DA:42:8F:24:73:EC:6C:4B:BC:BC:B1:E1:6A:2D:04:57:08:56:24:E5:4F:D9:F3:90:B6:81:A1:B8:B6:18"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: airdrop.moonbirbes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 19:43:29 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0\r\nlast-modified: Wed, 28 Jan 2026 17:27:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FENPW%2BrXdJokNwRSZvjc7iYAl45ANNPvxPvH1zB1xuBcWUW7bgr8Vdj12nx1O7wznFKRQwSST7w9NniML2qM6tUmGIc%2Fz0NM8yQ8rdVkE74KUPsSLgs%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9c52fa9e0b78b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":45196,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (20650)","md5":"03a068f747d50081c9f06be3f3e7755d","sha1":"97abdec585e46bfd70f413898b9a56525dfedcec","sha256":"c90deaaca55dbf6b687281a436f038c27c775c1ede629b3d908a6395a85bf4cf","sha512":"238c7db72d85145303e8c158499682d5101c73d81a442f69db077fbf66532c7835c770cd2460f97dc8264fcaeca6415b0008092459a92cb46ff8d21e62b9a54f","ssdeep":"768:o+Fd767hPgNPrmzQH2L0r82It4uSRhKut5NFgl+FU+xHyvfSDIJPJWf3b8fzwZPx:dCzOLBKZJ/ow6AvzoCokY","tlshash":"75133160f450283b351ba1ef2ac28f6d75baa452c827661873fc81c2dfd5ef69d63814","first_seen":"2026-01-27T12:09:53.504694Z","last_seen":"2026-01-28T19:43:54.418437Z","times_seen":8,"resource_available":false,"data":null}},"time_used":425,"timings":{"blocked":16,"dns":1,"connect":1,"send":0,"wait":389,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrop.moonbirbes.xyz/css2.css","fqdn":"airdrop.moonbirbes.xyz","domain":"moonbirbes.xyz","tld":"xyz"},"ip":{"addr":"172.67.182.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://airdrop.moonbirbes.xyz/","date":"2026-01-28T19:43:29.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonbirbes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 16:53:44 GMT","end":"Tue, 28 Apr 2026 17:51:30 GMT"},"fingerprint":{"sha1":"2B:FC:9A:91:B8:B0:EB:D4:BA:0B:FE:0B:02:C8:A7:E0:0C:F9:A2:D0","sha256":"F6:4C:DA:42:8F:24:73:EC:6C:4B:BC:BC:B1:E1:6A:2D:04:57:08:56:24:E5:4F:D9:F3:90:B6:81:A1:B8:B6:18"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: airdrop.moonbirbes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop.moonbirbes.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 19:43:29 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\nlast-modified: Wed, 28 Jan 2026 17:27:50 GMT\r\netag: W/\"1833-19c05a5b182\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JtAo%2FgA%2BE4%2BHOturgRmONXAaN2A2w2iGt9cvdWQHrX6WnfwWVQMalJrXJiaTMvZdm6JUP%2B13o4uMPozrMc03C7OVcXtZtVRrfiKLcc4QcISFOdUxf6k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c52faa16a095fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":6195,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"091a432ce5732c51a183d557901b2425","sha1":"59f1739cbdc6040616f9e4eb170b9bbd3e133d3a","sha256":"2932a0893c6528b13291ff909d3a5b368013a206e3b519e9471c8e104a4ddd20","sha512":"96bd8044dff1a0abcb0c02fe30fe5ae41128ad3e382c8a22cf844d8d38a88081c2ff4114c439d5a6becd2af49c9a4fd679e78a46c63b643fc3274ea403508f97","ssdeep":"192:fTPUZm3KuJxZTk/mm3thJ+UTpm/m3o8J3k:rxDOZjc","tlshash":"56d19d91042f500063971cd663ce3f365edd6148a049da783ffd1c9aaceadba53a174d","first_seen":"2026-01-27T11:12:46.13403Z","last_seen":"2026-02-14T07:55:45.651285Z","times_seen":16,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":366,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"airdrop.moonbirbes.xyz/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"airdrop.moonbirbes.xyz","domain":"moonbirbes.xyz","tld":"xyz"},"ip":{"addr":"172.67.182.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://airdrop.moonbirbes.xyz/","date":"2026-01-28T19:43:29.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"moonbirbes.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 28 Jan 2026 16:53:44 GMT","end":"Tue, 28 Apr 2026 17:51:30 GMT"},"fingerprint":{"sha1":"2B:FC:9A:91:B8:B0:EB:D4:BA:0B:FE:0B:02:C8:A7:E0:0C:F9:A2:D0","sha256":"F6:4C:DA:42:8F:24:73:EC:6C:4B:BC:BC:B1:E1:6A:2D:04:57:08:56:24:E5:4F:D9:F3:90:B6:81:A1:B8:B6:18"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: airdrop.moonbirbes.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://airdrop.moonbirbes.xyz/css2-1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\nserver: cloudflare\r\ndate: Wed, 28 Jan 2026 19:43:30 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncontent-security-policy: default-src 'none'\r\nx-content-type-options: nosniff, nosniff\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\nx-cast-cache: STALE\r\nage: 0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hJivRCwMWleS4qG7tAfsX%2FJWKkfObfsF2hOBrZ389n%2FKoaajZrNbmYdabDXENiWo0sbc4FIGAOOIWR1oPul0iSvkCxT47zGvT38IzmSEqygXwbpauoo%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9c52faa47a235fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":181,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"c63185c4c73181b44ee3a23844003ac1","sha1":"5af6fdbcf8284c9157b3305a964962a16ac67cf6","sha256":"a92d5e1b31ba73f854081a1dbce840f95c8864f6731df26c62c105f34d9bd20d","sha512":"daf98ec3bfa4017f4fb3733d762f4144f92ef4df282aa5d2b969fed51deee4aaa93c0cb79de5f5b1ec9904e38efeb6d0dcc08a50bd2b2cb7fb27d2b25efa56ca","ssdeep":"","tlshash":"d6c0809f20015105073557041fc1775836d73bed15da95447f47e057dce5756c5c7398","first_seen":"2026-01-28T19:40:42.761236Z","last_seen":"2026-01-28T19:43:54.411509Z","times_seen":2,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}